$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8be47344-a631-3d2c-b2b7-dc3d503b692e.roa File: 8be47344-a631-3d2c-b2b7-dc3d503b692e.roa (raw, json) Hash identifier: SqbRAuDiYxg+7MJ9wPWvK4mjOh9zNizKyYU+Jt9hQV0= Subject key identifier: 17:93:CA:35:4F:0D:8F:4A:85:BC:FD:83:36:5F:91:EE:34:50:13:93 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6CACDF5D019DBF335440 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8be47344-a631-3d2c-b2b7-dc3d503b692e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6c:ac:df:5d:01:9d:bf:33:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f2aa4c62-a443-4851-90b9-2b928a05f6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:66:b3:ec:c1:7c:c1:18:c5:58:6d:dd:21: 6b:2d:de:6f:73:3b:45:13:d8:4f:37:f6:4b:87:ef: 9c:09:54:96:73:fb:50:b9:ab:44:22:13:02:6f:a6: 7c:ea:5c:e3:c7:82:63:59:4e:ff:68:9f:ea:c1:03: c7:e0:79:6a:e3:ad:f1:9c:48:87:f6:5c:84:41:a0: 25:85:47:d3:f3:d1:03:1f:fb:6e:77:42:88:df:72: 52:83:7e:0e:b5:7d:51:c2:4d:08:79:a3:41:f7:cd: 51:ce:55:c8:46:cb:d3:e4:fd:72:3d:1d:a3:0b:59: 27:5a:93:70:84:38:7b:a8:d7:92:ed:c9:16:f9:96: e0:dc:db:28:92:12:4e:9d:30:35:87:27:08:fc:1e: ed:da:37:33:78:a0:e9:3b:5e:cd:da:b2:a6:84:dd: 67:06:26:1a:02:67:f1:81:70:2d:d9:22:b3:95:67: 62:09:93:95:8d:39:48:58:bf:68:b4:c3:12:fb:6c: a9:98:0c:10:ab:99:f1:73:30:a4:d7:30:91:49:11: a9:2e:8e:8d:7b:54:41:a3:55:5d:3a:57:fc:cb:ce: 7c:f3:41:21:fb:57:bb:58:9a:8a:66:a0:85:d7:0d: 5f:38:35:dc:cd:3a:2d:9a:88:04:1f:5e:bb:bd:d0: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:93:CA:35:4F:0D:8F:4A:85:BC:FD:83:36:5F:91:EE:34:50:13:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8be47344-a631-3d2c-b2b7-dc3d503b692e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4f:5a:fa:71:9a:71:f1:f4:cf:07:96:64:0a:a0:0b:59:a2: 22:70:12:21:c2:09:48:86:0a:d8:52:81:7a:24:50:53:b2:23: 4d:8a:70:a6:d7:e3:55:7b:1d:59:b1:80:e5:53:da:93:30:8d: a3:4c:e0:6c:e9:39:07:8c:eb:24:f3:62:a2:49:cb:1b:1d:cd: d9:6c:28:3b:20:fa:b8:09:fd:6f:1e:85:76:8e:a7:db:69:3d: 1b:ad:78:ff:1b:4f:5f:98:a5:da:c0:ab:93:89:d1:b8:ae:ce: 73:46:5f:6d:c8:3f:ff:65:26:1c:00:44:df:21:84:44:9a:ef: d5:1d:10:ce:ec:c3:83:bf:e5:1a:98:88:ce:6f:88:8e:a3:63: d9:98:90:42:59:64:a1:3f:2d:ef:25:fe:26:af:44:09:8f:38: 46:ad:6a:61:87:a4:b8:6a:7f:4f:d1:4b:35:d5:3a:64:ea:36: 84:81:82:a1:94:f2:dd:6c:82:02:08:f4:21:ba:10:f6:36:2b: 98:58:7d:20:28:21:e9:a8:c4:7a:85:73:f1:7b:de:4f:fe:8d: 79:5d:6d:fa:80:cf:ac:18:fb:62:eb:3c:ac:5f:15:ac:9f:02: c0:e6:16:76:07:9f:39:b1:eb:c5:19:16:cb:95:3d:80:fe:3a: 9b:d3:78:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2ys310Bnb8zVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjJhYTRjNjItYTQ0My00ODUxLTkwYjktMmI5MjhhMDVmNmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUxms+zBfMEYxVht3SFrLd5vcztFE9hPN/ZL h++cCVSWc/tQuatEIhMCb6Z86lzjx4JjWU7/aJ/qwQPH4Hlq463xnEiH9lyEQaAl hUfT89EDH/tud0KI33JSg34OtX1Rwk0IeaNB981RzlXIRsvT5P1yPR2jC1knWpNw hDh7qNeS7ckW+Zbg3NsokhJOnTA1hycI/B7t2jczeKDpO17N2rKmhN1nBiYaAmfx gXAt2SKzlWdiCZOVjTlIWL9otMMS+2ypmAwQq5nxczCk1zCRSRGpLo6Ne1RBo1Vd Olf8y85880Eh+1e7WJqKZqCF1w1fODXczTotmogEH167vdB86QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeTyjVPDY9Khbz9gzZfke40UBOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGJlNDczNDQtYTYzMS0z ZDJjLWIyYjctZGMzZDUwM2I2OTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtPWvpxmnHx9M8HlmQKoAtZoiJwEiHCCUiGCthSgXokUFOyI02KcKbX 41V7HVmxgOVT2pMwjaNM4GzpOQeM6yTzYqJJyxsdzdlsKDsg+rgJ/W8ehXaOp9tp PRuteP8bT1+YpdrAq5OJ0biuznNGX23IP/9lJhwARN8hhESa79UdEM7sw4O/5RqY iM5viI6jY9mYkEJZZKE/Le8l/iavRAmPOEatamGHpLhqf0/RSzXVOmTqNoSBgqGU 8t1sggII9CG6EPY2K5hYfSAoIemoxHqFc/F73k/+jXldbfqAz6wY+2LrPKxfFayf AsDmFnYHnzmx68UZFsuVPYD+OpvTeJs= -----END CERTIFICATE-----Generated at Sun Apr 27 18:41:38 2025 by rpki-client