$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8366470-ff64-3c68-b9d7-ec07565adb29.roa File: c8366470-ff64-3c68-b9d7-ec07565adb29.roa (raw, json) Hash identifier: eBRjNdtBOJb6yXhSPeUlSuN2UiwrVXzK9/j8+ZoiTYU= Subject key identifier: 2A:99:CD:58:E7:FC:C0:7F:04:5F:C6:DF:7E:1C:E1:66:40:77:1F:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6C2CF4030EDEA325CD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8366470-ff64-3c68-b9d7-ec07565adb29.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6c:2c:f4:03:0e:de:a3:25:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d7a6a2f3-f4b1-4184-a527-88452a56de53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:a3:a0:2d:88:1c:cb:ad:84:33:82:53:d1: d7:17:48:6c:be:df:59:c7:2b:20:bd:8e:e0:49:c7: 92:78:a2:d4:7b:a3:ce:3a:08:4c:41:a7:54:02:e3: 21:02:90:8e:a5:84:51:18:c7:f2:3a:1c:00:5f:20: aa:47:e2:76:ee:03:92:37:24:68:0f:e1:cc:22:88: 65:8c:20:7a:c2:db:e0:b4:3c:63:4e:aa:cc:46:5d: 28:0c:0c:35:31:04:7b:bc:ab:4a:92:61:10:16:07: 91:0e:f2:49:69:2b:cb:9f:32:38:d1:38:e3:4e:82: 58:55:c8:ea:f1:13:3f:04:df:09:c2:1d:17:ba:b4: 5d:6e:d8:4f:65:b9:18:aa:b8:97:95:57:34:3c:4f: 15:1a:e7:72:66:20:9a:cf:1c:3c:5e:27:2a:4e:05: ee:fa:b9:ae:5e:31:a4:a0:c4:a0:21:a0:9e:eb:d6: 07:c6:c2:c3:81:1a:dc:22:19:58:29:8d:11:1a:ca: 39:61:cb:6e:80:72:14:79:80:7e:e8:3a:a7:65:80: 73:28:cb:69:b0:f6:c7:22:05:f0:0a:c5:91:fe:44: 29:12:a4:be:63:2d:90:82:12:20:57:d6:67:96:2e: 75:70:70:ee:71:69:bd:36:5d:ac:b6:26:1a:e5:f7: 70:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:99:CD:58:E7:FC:C0:7F:04:5F:C6:DF:7E:1C:E1:66:40:77:1F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8366470-ff64-3c68-b9d7-ec07565adb29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1f:08:8e:33:cc:16:81:f8:fa:e8:7d:e2:49:f8:cb:91:fb: e6:94:a4:8d:aa:7d:dc:e8:51:2a:e7:0a:dd:9b:d4:31:59:86: 73:f5:ca:b4:6e:b5:1d:26:cb:e0:76:59:11:6e:19:c3:52:40: 3d:0c:68:fa:d0:b1:c4:67:f6:09:03:4a:66:23:e3:7b:32:ef: d4:10:91:32:40:e4:ed:16:e9:2a:c9:84:b7:3b:35:ca:cd:fa: c2:9b:ba:c0:2b:f1:cd:d7:62:7b:5d:77:23:2f:c8:29:b2:8a: bc:fb:95:7d:7d:57:d4:2c:b2:f4:79:7f:fe:f9:7c:04:7a:30: a4:aa:a8:b9:d9:73:57:23:12:3a:b9:ce:4e:57:c4:f8:68:a1: 3a:c5:30:cf:52:c5:19:58:e6:ea:6f:25:9a:be:21:3b:d5:a5: d5:fa:19:8e:ad:a7:99:c9:d7:bd:e4:00:a9:22:ee:9b:af:9e: d1:ff:ee:e9:fb:91:bc:5d:bb:92:99:e8:8d:d1:8f:11:ba:06: aa:08:6e:c4:02:97:e3:5d:bc:0f:d6:c0:cc:d8:cd:c9:1e:b5: a2:13:0a:ee:fc:81:c5:d7:6c:1c:14:5f:e9:79:ae:db:75:2f: 38:5c:9f:5c:14:27:c8:61:48:ce:22:f2:18:93:94:53:7f:ad: f9:38:10:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2ws9AMO3qMlzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDdhNmEyZjMtZjRiMS00MTg0LWE1MjctODg0NTJhNTZkZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqKjoC2IHMuthDOCU9HXF0hsvt9ZxysgvY7g SceSeKLUe6POOghMQadUAuMhApCOpYRRGMfyOhwAXyCqR+J27gOSNyRoD+HMIohl jCB6wtvgtDxjTqrMRl0oDAw1MQR7vKtKkmEQFgeRDvJJaSvLnzI40TjjToJYVcjq 8RM/BN8Jwh0XurRdbthPZbkYqriXlVc0PE8VGudyZiCazxw8XicqTgXu+rmuXjGk oMSgIaCe69YHxsLDgRrcIhlYKY0RGso5YctugHIUeYB+6DqnZYBzKMtpsPbHIgXw CsWR/kQpEqS+Yy2QghIgV9Znli51cHDucWm9Nl2stiYa5fdwZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqZzVjn/MB/BF/G334c4WZAdx8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzgzNjY0NzAtZmY2NC0z YzY4LWI5ZDctZWMwNzU2NWFkYjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2DrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUfCI4zzBaB+ProfeJJ+MuR++aUpI2qfdzoUSrnCt2b1DFZhnP1yrRu tR0my+B2WRFuGcNSQD0MaPrQscRn9gkDSmYj43sy79QQkTJA5O0W6SrJhLc7NcrN +sKbusAr8c3XYntddyMvyCmyirz7lX19V9QssvR5f/75fAR6MKSqqLnZc1cjEjq5 zk5XxPhooTrFMM9SxRlY5upvJZq+ITvVpdX6GY6tp5nJ173kAKki7puvntH/7un7 kbxdu5KZ6I3RjxG6BqoIbsQCl+NdvA/WwMzYzcketaITCu78gcXXbBwUX+l5rtt1 Lzhcn1wUJ8hhSM4i8hiTlFN/rfk4ED0= -----END CERTIFICATE-----Generated at Sat Apr 26 21:43:02 2025 by rpki-client