$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa File: a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa (raw, json) Hash identifier: 5Gns6w8I7QVT5TvZ21ucsLbD4SGPSGaXA0ERvYl8NG4= Subject key identifier: DC:FB:4E:E2:63:71:F1:38:74:79:4D:59:EF:F0:B4:B0:9E:CA:A9:9E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5C34F24813C76F36C040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 209.85.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5c:34:f2:48:13:c7:6f:36:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=129f2e0b-aef1-4ebc-ac5e-7772b7c6c689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4f:0a:f1:be:f5:54:cc:5f:13:47:9b:a8:16: 32:36:e9:83:82:60:92:c9:1e:eb:7e:86:12:5e:52: 31:04:28:84:49:f9:09:c8:ad:06:2b:0e:55:51:94: fa:ce:f8:8e:c7:8e:e6:18:16:fb:dd:1a:c6:d7:f3: 0d:bd:d6:f9:ce:e5:38:29:e3:17:91:6f:75:37:6e: db:aa:c5:45:79:ab:e4:1d:0d:3c:44:80:13:70:4e: 74:cc:23:1c:c6:a9:54:f7:a0:5d:8d:a5:3c:ce:42: e3:a2:eb:36:f2:21:41:5e:2d:cb:a4:72:5c:10:fb: 31:01:76:28:12:9d:f3:55:55:f9:a3:08:a5:a1:f6: 7d:5a:2d:09:96:52:50:c0:36:6e:e2:1b:fa:fe:4d: 04:55:bc:fd:90:a3:66:f6:4c:e9:3c:70:86:b8:af: 0d:19:40:c8:f3:27:15:3c:44:55:d5:cd:9a:3c:ae: b1:59:db:c1:08:b7:49:d5:07:19:ce:28:49:63:d9: d3:62:2b:06:82:91:c2:5b:88:b1:cc:09:aa:02:98: ea:e6:1c:84:f3:43:26:35:9a:bc:29:79:80:8e:5e: a7:c2:16:68:fb:af:1d:22:0f:71:3b:32:21:97:6c: ef:b5:ae:01:8b:ca:8b:c4:18:ce:a1:9b:ff:c4:36: 07:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FB:4E:E2:63:71:F1:38:74:79:4D:59:EF:F0:B4:B0:9E:CA:A9:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:66:ec:34:83:28:95:ad:85:cc:01:4e:f1:55:96:ef:c0:e7: 23:13:f9:60:79:73:a6:c1:b6:ea:19:5b:da:fc:91:79:b4:98: c2:3d:20:93:88:64:af:2f:0c:f2:c3:7b:59:53:25:5c:f7:a4: 48:e4:b8:c5:c1:9d:d0:ea:3f:08:3b:d1:8b:db:4e:45:f8:45: e9:23:f5:b1:2d:f3:1e:93:20:a2:88:3a:c6:08:46:ed:5a:39: 51:f5:a9:6f:15:25:f1:bb:25:d3:3a:e7:08:2a:19:84:a4:37: 25:44:75:a6:22:50:d3:24:53:4b:ee:86:aa:39:f4:23:bd:9c: d2:83:38:d8:0c:7b:15:46:b0:de:fd:ec:79:e8:6d:d1:a6:1e: 4f:03:1d:cf:e8:d9:6a:d9:3a:ca:9f:06:8c:ed:a3:a7:09:f4: d0:b4:6f:98:fd:5d:57:8f:2c:22:49:3c:ba:ba:f3:b8:06:3b: 3e:7b:9d:cf:a4:8f:51:4a:78:8d:27:64:ad:93:10:d3:8e:9b: 13:63:ed:c1:f5:95:47:fa:a2:7e:51:64:d0:a9:ed:ab:db:8f: 4d:9f:6f:ed:bc:64:9f:72:e2:fb:2f:8c:a3:5d:9d:50:ca:9d: e7:d9:8f:76:54:8f:23:14:f2:3c:34:05:dd:19:85:aa:80:e1: b7:56:72:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1w08kgTx282wEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTI5ZjJlMGItYWVmMS00ZWJjLWFjNWUtNzc3MmI3YzZjNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk8K8b71VMxfE0ebqBYyNumDgmCSyR7rfoYS XlIxBCiESfkJyK0GKw5VUZT6zviOx47mGBb73RrG1/MNvdb5zuU4KeMXkW91N27b qsVFeavkHQ08RIATcE50zCMcxqlU96BdjaU8zkLjous28iFBXi3LpHJcEPsxAXYo Ep3zVVX5owilofZ9Wi0JllJQwDZu4hv6/k0EVbz9kKNm9kzpPHCGuK8NGUDI8ycV PERV1c2aPK6xWdvBCLdJ1QcZzihJY9nTYisGgpHCW4ixzAmqApjq5hyE80MmNZq8 KXmAjl6nwhZo+68dIg9xOzIhl2zvta4Bi8qLxBjOoZv/xDYH+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz7TuJjcfE4dHlNWe/wtLCeyqmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTc5NTJiYzEtZTFkMy0z M2RkLTk2ODQtOWM5YjBiOTI1YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VWRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVm7DSDKJWthcwBTvFVlu/A5yMT+WB5c6bBtuoZW9r8kXm0mMI9IJOI ZK8vDPLDe1lTJVz3pEjkuMXBndDqPwg70YvbTkX4Rekj9bEt8x6TIKKIOsYIRu1a OVH1qW8VJfG7JdM65wgqGYSkNyVEdaYiUNMkU0vuhqo59CO9nNKDONgMexVGsN79 7HnobdGmHk8DHc/o2WrZOsqfBozto6cJ9NC0b5j9XVePLCJJPLq687gGOz57nc+k j1FKeI0nZK2TENOOmxNj7cH1lUf6on5RZNCp7avbj02fb+28ZJ9y4vsvjKNdnVDK nefZj3ZUjyMU8jw0Bd0ZhaqA4bdWcpA= -----END CERTIFICATE-----Generated at Sun Apr 27 09:29:29 2025 by rpki-client