$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa File: d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa (raw, json) Hash identifier: LnLxjxcXIhyauMLxzceZEZKrB73owtW9iai/D8/iVWM= Subject key identifier: 2B:F5:49:85:B0:EA:39:A0:A8:74:4A:26:21:F4:F5:62:3A:56:72:52 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6160CC7F0108F2661A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:61:60:cc:7f:01:08:f2:66:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=54cf381c-fdda-4a82-a022-dff9885abb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ad:0d:c0:9e:4f:c9:8a:6b:1c:2a:e8:b2:b2: 37:db:c6:ca:36:95:1a:92:e1:78:f1:0e:82:71:39: 14:9a:75:c2:06:bc:f2:da:89:cb:a7:4d:38:05:34: e6:65:d7:ca:58:7c:ec:e7:ef:ad:23:f2:ee:62:5b: fb:08:2b:37:c8:a4:a7:ee:1c:75:d3:43:46:f0:62: 1e:ec:b0:8e:47:2d:48:0c:c4:e1:78:35:3e:78:8a: da:45:10:13:5e:d3:29:0a:30:0f:34:f2:02:23:f9: 80:05:f2:7d:a7:7f:ad:71:31:77:fa:22:dc:fd:b1: 81:93:d1:fe:b6:e0:28:45:4a:69:6b:ae:1d:5f:f1: 21:15:cc:89:95:05:bf:8c:6e:08:67:02:0b:02:00: a9:db:2e:c2:f7:92:a7:26:91:1b:f1:c8:f5:2e:98: 31:ee:e0:25:1d:4d:08:aa:96:7d:fd:90:8e:9a:02: ad:be:03:03:9b:40:8a:95:84:43:9e:a9:3e:e1:fa: d4:de:3a:48:84:1c:40:65:4b:ab:8e:44:b4:b7:83: 1d:51:7e:1e:e4:85:3c:5e:02:83:9c:53:06:3f:1f: df:ff:36:a1:97:0d:f4:6b:1a:69:0e:6d:9f:1c:86: 23:ba:3a:ab:2a:ab:65:8d:ad:b6:d4:5d:ad:dd:94: 13:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F5:49:85:B0:EA:39:A0:A8:74:4A:26:21:F4:F5:62:3A:56:72:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:04:97:f4:b8:1d:bf:1a:03:39:5f:40:5a:8e:76:e3:f3:bd: 59:5d:eb:85:b1:99:4d:21:9f:41:4e:b9:b3:4f:83:7b:5b:44: d2:66:f0:cd:89:b0:24:8a:bc:e9:93:c0:16:bc:35:e6:64:14: 43:f0:1d:c1:cf:27:ed:66:90:1f:bc:c8:d2:6a:c2:97:2b:70: a1:74:5e:ef:0b:b2:bd:1b:53:34:a8:fe:d2:23:09:e6:87:c1: 96:5c:58:54:d8:a0:88:18:1e:e6:3a:3c:86:7e:d8:28:65:57: 32:ec:f2:64:03:fa:cf:aa:1a:e8:f3:d6:f2:0a:e7:0b:7a:f0: 01:4f:28:0c:7e:1f:c8:51:5a:3f:4a:b7:d2:07:d0:28:5d:5b: dd:55:c3:77:42:15:02:a8:ac:b4:1d:2d:d6:bd:48:32:b4:a9: bd:33:77:1c:c0:f9:22:88:c6:38:9c:6c:65:df:18:01:da:a4: 9c:7e:c7:ce:af:45:97:61:60:97:ed:82:94:94:96:33:33:4f: df:a7:ef:c3:f2:6d:41:2a:7a:08:04:65:8b:0d:22:49:37:6b: ab:62:ce:c3:ed:1c:ec:e2:f1:3b:ee:84:f1:87:fe:cc:07:57: 46:25:60:4e:df:0b:6c:47:59:18:39:ad:74:50:79:38:5a:cf: 16:60:e2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2FgzH8BCPJmGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTRjZjM4MWMtZmRkYS00YTgyLWEwMjItZGZmOTg4NWFiYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga0NwJ5PyYprHCrosrI328bKNpUakuF48Q6C cTkUmnXCBrzy2onLp004BTTmZdfKWHzs5++tI/LuYlv7CCs3yKSn7hx100NG8GIe 7LCORy1IDMTheDU+eIraRRATXtMpCjAPNPICI/mABfJ9p3+tcTF3+iLc/bGBk9H+ tuAoRUppa64dX/EhFcyJlQW/jG4IZwILAgCp2y7C95KnJpEb8cj1Lpgx7uAlHU0I qpZ9/ZCOmgKtvgMDm0CKlYRDnqk+4frU3jpIhBxAZUurjkS0t4MdUX4e5IU8XgKD nFMGPx/f/zahlw30axppDm2fHIYjujqrKqtlja221F2t3ZQTcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv1SYWw6jmgqHRKJiH09WI6VnJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhmZWM3NGYtYTBiZS0z YzJlLWI2NzUtZDA1ZWQ3ZTY0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUEl/S4Hb8aAzlfQFqOduPzvVld64WxmU0hn0FOubNPg3tbRNJm8M2J sCSKvOmTwBa8NeZkFEPwHcHPJ+1mkB+8yNJqwpcrcKF0Xu8Lsr0bUzSo/tIjCeaH wZZcWFTYoIgYHuY6PIZ+2ChlVzLs8mQD+s+qGujz1vIK5wt68AFPKAx+H8hRWj9K t9IH0ChdW91Vw3dCFQKorLQdLda9SDK0qb0zdxzA+SKIxjicbGXfGAHapJx+x86v RZdhYJftgpSUljMzT9+n78PybUEqeggEZYsNIkk3a6tizsPtHOzi8TvuhPGH/swH V0YlYE7fC2xHWRg5rXRQeThazxZg4t0= -----END CERTIFICATE-----Generated at Mon Apr 28 15:24:48 2025 by rpki-client