$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66b9e653-d8ad-3093-8f2a-24556d42228e.roa File: 66b9e653-d8ad-3093-8f2a-24556d42228e.roa (raw, json) Hash identifier: cDc5Ko+SYDm3On7dZ5OklsEVyx8BZbKeeUhgYjPwLAc= Subject key identifier: 77:18:BF:E8:15:30:DD:9A:31:F3:B9:5E:46:51:FA:AE:DF:93:3B:1F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABD5AB72DDDF6684D5200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66b9e653-d8ad-3093-8f2a-24556d42228e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bd:5a:b7:2d:dd:f6:68:4d:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6723f165-7c88-4957-b850-9d1d89077e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:bf:db:7c:fe:29:5b:ca:a4:63:3f:a3:04: 46:de:8a:f0:10:c5:d3:c9:e6:c0:e0:27:e5:ec:75: 93:44:9f:8d:52:23:cd:3a:79:4e:52:22:d9:80:bd: 76:2f:2e:c2:42:5e:27:c5:1a:d4:83:e8:f8:15:e4: 89:02:fb:d9:f3:2d:62:a8:9b:16:a6:66:0c:f0:de: 58:29:24:48:e7:53:40:2f:c5:32:de:17:12:06:fe: b8:e8:9f:fd:28:2d:65:dc:b7:38:10:bb:c3:88:b5: a4:3d:57:49:b4:3e:3f:6b:5f:33:bf:6c:62:8f:1d: 26:1d:0b:88:a5:fe:6a:84:01:3d:7e:65:6b:71:50: 1a:20:ca:e1:10:46:88:c5:fd:de:b0:7d:da:73:19: 9c:1b:65:e6:7e:bf:1f:e3:d8:ec:5d:bf:54:45:89: 96:1d:bc:46:f1:e4:68:29:b0:5a:e6:f6:9d:c9:83: 6a:aa:d1:d2:06:33:c7:bd:80:8f:21:f5:d1:d7:e7: 02:30:69:11:d1:6d:9a:c5:3a:a7:75:9d:d7:d9:a4: 4d:0f:32:29:83:e5:84:b8:fa:a9:54:ad:e3:62:1a: f6:fe:58:bd:36:3f:f1:64:20:15:63:80:59:ee:10: 20:42:b3:a5:d8:96:d4:5d:fc:62:3e:63:10:09:64: ee:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:18:BF:E8:15:30:DD:9A:31:F3:B9:5E:46:51:FA:AE:DF:93:3B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66b9e653-d8ad-3093-8f2a-24556d42228e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a9:cb:59:cd:ae:70:aa:f2:14:4a:75:79:cc:c8:66:53:4b: 9c:61:c2:99:e5:88:a4:43:3b:e8:f3:5e:ec:4a:e9:99:70:3d: 5f:fa:cb:f1:7f:cc:2c:7e:1e:6f:7b:b0:ac:97:7c:0a:c3:cd: 73:35:e3:25:b2:e4:8a:45:7f:a3:15:bf:38:fa:96:51:5d:d0: d6:f3:2c:07:33:f9:40:cd:60:87:76:a3:96:26:a0:49:b5:ac: b2:7c:bf:19:98:7e:a6:01:ae:53:b4:9c:c9:69:e1:27:d3:45: a1:48:0e:8d:f3:e7:0b:7e:b2:21:15:fc:b5:4c:94:08:d1:bd: 99:69:13:22:fa:4e:a9:ba:11:20:b5:ac:74:42:d8:14:f5:3e: 04:60:b9:a9:40:66:07:cf:ca:b2:20:60:02:53:d4:53:db:67: 1e:e5:86:1f:73:9d:9e:94:69:92:45:50:23:a0:29:a2:5d:96: e2:f9:25:9b:0b:be:6a:e5:6e:c2:90:9f:33:83:5c:e2:a6:9d: 9f:c8:67:3b:37:c3:e9:3a:15:41:af:4e:97:b2:0d:da:ff:29: 89:cd:ce:b3:01:64:92:15:db:f5:26:84:81:59:28:cb:3a:e6: 3e:ee:b8:1f:47:4d:f6:6e:1b:cb:df:33:b6:0f:1b:55:cc:06: 96:d7:a4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkur1aty3d9mhNUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjcyM2YxNjUtN2M4OC00OTU3LWI4NTAtOWQxZDg5MDc3ZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMy/23z+KVvKpGM/owRG3orwEMXTyebA4Cfl 7HWTRJ+NUiPNOnlOUiLZgL12Ly7CQl4nxRrUg+j4FeSJAvvZ8y1iqJsWpmYM8N5Y KSRI51NAL8Uy3hcSBv646J/9KC1l3Lc4ELvDiLWkPVdJtD4/a18zv2xijx0mHQuI pf5qhAE9fmVrcVAaIMrhEEaIxf3esH3acxmcG2Xmfr8f49jsXb9URYmWHbxG8eRo KbBa5vadyYNqqtHSBjPHvYCPIfXR1+cCMGkR0W2axTqndZ3X2aRNDzIpg+WEuPqp VK3jYhr2/li9Nj/xZCAVY4BZ7hAgQrOl2JbUXfxiPmMQCWTuLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcYv+gVMN2aMfO5XkZR+q7fkzsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjZiOWU2NTMtZDhhZC0z MDkzLThmMmEtMjQ1NTZkNDIyMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCpy1nNrnCq8hRKdXnMyGZTS5xhwpnliKRDO+jzXuxK6ZlwPV/6y/F/ zCx+Hm97sKyXfArDzXM14yWy5IpFf6MVvzj6llFd0NbzLAcz+UDNYId2o5YmoEm1 rLJ8vxmYfqYBrlO0nMlp4SfTRaFIDo3z5wt+siEV/LVMlAjRvZlpEyL6Tqm6ESC1 rHRC2BT1PgRgualAZgfPyrIgYAJT1FPbZx7lhh9znZ6UaZJFUCOgKaJdluL5JZsL vmrlbsKQnzODXOKmnZ/IZzs3w+k6FUGvTpeyDdr/KYnNzrMBZJIV2/UmhIFZKMs6 5j7uuB9HTfZuG8vfM7YPG1XMBpbXpCk= -----END CERTIFICATE-----Generated at Sun May 4 14:58:23 2025 by rpki-client