$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa File: f32520e4-c5ed-3c6e-8a5c-f42032642839.roa (raw, json) Hash identifier: OiKJ3uzJX4qmipM+4XZ9v5LQclzgL3kodp60pB6R0aU= Subject key identifier: 96:5D:6E:56:74:A5:63:59:0A:1E:4F:7F:B1:88:1D:D9:BF:7C:B3:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5FEDF72F9C54AB07FE60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5f:ed:f7:2f:9c:54:ab:07:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6ff3cc83-04d3-4584-b1b8-d0479d590cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:61:0c:32:d9:f5:a2:d4:92:1f:bb:2c:ab:eb: 95:28:a6:a0:21:98:5e:e0:f1:ac:b0:64:00:6b:15: 98:4f:bd:37:96:39:e5:d8:0a:fe:52:76:20:de:eb: 46:b9:14:d5:e6:70:e0:f3:eb:a5:88:e7:3c:9b:24: 3a:0d:88:6b:e2:d9:82:be:f5:38:af:fb:a4:6a:62: a9:98:a0:1b:8c:97:c8:7c:91:3b:9e:37:b1:63:9f: 30:31:6d:ce:1c:47:1e:df:01:98:2f:66:4b:e9:90: 34:9e:4c:aa:1b:7c:72:33:2c:a6:5e:d8:51:df:07: f8:20:97:30:74:2d:e4:f4:89:bd:f7:e6:3f:9b:06: 30:88:7a:7f:06:ad:d6:6b:cc:bb:6a:18:a5:b9:e1: c5:91:f0:3c:b1:56:1b:69:65:f6:f7:9d:3a:e9:37: 1d:de:cf:94:31:4c:7c:b3:b1:ac:98:72:ec:a8:e4: 6f:75:b2:6a:dc:74:ae:91:c2:1d:bc:bf:70:7b:ed: b2:9a:e1:6c:59:63:48:34:76:04:69:38:a5:12:73: 4b:9d:6a:ba:67:e0:6f:bd:0e:14:22:7d:75:7a:6b: ec:aa:bc:4c:03:55:84:00:32:24:18:75:20:44:23: 9e:99:55:92:9d:ba:f4:89:72:7e:9e:27:71:6d:35: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5D:6E:56:74:A5:63:59:0A:1E:4F:7F:B1:88:1D:D9:BF:7C:B3:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32520e4-c5ed-3c6e-8a5c-f42032642839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:37:36:35:5b:63:3f:83:ee:3f:87:f7:66:44:91:5f:e7:86: 92:16:ab:5c:c1:8f:48:2e:c0:6b:49:a2:1e:6c:36:fd:34:22: 68:3c:f4:d4:0d:11:95:30:61:75:b4:64:bb:d6:d1:52:0a:bf: 6e:7f:6a:76:c9:32:da:2f:de:40:71:6d:1c:c4:ba:a0:1d:f9: 42:ff:28:4e:99:8d:3f:46:70:1e:ad:74:02:cd:23:ce:7c:dc: fb:8b:21:3c:9d:66:11:e8:56:21:33:8d:f3:99:61:65:87:c1: 74:5d:60:98:8f:76:a9:21:3a:35:75:33:7c:28:3f:3b:4c:5b: 1b:2e:39:c1:57:ba:e3:9d:3f:6c:fc:6c:9a:2a:1e:5d:81:1d: b2:2d:d9:85:a4:7f:7a:0b:5a:16:b4:cd:5c:f7:1e:51:9b:57: f0:2d:30:8c:2a:47:27:ad:8a:39:8a:f8:86:6a:d5:99:6a:73: 06:74:bb:bf:6d:ad:e4:92:f9:fd:a6:10:06:d9:02:62:d3:ba: 63:43:4f:60:76:cd:d0:a6:e1:ab:24:bc:9b:e9:67:2d:40:8b: 02:3d:a4:0e:93:29:23:95:f1:9d:91:b2:96:81:2b:1b:9a:c1: d9:67:67:01:30:43:13:3e:61:a8:f7:f6:43:51:7f:cf:ee:3b: 9a:e1:67:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1/t9y+cVKsH/mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmZmM2NjODMtMDRkMy00NTg0LWIxYjgtZDA0NzlkNTkwY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WEMMtn1otSSH7ssq+uVKKagIZhe4PGssGQA axWYT703ljnl2Ar+UnYg3utGuRTV5nDg8+uliOc8myQ6DYhr4tmCvvU4r/ukamKp mKAbjJfIfJE7njexY58wMW3OHEce3wGYL2ZL6ZA0nkyqG3xyMyymXthR3wf4IJcw dC3k9Im99+Y/mwYwiHp/Bq3Wa8y7ahilueHFkfA8sVYbaWX295066Tcd3s+UMUx8 s7GsmHLsqORvdbJq3HSukcIdvL9we+2ymuFsWWNINHYEaTilEnNLnWq6Z+BvvQ4U In11emvsqrxMA1WEADIkGHUgRCOemVWSnbr0iXJ+nidxbTVAtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZdblZ0pWNZCh5Pf7GIHdm/fLPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjMyNTIwZTQtYzVlZC0z YzZlLThhNWMtZjQyMDMyNjQyODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ03NjVbYz+D7j+H92ZEkV/nhpIWq1zBj0guwGtJoh5sNv00Img89NQN EZUwYXW0ZLvW0VIKv25/anbJMtov3kBxbRzEuqAd+UL/KE6ZjT9GcB6tdALNI858 3PuLITydZhHoViEzjfOZYWWHwXRdYJiPdqkhOjV1M3woPztMWxsuOcFXuuOdP2z8 bJoqHl2BHbIt2YWkf3oLWha0zVz3HlGbV/AtMIwqRyetijmK+IZq1ZlqcwZ0u79t reSS+f2mEAbZAmLTumNDT2B2zdCm4askvJvpZy1AiwI9pA6TKSOV8Z2RspaBKxua wdlnZwEwQxM+Yaj39kNRf8/uO5rhZzI= -----END CERTIFICATE-----Generated at Mon Apr 28 01:56:15 2025 by rpki-client