$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa File: ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa (raw, json) Hash identifier: wNvcyiKPaiO5XpjX2pTMpmoV4DC2FT2C5hZZA18jBBk= Subject key identifier: C7:8B:DA:AA:7A:F6:C0:46:36:D1:58:3B:5C:6F:A8:72:20:95:1A:40 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB66824F875CF406E2EC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:66:82:4f:87:5c:f4:06:e2:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d44f63f9-7558-42e5-a4d8-014de8673d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e9:10:8a:f7:3e:11:a0:a1:90:4a:a8:00:c1: e8:36:f9:ae:2e:9b:3e:fe:30:bc:fa:68:fd:94:c7: e5:59:b6:1c:32:07:3a:ae:4e:56:19:5d:84:05:d6: b9:22:4c:cd:91:f1:92:73:a3:5b:e3:7f:6c:8c:07: d2:48:6f:59:7b:5a:89:84:b1:86:c0:11:cd:53:9b: 74:3d:bf:43:ba:c7:76:9a:6c:37:9e:42:f2:ee:7d: 03:6a:9b:b3:08:7c:9d:12:30:45:bd:f6:bf:ab:88: 5c:82:76:d7:95:63:7e:4e:5c:64:99:a3:35:d6:09: f7:43:3d:41:14:89:6b:35:19:0a:9b:5e:58:d4:f5: 78:ec:81:33:cc:b1:9c:2d:96:79:2b:f1:81:de:06: d1:4f:dd:cc:71:9a:fe:15:46:65:e8:5a:56:f3:0c: 39:39:f5:97:4d:0e:06:b5:7e:69:73:2a:91:d7:62: 6e:e8:a6:b3:87:24:4f:84:99:61:68:bf:7f:65:c4: e3:87:d6:3b:28:1e:be:b9:41:0b:a0:f5:fe:9e:e2: 64:55:97:fb:7b:80:c2:16:9a:2e:8b:d6:69:7c:a3: ac:1f:48:41:01:09:14:d2:9d:47:f1:df:1a:95:47: 81:fc:6e:92:b2:03:1f:0d:08:9e:05:b7:69:66:ee: 0a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8B:DA:AA:7A:F6:C0:46:36:D1:58:3B:5C:6F:A8:72:20:95:1A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:62:eb:85:9f:53:1a:41:b3:ba:06:52:5e:34:9b:94:f6:cb: f9:3f:a2:17:ba:48:3a:ce:b8:69:58:58:38:2b:b8:c5:d5:01: 8e:08:5a:99:05:bf:c2:c2:fd:ca:9d:4a:b4:21:13:7e:50:28: 67:84:a3:05:a5:08:f4:1c:2e:c3:0a:43:84:0a:bb:3b:9d:6b: e6:fd:f3:01:04:df:12:aa:54:6e:94:51:cc:20:2b:78:fa:4c: 1e:58:d7:12:64:a2:c3:d0:7e:61:68:5d:4a:d1:56:15:56:61: 22:03:c5:4b:be:2f:fc:a7:ac:7d:aa:b6:ae:95:88:f5:b9:78: 16:d5:3c:3d:c7:63:aa:f8:aa:a3:57:65:5c:b4:9f:23:63:5a: 29:3e:ac:b6:7a:ad:68:2f:e0:f3:71:99:43:9b:e0:08:59:6a: a0:c2:0e:83:56:26:ce:0a:e9:7f:6d:03:24:6b:4c:71:e1:00: 93:3d:1f:cb:6c:8c:1b:d0:9b:7e:2c:ec:07:ca:ae:d1:cb:24: da:17:db:8d:42:58:f3:c4:4e:da:8e:a8:33:81:37:e0:5c:60: 05:07:b3:f9:a1:95:7a:78:4a:f0:09:28:12:39:d1:11:17:87: b3:9b:fd:b7:bc:46:a5:ea:55:ba:4d:96:88:90:79:a9:4b:b2: 96:75:20:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2aCT4dc9Abi7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ0ZjYzZjktNzU1OC00MmU1LWE0ZDgtMDE0ZGU4NjczZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiekQivc+EaChkEqoAMHoNvmuLps+/jC8+mj9 lMflWbYcMgc6rk5WGV2EBda5IkzNkfGSc6Nb439sjAfSSG9Ze1qJhLGGwBHNU5t0 Pb9Dusd2mmw3nkLy7n0DapuzCHydEjBFvfa/q4hcgnbXlWN+TlxkmaM11gn3Qz1B FIlrNRkKm15Y1PV47IEzzLGcLZZ5K/GB3gbRT93McZr+FUZl6FpW8ww5OfWXTQ4G tX5pcyqR12Ju6KazhyRPhJlhaL9/ZcTjh9Y7KB6+uUELoPX+nuJkVZf7e4DCFpou i9ZpfKOsH0hBAQkU0p1H8d8alUeB/G6SsgMfDQieBbdpZu4KVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeL2qp69sBGNtFYO1xvqHIglRpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWUxYjQ1M2MtOGJjZi0z Y2IzLTgwMjYtOTM1ZmI2MmU5M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApi64WfUxpBs7oGUl40m5T2y/k/ohe6SDrOuGlYWDgruMXVAY4IWpkF v8LC/cqdSrQhE35QKGeEowWlCPQcLsMKQ4QKuzuda+b98wEE3xKqVG6UUcwgK3j6 TB5Y1xJkosPQfmFoXUrRVhVWYSIDxUu+L/ynrH2qtq6ViPW5eBbVPD3HY6r4qqNX ZVy0nyNjWik+rLZ6rWgv4PNxmUOb4AhZaqDCDoNWJs4K6X9tAyRrTHHhAJM9H8ts jBvQm34s7AfKrtHLJNoX241CWPPETtqOqDOBN+BcYAUHs/mhlXp4SvAJKBI50REX h7Ob/be8RqXqVbpNloiQealLspZ1IFg= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:36 2025 by rpki-client