$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa File: 833caff5-026e-36d2-a677-3eee63b7b415.roa (raw, json) Hash identifier: k8DHuzqcawEa6dzr+FSQiPQGP2XrzpvUXKqd+vgv/ok= Subject key identifier: 80:1B:B3:1C:09:D4:26:9D:EC:3C:20:E8:E6:3C:86:35:BD:CA:C7:DD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7888A421C3177FADBE40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:78:88:a4:21:c3:17:7f:ad:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4a08bedd-d3f5-4a06-a049-f90f96e08dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3f:a0:12:ea:2a:5a:a2:0b:43:66:bd:eb:19: da:28:d0:89:d0:f4:fa:5d:e1:51:f7:91:5f:82:64: 76:d8:b1:ec:51:c5:c8:a9:cc:8f:13:c9:ea:8e:49: 8b:84:42:95:79:b9:fd:30:d1:fb:d9:52:b4:3b:5e: 7d:ca:92:c2:1b:52:93:21:6d:4f:a8:82:85:1d:9a: 61:80:6c:6b:e0:bc:47:c7:9d:ac:98:b6:84:84:80: f6:c1:79:22:75:0c:56:42:b7:1c:24:7e:f1:1d:c3: 2a:65:4f:b0:92:16:01:63:ce:c0:71:c0:96:67:37: 22:3e:89:b7:4b:44:65:51:70:41:6d:4c:81:3a:ce: 57:47:ac:d8:2e:ae:d3:46:76:3a:54:ba:5b:0d:c9: 10:e0:70:2c:bc:38:cd:e6:20:40:c0:65:2f:0a:ce: ef:26:4d:d7:64:02:5f:0e:e3:c9:67:81:9c:2b:c3: 52:44:8b:fb:fd:4d:4e:16:99:7a:60:b1:3d:82:d9: c3:88:46:57:37:01:51:e8:1c:35:6b:25:a0:8d:21: 0e:8e:3a:7e:f5:b7:db:ad:c2:ac:41:73:bf:03:c6: 6f:cb:f1:f6:48:76:0a:30:76:2d:b2:60:7c:29:03: f2:cb:d1:93:29:ac:dc:22:78:1a:cd:9f:45:08:0b: 30:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1B:B3:1C:09:D4:26:9D:EC:3C:20:E8:E6:3C:86:35:BD:CA:C7:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/833caff5-026e-36d2-a677-3eee63b7b415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e5:6f:a3:4e:62:48:55:51:4f:b9:a6:50:f1:74:e4:ff:8d: 21:10:3b:bd:d0:b1:11:45:82:2d:4d:8f:2e:15:17:bf:00:12: ef:1a:43:f4:21:73:61:04:ea:0b:7d:14:f6:17:29:74:42:d2: e8:01:eb:2e:fb:07:fc:e5:ec:2b:67:a0:94:36:fb:9e:61:61: fa:82:6e:a7:b8:43:70:51:95:19:ea:ea:2a:c6:56:bf:2c:e1: a9:77:e1:f2:f8:ee:f0:8c:74:ea:a8:87:32:9a:b4:0a:14:bb: 24:50:69:33:88:c4:3e:1f:96:a7:61:63:a3:8b:2c:69:79:7d: de:e2:b3:63:44:91:34:e4:50:e8:5e:4d:26:b8:ab:00:39:17: db:45:2e:9a:83:9d:67:e4:8f:be:96:17:f8:dd:89:e3:a3:6f: 21:35:8f:04:0c:7a:9c:d6:29:6f:08:21:21:3a:5e:4c:fc:0b: 72:48:ae:81:28:bf:5e:29:b3:15:eb:11:fe:1c:ab:17:7e:8f: 67:c0:e5:8a:f2:ea:d6:f2:72:f3:1c:13:e1:2d:57:98:51:d3: 2c:53:74:8e:05:6b:2b:55:85:49:d2:d5:54:76:66:26:a6:35: f3:10:1d:8d:96:5d:ce:c9:aa:22:14:41:07:6a:43:a6:c7:b6: 58:20:b2:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3iIpCHDF3+tvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGEwOGJlZGQtZDNmNS00YTA2LWEwNDktZjkwZjk2ZTA4ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT+gEuoqWqILQ2a96xnaKNCJ0PT6XeFR95Ff gmR22LHsUcXIqcyPE8nqjkmLhEKVebn9MNH72VK0O159ypLCG1KTIW1PqIKFHZph gGxr4LxHx52smLaEhID2wXkidQxWQrccJH7xHcMqZU+wkhYBY87AccCWZzciPom3 S0RlUXBBbUyBOs5XR6zYLq7TRnY6VLpbDckQ4HAsvDjN5iBAwGUvCs7vJk3XZAJf DuPJZ4GcK8NSRIv7/U1OFpl6YLE9gtnDiEZXNwFR6Bw1ayWgjSEOjjp+9bfbrcKs QXO/A8Zvy/H2SHYKMHYtsmB8KQPyy9GTKazcIngazZ9FCAsw/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAbsxwJ1Cad7Dwg6OY8hjW9ysfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODMzY2FmZjUtMDI2ZS0z NmQyLWE2NzctM2VlZTYzYjdiNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3lb6NOYkhVUU+5plDxdOT/jSEQO73QsRFFgi1Njy4VF78AEu8aQ/Qh c2EE6gt9FPYXKXRC0ugB6y77B/zl7CtnoJQ2+55hYfqCbqe4Q3BRlRnq6irGVr8s 4al34fL47vCMdOqohzKatAoUuyRQaTOIxD4flqdhY6OLLGl5fd7is2NEkTTkUOhe TSa4qwA5F9tFLpqDnWfkj76WF/jdieOjbyE1jwQMepzWKW8IISE6Xkz8C3JIroEo v14psxXrEf4cqxd+j2fA5Yry6tbycvMcE+EtV5hR0yxTdI4FaytVhUnS1VR2Ziam NfMQHY2WXc7JqiIUQQdqQ6bHtlggsiA= -----END CERTIFICATE-----Generated at Sun May 4 12:48:51 2025 by rpki-client