$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa File: a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa (raw, json) Hash identifier: 0BMqr69NrsEydKOfFa4Z1yZr1Dr+YeRollbtzpUlLw4= Subject key identifier: BF:BA:6C:8D:40:04:D1:30:B5:A6:1A:42:54:FB:99:CD:56:BA:19:96 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB674BF419D2F7EC0DDD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.239.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:67:4b:f4:19:d2:f7:ec:0d:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4b0cef9b-8ea6-47ac-b92d-4b11672188af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:f8:dc:70:21:32:5a:65:ac:86:02:d9:a4: 00:a7:6b:44:3e:4c:3e:47:5e:e9:83:77:d6:55:48: 76:46:50:e9:cc:50:c3:40:3b:0e:84:9c:9f:0d:97: 5b:16:02:30:2a:49:6e:14:8b:7c:52:3d:50:f0:db: 52:1e:dd:b6:79:61:85:8a:71:4d:38:9c:6b:12:7a: a0:5f:94:d3:3f:16:53:9c:e7:e7:46:0b:93:ef:aa: 63:93:b6:80:34:75:83:85:de:23:46:a4:e8:d2:45: f6:e6:c9:3c:3c:9d:49:71:c6:66:d3:4a:74:45:cf: 15:c1:63:8c:cf:e9:05:65:36:f1:87:9f:e5:af:2e: 2b:48:57:a3:49:de:d0:e5:f2:52:76:1a:9d:f4:94: 3a:f7:e5:5e:75:f5:84:f4:d8:a0:b6:ed:d0:38:14: 96:16:4a:c5:42:9f:c9:b2:0c:6e:da:e2:24:91:97: df:0f:20:0f:57:f5:2b:db:89:84:de:f6:b9:97:c1: 12:51:1e:24:c8:d6:a0:6b:2f:e9:c5:76:df:48:85: 14:c6:c2:76:57:84:7e:2b:00:eb:d7:d1:70:ee:ec: 48:e0:14:8a:83:99:32:22:1b:33:da:3e:c1:71:aa: ef:c8:87:a3:02:68:44:b8:9b:58:da:31:42:fc:3b: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BA:6C:8D:40:04:D1:30:B5:A6:1A:42:54:FB:99:CD:56:BA:19:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5a28fe8-230b-3fdd-9bfc-5fbb66148409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.239.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:12:0a:e9:44:82:ba:b9:ea:01:5c:8f:ba:24:d5:8b:4d:44: 82:a8:99:2d:ca:4d:41:56:4d:0c:76:ef:96:9c:de:c0:f3:cc: 5b:ac:9f:cc:fc:88:22:a1:40:e9:79:6b:e0:6a:50:69:85:6a: 83:20:90:7e:04:a5:e2:11:57:d7:ef:3f:d6:57:3f:cc:82:dc: 80:1a:c0:87:8e:e2:36:71:69:6a:e7:25:01:01:46:7c:57:dd: 9c:48:40:f6:b6:8a:f4:a8:2b:4c:47:7c:e0:ba:cc:2a:3e:2f: 1c:01:12:78:bd:c7:2d:a7:c2:51:47:f9:39:bb:b2:1e:f7:bf: 83:0e:13:6b:fe:7a:32:0a:a4:85:e3:2d:68:08:77:01:5b:5c: db:ab:f9:3e:87:4b:d0:16:ed:d4:a8:7d:a4:3a:2f:e8:fb:d6: b2:20:f0:78:56:5b:84:4a:72:69:62:96:d1:ba:81:06:64:5a: 78:86:fb:0c:79:ff:56:94:fd:87:14:95:6b:26:6c:03:ee:21: de:66:b7:fc:7e:7d:8e:8e:d6:69:6b:54:3b:f7:c3:b2:f2:2c: 27:ff:03:fe:98:22:39:66:4f:36:8a:eb:23:f8:2b:97:bc:40: b9:4a:b9:87:c9:81:e3:db:3c:ec:63:4f:d7:89:66:23:5e:8d: e8:0f:b6:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2dL9BnS9+wN3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGIwY2VmOWItOGVhNi00N2FjLWI5MmQtNGIxMTY3MjE4OGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLf43HAhMlplrIYC2aQAp2tEPkw+R17pg3fW VUh2RlDpzFDDQDsOhJyfDZdbFgIwKkluFIt8Uj1Q8NtSHt22eWGFinFNOJxrEnqg X5TTPxZTnOfnRguT76pjk7aANHWDhd4jRqTo0kX25sk8PJ1JccZm00p0Rc8VwWOM z+kFZTbxh5/lry4rSFejSd7Q5fJSdhqd9JQ69+VedfWE9Nigtu3QOBSWFkrFQp/J sgxu2uIkkZffDyAPV/Ur24mE3va5l8ESUR4kyNagay/pxXbfSIUUxsJ2V4R+KwDr 19Fw7uxI4BSKg5kyIhsz2j7BcarvyIejAmhEuJtY2jFC/Dvo5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+6bI1ABNEwtaYaQlT7mc1WuhmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTVhMjhmZTgtMjMwYi0z ZmRkLTliZmMtNWZiYjY2MTQ4NDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0SCulEgrq56gFcj7ok1YtNRIKomS3KTUFWTQx275ac3sDzzFusn8z8 iCKhQOl5a+BqUGmFaoMgkH4EpeIRV9fvP9ZXP8yC3IAawIeO4jZxaWrnJQEBRnxX 3ZxIQPa2ivSoK0xHfOC6zCo+LxwBEni9xy2nwlFH+Tm7sh73v4MOE2v+ejIKpIXj LWgIdwFbXNur+T6HS9AW7dSofaQ6L+j71rIg8HhWW4RKcmliltG6gQZkWniG+wx5 /1aU/YcUlWsmbAPuId5mt/x+fY6O1mlrVDv3w7LyLCf/A/6YIjlmTzaK6yP4K5e8 QLlKuYfJgePbPOxjT9eJZiNejegPtpo= -----END CERTIFICATE-----Generated at Sun May 4 10:57:55 2025 by rpki-client