$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa File: c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa (raw, json) Hash identifier: iEBWX/PgjrNkKLGQRxAlFp5C5xnVkPTN/BDEDIox2Lo= Subject key identifier: 33:3E:77:9B:D8:1B:EC:3A:65:71:99:41:A8:0B:54:58:BA:A3:E4:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2D4FD2AEF04FE42E8C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2d:4f:d2:ae:f0:4f:e4:2e:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=9bfaefdb-b516-4a83-b7ac-477d3b3014c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:6b:d8:94:56:86:4f:d0:34:39:67:1c:f0: a3:44:06:9f:ae:b6:25:71:ba:c3:dc:60:14:8d:ba: d1:70:61:36:2a:a3:a5:f8:47:29:c8:0e:ec:c3:54: 58:fb:c6:27:94:ea:67:b3:c6:56:40:42:f1:e8:55: f9:b5:52:ca:4e:fa:4e:5e:de:e5:90:5d:5b:38:0d: 1d:78:c6:70:13:14:cb:e7:cd:fd:8d:36:1a:11:ea: 1c:4e:0a:d6:0f:fd:cc:05:fe:7f:f6:32:ff:04:46: cc:05:5f:41:73:b2:e2:2f:4f:75:fc:bd:91:f4:d3: 9f:fb:da:b4:ca:0d:65:b0:2e:fe:d6:7e:ba:8b:67: e2:3a:73:37:27:aa:8d:16:67:2d:d4:c7:e9:ae:a9: 7c:75:99:ed:3f:a5:18:28:31:64:de:6f:69:34:f5: 69:e2:46:c0:a5:90:3a:73:86:28:60:26:1d:e8:74: 36:31:42:cb:75:15:03:c3:46:0e:f7:58:76:8b:00: 8e:7a:cd:4a:4e:ef:08:c8:08:3d:45:a6:be:9d:8e: 5f:c5:fb:04:e2:d6:bd:ea:c7:b0:4f:7c:a9:c3:d3: 25:16:81:a9:45:9f:1f:5d:54:eb:1c:f2:82:31:4c: 4b:5c:6d:e2:cf:7a:b7:d5:64:43:35:ee:5d:20:45: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:77:9B:D8:1B:EC:3A:65:71:99:41:A8:0B:54:58:BA:A3:E4:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8e05e8c-2a1f-30c4-a4e5-cfcf0192b791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e8:3b:7d:3a:8a:44:84:0c:27:54:2d:ed:ba:5a:8e:dc:fb: be:e8:27:0c:b0:55:32:36:00:29:b7:5b:89:11:ef:e7:3f:27: e7:47:8e:61:bd:d4:1b:15:ec:5d:67:f4:c7:04:50:fb:cc:1b: 85:d9:01:02:11:bf:71:9f:e3:a8:c9:34:19:46:ea:c8:45:58: 42:ca:01:3e:a4:0f:fc:9a:35:33:23:4c:ec:db:c9:96:8d:9e: ed:46:4c:a5:f7:55:b7:df:19:4a:1a:08:b0:ef:51:18:53:d9: 7f:f3:99:1e:5a:c1:2c:ba:8a:4f:25:44:4b:0a:21:2c:95:c4: c4:e7:6c:c8:cd:0a:b6:7d:db:8d:78:86:47:84:fa:fc:38:b6: ae:fc:a8:01:40:6b:81:1e:62:7b:db:c7:df:10:b8:0a:fd:c0: 38:e7:56:1d:f1:3d:60:e5:48:65:fd:7f:df:2e:c5:5f:71:23: 7a:c6:04:c7:98:76:e9:ed:4f:67:3c:65:55:6d:cf:94:82:b7: a0:87:dd:e7:e6:59:56:25:c8:77:9c:40:5a:1f:93:c3:4d:0c: a3:09:3d:4f:88:78:f9:43:e7:c6:73:ee:57:9a:4b:9c:f6:1f: 97:03:d3:d4:21:cb:69:ac:64:32:6c:b9:8b:ad:c4:9b:92:3b: aa:7e:f0:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i1P0q7wT+QujIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk OWJmYWVmZGItYjUxNi00YTgzLWI3YWMtNDc3ZDNiMzAxNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkhr2JRWhk/QNDlnHPCjRAafrrYlcbrD3GAU jbrRcGE2KqOl+EcpyA7sw1RY+8YnlOpns8ZWQELx6FX5tVLKTvpOXt7lkF1bOA0d eMZwExTL5839jTYaEeocTgrWD/3MBf5/9jL/BEbMBV9Bc7LiL091/L2R9NOf+9q0 yg1lsC7+1n66i2fiOnM3J6qNFmct1Mfprql8dZntP6UYKDFk3m9pNPVp4kbApZA6 c4YoYCYd6HQ2MULLdRUDw0YO91h2iwCOes1KTu8IyAg9Raa+nY5fxfsE4ta96sew T3ypw9MlFoGpRZ8fXVTrHPKCMUxLXG3iz3q31WRDNe5dIEVVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM+d5vYG+w6ZXGZQagLVFi6o+RGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzhlMDVlOGMtMmExZi0z MGM0LWE0ZTUtY2ZjZjAxOTJiNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXoO306ikSEDCdULe26Wo7c+77oJwywVTI2ACm3W4kR7+c/J+dHjmG9 1BsV7F1n9McEUPvMG4XZAQIRv3Gf46jJNBlG6shFWELKAT6kD/yaNTMjTOzbyZaN nu1GTKX3VbffGUoaCLDvURhT2X/zmR5awSy6ik8lREsKISyVxMTnbMjNCrZ92414 hkeE+vw4tq78qAFAa4EeYnvbx98QuAr9wDjnVh3xPWDlSGX9f98uxV9xI3rGBMeY duntT2c8ZVVtz5SCt6CH3efmWVYlyHecQFofk8NNDKMJPU+IePlD58Zz7leaS5z2 H5cD09Qhy2msZDJsuYutxJuSO6p+8Mg= -----END CERTIFICATE-----Generated at Tue Jun 17 01:39:56 2025 by rpki-client