$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa File: 8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa (raw, json) Hash identifier: m/MgKu7Jwd8/GiuDwgJKC5xzhN+yqo4ano/gd8UvoiY= Subject key identifier: A6:01:D3:EC:31:9E:37:90:29:EA:E4:5C:9F:95:B1:22:FC:6F:25:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC23900C1539148F1C0C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c2:39:00:c1:53:91:48:f1:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=191aec38-5d6f-4535-b073-fd9abd3b24e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:33:94:d9:4c:e3:c0:e3:9d:5e:a0:4d:3a:3b: 26:de:aa:93:b5:ee:a2:a6:ef:1a:6d:a5:76:28:b6: 25:04:6b:70:e2:ad:c0:e6:61:2b:4b:1d:6e:01:ec: 23:ca:d1:a5:fc:68:f3:8b:25:de:6e:99:a4:ff:90: c7:d6:bc:f0:fc:48:96:1f:75:04:a2:11:42:a1:e9: 22:52:da:62:bb:8a:69:3b:10:bb:46:23:68:d0:27: 7b:ea:85:86:bf:2e:d6:56:7d:ff:1b:69:6e:68:de: bf:55:9e:cb:d9:4d:a2:77:d5:89:30:d3:95:34:67: d9:59:3b:c8:ad:7f:c9:e4:14:fb:34:4c:ab:41:28: 20:6e:bb:f4:b3:cb:9e:55:ae:cd:3c:e1:3a:4a:53: a7:4b:44:42:b0:df:62:b4:53:f8:92:53:c4:ed:4d: 58:fc:ee:eb:f7:d9:ef:9e:75:de:c4:05:72:b7:53: 45:10:be:0a:5f:73:d3:0b:4e:de:36:14:ce:87:76: 61:91:ea:5a:73:87:88:ac:dd:6a:42:10:ce:65:4a: 1d:fe:74:2f:44:fb:3d:c0:ed:82:64:be:93:46:b0: 7e:3c:2d:d7:f0:8e:df:11:69:44:34:a8:58:8d:c0: 7f:2c:24:33:36:08:37:97:25:df:5c:29:4c:1f:d8: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:01:D3:EC:31:9E:37:90:29:EA:E4:5C:9F:95:B1:22:FC:6F:25:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:eb:79:d7:b4:8c:c9:c9:b6:8d:83:3e:fc:0a:f0:46:c3:45: 27:a6:46:12:ec:6d:75:ee:eb:35:63:69:d4:62:fc:3a:38:1d: 1e:fc:5d:66:18:38:75:b3:87:ac:af:47:77:59:24:5f:a2:77: 91:20:86:5c:15:1a:c2:a4:1d:93:05:4a:ac:a9:d4:41:da:5c: 7f:b5:cc:10:bb:f5:6b:02:9b:61:40:f7:8c:3d:84:17:b8:a5: 64:60:c4:25:1f:dd:ee:e9:03:4e:da:38:5c:69:ff:c7:07:93: 0b:0d:42:d6:11:e6:0c:91:88:89:43:5d:06:ed:02:5a:57:f3: 3d:c3:1b:6b:72:3a:55:47:07:09:f4:98:b6:1a:08:de:69:dd: c5:c7:00:78:31:67:c8:46:3f:6f:91:cc:1f:11:1a:e9:c5:23: 06:0c:26:06:59:5e:17:14:1f:b9:c1:89:98:28:04:22:7f:c8: b5:33:36:7e:34:96:95:9b:ee:9b:4d:16:5e:cf:0a:d7:44:83: 73:7a:d2:b7:63:15:36:a8:31:e4:d6:81:cc:42:56:5c:38:6b: b9:02:80:44:60:db:37:ea:57:e7:4c:ff:08:4d:cc:6b:d0:f0: 46:fd:a8:ce:21:17:4d:a6:29:6c:02:f8:dc:5a:67:ba:73:48: fc:ee:38:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusI5AMFTkUjxwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTkxYWVjMzgtNWQ2Zi00NTM1LWIwNzMtZmQ5YWJkM2IyNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jOU2UzjwOOdXqBNOjsm3qqTte6ipu8abaV2 KLYlBGtw4q3A5mErSx1uAewjytGl/GjziyXebpmk/5DH1rzw/EiWH3UEohFCoeki Utpiu4ppOxC7RiNo0Cd76oWGvy7WVn3/G2luaN6/VZ7L2U2id9WJMNOVNGfZWTvI rX/J5BT7NEyrQSggbrv0s8ueVa7NPOE6SlOnS0RCsN9itFP4klPE7U1Y/O7r99nv nnXexAVyt1NFEL4KX3PTC07eNhTOh3Zhkepac4eIrN1qQhDOZUod/nQvRPs9wO2C ZL6TRrB+PC3X8I7fEWlENKhYjcB/LCQzNgg3lyXfXClMH9iZ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYB0+wxnjeQKerkXJ+VsSL8byWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGIzYzcxOTktOWQzMi0z MjBjLTg5ZDItMTY0Y2QwYmZjM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzrede0jMnJto2DPvwK8EbDRSemRhLsbXXu6zVjadRi/Do4HR78XWYY OHWzh6yvR3dZJF+id5EghlwVGsKkHZMFSqyp1EHaXH+1zBC79WsCm2FA94w9hBe4 pWRgxCUf3e7pA07aOFxp/8cHkwsNQtYR5gyRiIlDXQbtAlpX8z3DG2tyOlVHBwn0 mLYaCN5p3cXHAHgxZ8hGP2+RzB8RGunFIwYMJgZZXhcUH7nBiZgoBCJ/yLUzNn40 lpWb7ptNFl7PCtdEg3N60rdjFTaoMeTWgcxCVlw4a7kCgERg2zfqV+dM/whNzGvQ 8Eb9qM4hF02mKWwC+NxaZ7pzSPzuOLo= -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:28 2025 by rpki-client