$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa File: 42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa (raw, json) Hash identifier: K0idwteQemFqdUg5JGG1m3p9fGNQlnbm7LTXWHeBXlY= Subject key identifier: FD:25:F9:1C:32:BE:B1:70:ED:A7:10:E8:E3:47:DC:22:F7:2A:27:BC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5F9E50451344F002B100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5f:9e:50:45:13:44:f0:02:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e416ccaf-a69f-4c73-9b3d-fec2045be026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:e4:5a:4a:fc:e9:7e:5c:02:79:cc:1d:0c: 83:5d:f1:43:8e:ff:27:8d:e3:31:ec:20:24:6b:67: ad:be:5c:e7:c1:d8:ae:51:b9:c7:12:fc:82:74:5e: 00:23:2f:44:bb:a5:33:2c:4b:d0:29:5d:34:ae:b2: 83:77:ab:52:a4:45:6d:c0:fe:df:a3:8b:62:e3:7b: 23:04:46:3c:3d:31:a2:28:c1:c1:b2:47:db:ce:4b: 61:53:68:e9:f9:a9:ce:fa:af:11:f3:cf:ce:62:69: ee:fb:fe:80:50:5c:62:01:c6:90:24:92:06:16:28: 18:07:04:da:a1:3e:67:c0:7a:a4:8b:94:ef:fc:66: af:0a:2e:ed:c6:30:a6:81:6f:27:3a:cd:34:64:96: 6e:18:80:4d:71:37:15:79:14:b7:1e:7c:dc:83:c5: cd:d5:49:ab:39:ae:be:44:cd:97:f8:18:89:5e:2f: 90:3f:84:39:4f:f6:0a:72:0f:cc:24:ad:04:6b:b3: 64:7c:ae:05:d0:26:9b:22:5c:43:c3:cc:98:9c:94: d2:30:b9:cf:b4:03:68:43:8d:4d:5e:3e:70:6d:f4: f6:1b:df:9d:6b:3d:07:cb:e5:15:47:8b:17:2b:b0: 96:31:ef:16:1b:e4:a1:04:c5:88:7d:1d:3e:fb:13: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:25:F9:1C:32:BE:B1:70:ED:A7:10:E8:E3:47:DC:22:F7:2A:27:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:fd:5d:85:af:d3:b8:be:25:93:e2:07:7a:1d:c5:7d:91:dc: bb:c6:c9:a9:37:de:d5:b5:0a:31:c2:a1:6c:26:06:8d:d0:44: ae:fc:5a:3e:09:9e:ae:83:6d:4c:de:cd:33:cf:6e:42:2d:25: fc:aa:04:aa:7e:c0:d5:b5:15:15:56:9e:f2:91:18:fa:00:f6: ca:73:05:7a:b9:25:ef:97:46:68:93:cb:e8:a5:58:63:1d:bb: 27:97:e5:8f:39:c1:4f:ec:a6:af:cb:35:1c:7c:0e:7d:76:a1: 6d:ab:e7:d7:81:3b:fb:9f:ca:38:21:b5:5f:9e:cb:16:ee:31: c6:72:e9:1c:b2:ff:79:2a:d8:6e:ae:fd:d7:68:28:33:70:28: 1e:5c:89:b1:c6:ea:92:c6:c8:d3:de:11:49:27:cc:c4:58:ff: 32:cc:64:b3:b9:13:ab:59:9d:e7:78:a0:3b:6d:33:14:f3:0f: 1c:12:16:90:b2:ce:2c:8d:0f:09:95:63:ee:0a:ec:8f:8c:b5: c6:fa:02:90:9a:57:73:6d:ce:d5:8a:93:56:09:f2:ea:0e:28: b0:35:34:89:f9:1a:fe:6a:df:ad:5f:fc:f0:e7:f0:fe:8c:2d: 11:1e:a9:80:9d:dc:e3:c3:84:f1:6e:af:f6:f7:e5:5f:8a:77: 0d:60:66:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1+eUEUTRPACsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTQxNmNjYWYtYTY5Zi00YzczLTliM2QtZmVjMjA0NWJlMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1jkWkr86X5cAnnMHQyDXfFDjv8njeMx7CAk a2etvlznwdiuUbnHEvyCdF4AIy9Eu6UzLEvQKV00rrKDd6tSpEVtwP7fo4ti43sj BEY8PTGiKMHBskfbzkthU2jp+anO+q8R88/OYmnu+/6AUFxiAcaQJJIGFigYBwTa oT5nwHqki5Tv/GavCi7txjCmgW8nOs00ZJZuGIBNcTcVeRS3Hnzcg8XN1UmrOa6+ RM2X+BiJXi+QP4Q5T/YKcg/MJK0Ea7NkfK4F0CabIlxDw8yYnJTSMLnPtANoQ41N Xj5wbfT2G9+daz0Hy+UVR4sXK7CWMe8WG+ShBMWIfR0++xPD+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0l+RwyvrFw7acQ6ONH3CL3Kie8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDI5OTdmYzYtNWE1ZS0z ODBlLWJmYmUtOWE2OTM1YzZjMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn9XYWv07i+JZPiB3odxX2R3LvGyak33tW1CjHCoWwmBo3QRK78Wj4J nq6DbUzezTPPbkItJfyqBKp+wNW1FRVWnvKRGPoA9spzBXq5Je+XRmiTy+ilWGMd uyeX5Y85wU/spq/LNRx8Dn12oW2r59eBO/ufyjghtV+eyxbuMcZy6Ryy/3kq2G6u /ddoKDNwKB5cibHG6pLGyNPeEUknzMRY/zLMZLO5E6tZned4oDttMxTzDxwSFpCy ziyNDwmVY+4K7I+Mtcb6ApCaV3NtztWKk1YJ8uoOKLA1NIn5Gv5q361f/PDn8P6M LREeqYCd3OPDhPFur/b35V+Kdw1gZsI= -----END CERTIFICATE-----Generated at Sun May 4 10:55:38 2025 by rpki-client