$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa File: a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa (raw, json) Hash identifier: CBHp9h3RxJQrlwyA0pHtP0Q7DrsQy56+00o5selnqOg= Subject key identifier: 42:19:DE:D2:E6:70:F3:57:C0:D8:61:16:E3:3D:FD:65:21:2E:02:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABE5E5F5CF22E64405700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:be:5e:5f:5c:f2:2e:64:40:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4145650f-c773-4cbd-bd18-1b51a72884e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:4e:0e:5e:be:0d:9b:23:07:83:b1:7a:3c: 2f:1d:b2:5c:fe:1d:bd:1d:35:f3:2e:68:0e:e0:74: 56:96:1f:c2:49:f1:87:f8:00:22:94:e8:70:e1:1f: bc:84:07:7e:36:1d:a5:f0:84:e6:b6:b4:66:6d:9d: fa:42:19:bc:e4:53:f4:53:58:db:46:c0:35:3c:9b: 46:1b:9f:77:24:d4:8f:23:f1:06:34:9a:49:26:55: 6a:fb:d9:a6:13:24:7a:a6:a6:ce:23:05:cf:8a:e2: 19:8e:bd:9a:38:ef:fa:b8:66:0e:41:c1:e8:3f:a0: d9:be:87:36:10:77:e0:d9:87:06:85:f1:f1:e5:2c: b9:45:c1:d6:d7:a1:9c:b1:9c:8d:f8:bc:91:e1:bc: 39:af:86:49:e0:b4:15:11:bb:04:b3:4f:e3:37:7c: 1f:d8:bf:c6:32:c2:2f:41:ce:8c:72:ba:fe:57:bb: d5:da:fa:6b:2e:79:85:a3:f5:cb:a5:f9:7d:a7:23: 50:eb:1e:21:82:4b:4b:3b:de:74:13:22:f5:57:bb: dc:df:a2:51:4a:ea:c5:77:6f:ca:07:fc:89:53:96: 6a:9a:ce:66:91:05:ea:f5:97:31:30:1e:5c:1e:c0: fc:89:a8:f0:a8:0b:c6:51:73:c9:7b:2d:bb:c2:08: 8f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:19:DE:D2:E6:70:F3:57:C0:D8:61:16:E3:3D:FD:65:21:2E:02:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:52:83:95:3f:a2:78:ba:b5:21:e6:3f:dc:a3:1b:78:9d:59: dd:89:23:36:a0:4d:19:71:8f:f4:78:24:5c:74:42:6e:af:79: bf:ee:97:9d:b3:13:ca:5a:15:fc:fe:72:8f:ea:cc:36:57:e0: 77:11:37:e5:df:dd:b2:27:c7:23:e9:da:03:12:43:3a:7b:77: 7a:9e:cb:15:4d:71:dc:23:e4:ad:c8:fb:8c:4e:5e:fe:4c:0d: 5d:8a:f6:65:2a:6e:91:4e:4f:ca:b8:9a:9a:1c:eb:b3:43:17: 9c:d9:ba:14:d0:8b:d5:6c:2c:4f:89:22:f6:81:65:12:07:31: 1a:93:8b:80:f3:1a:f6:05:4a:c7:d7:dd:38:a6:d3:82:e1:e5: 6a:be:1f:60:25:ee:ab:4f:72:9d:6c:36:ac:62:a4:4f:b5:0b: 20:4f:2e:21:87:2b:97:8b:81:3f:25:a1:ed:96:b6:ad:9f:a4: e3:ec:ec:53:e3:a3:55:c3:32:cb:97:e0:35:62:09:4b:db:8c: 30:7e:ef:bc:8c:1d:90:84:82:18:94:89:99:2a:21:33:39:bb: e6:1b:57:95:6e:a4:a1:ec:cd:78:37:b5:b4:11:7a:43:0e:b6: ab:4a:9b:fe:b2:76:5e:7e:4e:ad:89:0d:14:80:72:78:74:42: 49:e9:81:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkur5eX1zyLmRAVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDE0NTY1MGYtYzc3My00Y2JkLWJkMTgtMWI1MWE3Mjg4NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJtODl6+DZsjB4OxejwvHbJc/h29HTXzLmgO 4HRWlh/CSfGH+AAilOhw4R+8hAd+Nh2l8ITmtrRmbZ36Qhm85FP0U1jbRsA1PJtG G593JNSPI/EGNJpJJlVq+9mmEyR6pqbOIwXPiuIZjr2aOO/6uGYOQcHoP6DZvoc2 EHfg2YcGhfHx5Sy5RcHW16GcsZyN+LyR4bw5r4ZJ4LQVEbsEs0/jN3wf2L/GMsIv Qc6Mcrr+V7vV2vprLnmFo/XLpfl9pyNQ6x4hgktLO950EyL1V7vc36JRSurFd2/K B/yJU5Zqms5mkQXq9ZcxMB5cHsD8iajwqAvGUXPJey27wgiPoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIZ3tLmcPNXwNhhFuM9/WUhLgI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTAwYmQxYTctMDJlYS0z ZTcxLWFlYWMtZjllYjZjMTU1OTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRSg5U/oni6tSHmP9yjG3idWd2JIzagTRlxj/R4JFx0Qm6veb/ul52z E8paFfz+co/qzDZX4HcRN+Xf3bInxyPp2gMSQzp7d3qeyxVNcdwj5K3I+4xOXv5M DV2K9mUqbpFOT8q4mpoc67NDF5zZuhTQi9VsLE+JIvaBZRIHMRqTi4DzGvYFSsfX 3Tim04Lh5Wq+H2Al7qtPcp1sNqxipE+1CyBPLiGHK5eLgT8loe2Wtq2fpOPs7FPj o1XDMsuX4DViCUvbjDB+77yMHZCEghiUiZkqITM5u+YbV5VupKHszXg3tbQRekMO tqtKm/6ydl5+Tq2JDRSAcnh0QknpgRE= -----END CERTIFICATE-----Generated at Sun May 4 10:50:18 2025 by rpki-client