$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa File: d5e70c7e-2fb9-323c-a160-17182970c9ca.roa (raw, json) Hash identifier: 9jCnJtyyeG2Ipqugu7cBf6JZNWJ75twRcVWnMg1N3sA= Subject key identifier: 39:E7:0F:55:4A:D1:86:61:78:04:D7:EA:2D:81:21:D7:B1:5E:D4:D5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACAF75C5CA509C6494280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ca:f7:5c:5c:a5:09:c6:49:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=98a4ef81-c994-4446-9021-5b3a4fafe256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:06:65:d8:09:2c:47:c5:0e:8a:bc:1e:59: 24:ba:a2:b0:8f:b3:4d:0f:53:95:5a:fc:ad:cb:4e: 1e:95:40:fd:e8:70:e7:69:17:cc:78:0c:3b:4d:17: ef:95:73:eb:7e:ab:8b:48:01:7a:67:a1:6f:8c:74: a9:74:96:d5:a2:26:d6:52:4f:a6:80:ca:77:08:8d: 0e:2b:1d:7b:6e:9b:5d:69:24:b5:8e:3d:fe:58:ce: ef:6a:a7:e5:68:cb:45:ce:5f:b1:87:e5:c5:f7:ba: ce:78:f2:53:f6:42:63:ac:34:b7:68:9d:6b:73:c8: e8:d9:b2:64:dc:25:ea:99:24:e5:49:7f:82:4e:10: f3:47:b4:39:df:96:06:bb:e5:2d:d4:32:63:b3:5f: 3c:4a:da:46:64:90:ab:2d:db:e7:82:34:af:eb:96: ab:68:6b:42:f8:01:d7:91:e9:e6:8f:45:8f:0d:65: 1c:4f:d7:45:27:42:99:9a:c7:5f:19:5a:a5:d2:74: 86:6e:39:54:8b:a1:7f:14:51:17:8e:3d:db:14:9c: 0d:e8:76:69:29:7d:f9:3a:16:a4:c9:13:d1:a5:46: 56:b1:0c:19:ab:c4:99:f9:09:a2:4f:17:7f:7b:5b: 16:1f:97:41:c7:d3:82:38:b5:ef:28:3a:21:50:0b: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E7:0F:55:4A:D1:86:61:78:04:D7:EA:2D:81:21:D7:B1:5E:D4:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:20:ae:81:91:53:d5:f3:d1:b0:83:c7:75:82:f3:74:ef:70: 3f:d1:71:21:55:0d:be:ac:43:7a:be:cf:8d:82:33:fb:5c:58: bc:47:c2:ed:61:18:20:0a:a4:64:ff:e8:4a:24:da:b0:7a:54: 5a:fa:07:db:1a:64:23:57:94:fb:58:1b:54:82:b7:07:1a:e7: 33:66:f3:8d:ac:76:da:b6:ed:e5:c6:23:f0:60:92:3a:27:4a: 40:c1:8b:0c:09:f4:34:17:6b:77:cd:22:bb:21:36:9c:75:8f: ff:b8:33:f9:4c:6b:80:58:2d:06:c0:1a:b4:05:a3:f6:43:b2: 6f:30:e9:f7:a9:f5:28:29:4a:42:a0:4e:4b:d1:54:bd:db:d1: 9c:41:94:b4:7c:96:97:c7:1b:eb:d6:d7:4c:1c:ac:c7:bb:23: d7:52:84:0c:aa:01:e8:07:4f:54:eb:b4:b6:be:8c:89:0a:ae: a6:36:97:46:d1:26:b0:8e:4b:06:c8:39:87:80:1e:36:73:37: c9:e0:63:f1:78:0f:24:dd:56:e4:9f:1f:3e:35:aa:7b:4d:d8: ae:6e:6c:e7:49:51:f8:92:bb:30:a5:40:3f:0d:5f:5a:36:8f: ea:4b:50:3f:1a:b4:74:a9:97:e9:05:bc:12:69:20:ce:d4:a3: e8:46:f2:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusr3XFylCcZJQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OThhNGVmODEtYzk5NC00NDQ2LTkwMjEtNWIzYTRmYWZlMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmUGZdgJLEfFDoq8HlkkuqKwj7NND1OVWvyt y04elUD96HDnaRfMeAw7TRfvlXPrfquLSAF6Z6FvjHSpdJbVoibWUk+mgMp3CI0O Kx17bptdaSS1jj3+WM7vaqflaMtFzl+xh+XF97rOePJT9kJjrDS3aJ1rc8jo2bJk 3CXqmSTlSX+CThDzR7Q535YGu+Ut1DJjs188StpGZJCrLdvngjSv65araGtC+AHX kenmj0WPDWUcT9dFJ0KZmsdfGVql0nSGbjlUi6F/FFEXjj3bFJwN6HZpKX35Ohak yRPRpUZWsQwZq8SZ+QmiTxd/e1sWH5dBx9OCOLXvKDohUAvYRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnnD1VK0YZheATX6i2BIdexXtTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDVlNzBjN2UtMmZiOS0z MjNjLWExNjAtMTcxODI5NzBjOWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsgroGRU9Xz0bCDx3WC83TvcD/RcSFVDb6sQ3q+z42CM/tcWLxHwu1h GCAKpGT/6Eok2rB6VFr6B9saZCNXlPtYG1SCtwca5zNm842sdtq27eXGI/Bgkjon SkDBiwwJ9DQXa3fNIrshNpx1j/+4M/lMa4BYLQbAGrQFo/ZDsm8w6fep9SgpSkKg TkvRVL3b0ZxBlLR8lpfHG+vW10wcrMe7I9dShAyqAegHT1TrtLa+jIkKrqY2l0bR JrCOSwbIOYeAHjZzN8ngY/F4DyTdVuSfHz41qntN2K5ubOdJUfiSuzClQD8NX1o2 j+pLUD8atHSpl+kFvBJpIM7Uo+hG8mw= -----END CERTIFICATE-----Generated at Tue Apr 29 00:55:12 2025 by rpki-client