$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa File: 847d8ab5-2804-3989-95b6-9f3006588f5a.roa (raw, json) Hash identifier: NCxc/MSXLK0DnPfunSxwSLp5VhPeT+AI+R761uMbQMw= Subject key identifier: 15:77:BE:B2:C2:F2:E7:14:4D:FC:D8:16:75:C9:7E:20:5F:B8:28:F5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACF3FFC20AE20CE2D1FEA Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cf:3f:fc:20:ae:20:ce:2d:1f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0dfae04a-6ede-424e-b255-0faf563c5b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:a9:14:53:27:a5:3e:82:de:a7:cd:a4:a2: 8d:90:a3:b6:34:a1:c9:81:da:ed:94:2a:a5:bc:f0: 98:fe:08:ad:bb:cd:cc:ce:39:b7:dc:44:7d:f4:34: de:d3:3d:eb:66:42:eb:e6:a1:25:ec:ed:60:2c:1d: 24:4a:73:51:1c:17:1a:61:a3:bd:d6:82:5b:dc:47: 99:9a:71:64:46:11:e9:7b:cf:e5:e9:43:8c:a3:b7: 5a:e7:ba:23:05:a8:9f:7d:27:c4:ff:54:3a:62:f8: 77:f0:b4:86:c6:ab:c5:f7:e5:6a:49:5e:5f:67:d2: 1f:1a:bb:69:87:f2:c8:90:12:a6:67:17:35:55:86: 4c:fc:92:8a:5b:b8:43:8e:8d:d8:32:b3:07:4b:e6: a5:96:b8:c4:21:2e:35:a4:3a:97:b3:fa:2f:83:aa: ec:97:17:27:d8:19:a2:90:f1:83:a7:00:ee:5e:bf: d0:4c:b5:2e:ae:64:fa:de:9d:70:f0:8b:79:49:a2: d5:ca:fd:6b:4d:45:fa:0b:1e:fe:0b:41:bc:2c:7f: a1:89:60:d2:3f:d0:be:ae:c2:45:23:34:c9:2a:9b: de:51:7a:44:6c:52:f5:3e:95:5f:0a:d2:e6:a4:5a: 06:74:d2:3f:12:e8:43:dd:df:52:7b:27:cd:b5:ed: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:77:BE:B2:C2:F2:E7:14:4D:FC:D8:16:75:C9:7E:20:5F:B8:28:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/847d8ab5-2804-3989-95b6-9f3006588f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:98:0f:f5:6b:bc:7b:06:f4:c5:eb:81:4d:55:1c:cc:e5:4d: 8d:bb:66:98:88:ef:c1:d1:ad:6a:7f:65:61:3f:43:15:04:3f: 56:10:be:ae:d3:9e:a1:a3:ae:ac:89:45:93:98:37:3b:f5:7b: 6f:81:23:b7:a9:fa:49:f0:f7:84:58:43:d4:91:70:b3:c0:de: a6:e4:7c:4f:23:b9:0d:37:a1:e3:8a:d3:e1:f1:2c:36:95:b1: d8:58:82:60:f0:53:32:07:55:de:92:6c:fc:62:bd:5f:ae:fc: 55:d5:cf:e8:ef:8a:02:9e:61:d1:c6:29:24:82:b2:e5:ee:b1: 23:3d:5c:35:a0:ff:d6:00:d9:9b:00:f3:ca:b3:08:92:18:de: 30:3d:31:78:54:d3:e0:28:2f:df:a7:e7:ca:40:85:c8:a6:a2: e1:ba:79:1e:2c:90:d6:94:ed:24:6c:04:1b:da:4c:24:e8:0e: f4:b1:de:1c:74:72:5e:19:63:94:f5:f3:5c:65:db:c1:ba:8a: de:4e:c0:d7:14:18:d5:03:a6:48:21:1d:7f:f8:4f:d7:36:e8: 2c:8d:d1:5d:36:d0:96:7a:37:64:b3:75:81:a8:52:1c:7c:82: ef:53:61:4d:26:fd:4f:57:4d:96:d4:66:b4:6c:67:6c:15:48: 87:8c:bb:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus8//CCuIM4tH+owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGRmYWUwNGEtNmVkZS00MjRlLWIyNTUtMGZhZjU2M2M1YjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI+pFFMnpT6C3qfNpKKNkKO2NKHJgdrtlCql vPCY/gitu83Mzjm33ER99DTe0z3rZkLr5qEl7O1gLB0kSnNRHBcaYaO91oJb3EeZ mnFkRhHpe8/l6UOMo7da57ojBaiffSfE/1Q6Yvh38LSGxqvF9+VqSV5fZ9IfGrtp h/LIkBKmZxc1VYZM/JKKW7hDjo3YMrMHS+allrjEIS41pDqXs/ovg6rslxcn2Bmi kPGDpwDuXr/QTLUurmT63p1w8It5SaLVyv1rTUX6Cx7+C0G8LH+hiWDSP9C+rsJF IzTJKpveUXpEbFL1PpVfCtLmpFoGdNI/EuhD3d9SeyfNte2dswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBV3vrLC8ucUTfzYFnXJfiBfuCj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODQ3ZDhhYjUtMjgwNC0z OTg5LTk1YjYtOWYzMDA2NTg4ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyYD/VrvHsG9MXrgU1VHMzlTY27ZpiI78HRrWp/ZWE/QxUEP1YQvq7T nqGjrqyJRZOYNzv1e2+BI7ep+knw94RYQ9SRcLPA3qbkfE8juQ03oeOK0+HxLDaV sdhYgmDwUzIHVd6SbPxivV+u/FXVz+jvigKeYdHGKSSCsuXusSM9XDWg/9YA2ZsA 88qzCJIY3jA9MXhU0+AoL9+n58pAhcimouG6eR4skNaU7SRsBBvaTCToDvSx3hx0 cl4ZY5T181xl28G6it5OwNcUGNUDpkghHX/4T9c26CyN0V020JZ6N2SzdYGoUhx8 gu9TYU0m/U9XTZbUZrRsZ2wVSIeMu7U= -----END CERTIFICATE-----Generated at Sun May 4 11:29:16 2025 by rpki-client