$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa File: 8602a905-b263-30a4-8140-3c7d39eccf04.roa (raw, json) Hash identifier: jBdN86WA3F/5yoWMJ9m3VLAWBe0T+s0lyjYzVHkpmqc= Subject key identifier: 23:DB:93:47:A8:1D:D8:37:51:DC:72:53:F9:E8:F4:6B:6E:D8:D6:ED Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB64F3DE1C0CE48B6E8680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36040 IP address blocks: 209.85.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:64:f3:de:1c:0c:e4:8b:6e:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b89c4663-7753-4d6f-98e0-bdb573b5170c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:46:6d:ec:06:d1:16:4c:31:2c:db:79:1b: 9d:c8:6d:80:cf:8d:45:b8:48:b0:59:29:d0:f4:db: 2e:68:43:4f:9b:e9:89:e8:73:d9:cc:bd:e5:fc:d7: 13:88:d9:ba:76:26:d6:ae:19:6c:22:88:f6:29:a8: 7f:10:14:c7:a1:1c:4a:9e:4e:1a:1a:b6:17:f1:98: f3:30:81:85:fd:1c:b2:1e:69:f1:36:c0:d7:35:32: fb:9e:a6:75:c4:46:b6:02:09:13:e1:77:82:80:5e: 4e:01:51:79:97:41:eb:97:33:82:d2:d9:a0:5f:45: a6:23:00:4b:f6:40:89:d7:64:9b:e5:33:f8:67:cc: a0:0b:35:9a:cd:2a:63:12:df:3f:1f:b8:30:4a:37: 5b:2e:ea:1c:82:f9:1b:36:47:5e:c9:7b:56:51:ff: 45:85:b7:63:05:4c:dd:be:ff:d1:51:03:8c:4e:b2: 2c:ee:93:ed:1a:90:d7:7b:5e:23:ca:b3:ad:ac:00: a6:a1:3b:f9:9b:8e:47:6d:51:84:0e:29:a0:0c:41: 9d:be:04:f3:83:c8:93:b9:5e:29:97:f1:fe:71:28: 18:ca:c6:e1:cd:9a:a7:c0:59:37:3a:4c:10:a9:b8: b2:07:b1:3d:42:08:e4:fc:7d:b0:31:88:13:8a:8c: 65:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:93:47:A8:1D:D8:37:51:DC:72:53:F9:E8:F4:6B:6E:D8:D6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9b:da:00:de:93:d7:2a:46:c6:88:0e:7b:3e:7f:b7:d1:18: 2e:df:19:4e:af:c3:ec:8c:9f:70:62:04:61:60:c1:96:e7:6e: e1:a4:07:87:91:78:49:6c:b7:25:14:1e:75:f9:5a:7c:42:bd: 55:8d:da:74:a3:d8:54:08:0e:48:fc:08:8f:f3:1b:6a:36:f5: 2f:6e:5b:5f:0e:e4:74:38:5a:d6:ae:9e:fc:03:f8:c1:90:48: f2:aa:d9:4c:13:72:80:91:29:6f:47:33:eb:19:a5:ae:d0:aa: 92:a4:f2:4c:a8:58:42:6f:d8:1e:91:ae:bb:c3:56:00:f0:34: 48:9a:b0:a2:94:9e:28:82:3d:69:86:ed:de:1a:ea:a9:85:e0: 85:da:49:5f:f4:32:1d:5d:71:16:f9:fb:f3:64:c0:53:39:9d: b5:b6:64:c6:8e:34:4d:bb:f2:b6:c1:ba:8d:45:84:04:21:84: 17:47:74:4f:c0:a9:88:58:be:c2:fd:d2:82:2e:23:96:a2:47: 00:1e:27:87:26:dc:b6:82:54:40:d7:bd:7c:b8:e1:c4:c0:61: 30:da:da:60:d9:b6:72:1a:72:d4:44:a4:7e:63:d4:18:61:b9: 8f:13:c2:d8:c8:b9:3d:be:b6:33:e9:f3:45:ad:ea:40:06:c3: 54:95:83:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2Tz3hwM5ItuhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Yjg5YzQ2NjMtNzc1My00ZDZmLTk4ZTAtYmRiNTczYjUxNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7RGbewG0RZMMSzbeRudyG2Az41FuEiwWSnQ 9NsuaENPm+mJ6HPZzL3l/NcTiNm6dibWrhlsIoj2Kah/EBTHoRxKnk4aGrYX8Zjz MIGF/RyyHmnxNsDXNTL7nqZ1xEa2AgkT4XeCgF5OAVF5l0HrlzOC0tmgX0WmIwBL 9kCJ12Sb5TP4Z8ygCzWazSpjEt8/H7gwSjdbLuocgvkbNkdeyXtWUf9FhbdjBUzd vv/RUQOMTrIs7pPtGpDXe14jyrOtrACmoTv5m45HbVGEDimgDEGdvgTzg8iTuV4p l/H+cSgYysbhzZqnwFk3OkwQqbiyB7E9Qgjk/H2wMYgTioxlEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPbk0eoHdg3UdxyU/no9Gtu2NbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYwMmE5MDUtYjI2My0z MGE0LTgxNDAtM2M3ZDM5ZWNjZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+b2gDek9cqRsaIDns+f7fRGC7fGU6vw+yMn3BiBGFgwZbnbuGkB4eR eElstyUUHnX5WnxCvVWN2nSj2FQIDkj8CI/zG2o29S9uW18O5HQ4WtaunvwD+MGQ SPKq2UwTcoCRKW9HM+sZpa7QqpKk8kyoWEJv2B6RrrvDVgDwNEiasKKUniiCPWmG 7d4a6qmF4IXaSV/0Mh1dcRb5+/NkwFM5nbW2ZMaONE278rbBuo1FhAQhhBdHdE/A qYhYvsL90oIuI5aiRwAeJ4cm3LaCVEDXvXy44cTAYTDa2mDZtnIactREpH5j1Bhh uY8TwtjIuT2+tjPp80Wt6kAGw1SVgws= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:12 2025 by rpki-client