$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa File: b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa (raw, json) Hash identifier: 4k/Q7wS42SvLyotD1nNOt9x6+iVbwpdDaQTiULsGKoI= Subject key identifier: 0E:2A:D8:E4:48:A5:00:C7:1D:F5:BC:1C:27:42:EA:5A:99:02:CD:6C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5DEDB16B921376BCFC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 209.85.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5d:ed:b1:6b:92:13:76:bc:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1fa7b8fd-0e2c-4980-baec-594d3ecf049b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:67:e7:08:16:28:41:06:86:8c:26:d7:4a: 10:6f:9a:50:75:32:a1:6c:16:80:09:5c:80:11:16: 25:32:42:c2:a2:49:b4:a5:b7:ef:35:9d:74:fd:96: 9c:81:ba:f6:f6:57:f1:37:8d:a7:e6:fb:b4:36:b3: e9:02:4e:7d:8a:b2:8e:4f:64:83:95:06:13:64:ef: 77:8e:0f:92:47:d2:ad:8a:7f:37:fe:3a:17:6c:7b: f7:60:69:35:98:6b:29:b3:1b:6c:34:8b:04:e2:48: de:8f:ab:70:43:6c:05:d8:86:31:a2:e5:1c:c3:9e: 53:1c:b3:14:7e:04:4f:8a:93:d6:14:a0:13:7e:82: 99:96:81:4e:31:a6:b2:9f:c8:4e:84:61:c3:cd:94: fd:58:69:0b:2d:e3:9f:f5:0a:33:19:6f:b7:fc:74: b8:cb:c7:13:36:55:48:58:7e:7b:7b:ba:55:43:4d: e9:de:2a:ef:29:ce:83:b9:cf:e2:fa:29:fe:4e:e2: 1d:02:32:0f:a0:8c:5f:74:8d:27:6f:c0:66:d6:60: 8f:fb:69:18:35:9e:a0:24:21:c4:79:b8:ee:bc:e6: ee:1a:e9:91:c1:da:62:9d:b0:b0:be:c5:fb:34:58: 8d:68:af:a1:79:3d:bb:10:df:3b:9f:1a:8b:c5:bc: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2A:D8:E4:48:A5:00:C7:1D:F5:BC:1C:27:42:EA:5A:99:02:CD:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3e06dc5-ec98-3686-84c4-6d76d78804d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 209.85.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3a:09:3b:bb:4b:b7:c4:11:4a:f1:12:64:11:63:89:99:62: 5d:f5:1c:0c:36:9e:b7:32:57:cf:52:18:da:05:c0:7a:88:04: 73:e9:42:98:f2:67:24:b6:af:f0:7b:6f:cc:3b:ca:80:d0:ad: 88:41:20:8c:c8:a2:80:a1:73:0c:24:fd:e8:88:6e:9a:4b:73: b5:1a:07:b5:40:a2:fc:a8:d8:c8:77:c6:19:ef:1e:14:27:4e: 92:8a:d2:39:41:43:54:6d:ac:1a:f7:8f:8c:1c:b6:da:a5:ab: 07:a9:ec:c1:6f:f2:38:4b:8a:87:ae:c4:4c:1c:32:af:ff:20: c7:27:91:0f:15:a9:56:43:a9:eb:62:1b:d7:62:b1:97:0b:83: 5e:8d:45:f9:da:1c:1f:51:46:73:45:19:85:9f:fa:4b:6a:af: 5d:c5:68:f7:5c:16:6b:ea:e0:fd:93:d4:50:78:b7:58:31:59: 2f:13:db:cc:f3:f4:ba:49:85:22:84:be:cd:d7:1c:f0:06:ff: 95:bc:20:52:c8:04:39:60:04:60:6d:8e:09:96:33:de:86:cf: f4:b0:98:59:89:df:04:9e:2f:a3:16:38:fc:23:53:0b:78:bc: a2:77:ab:25:a7:93:a8:a6:4c:18:bd:f5:34:50:18:d6:2a:eb: 05:fd:97:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku13tsWuSE3a8/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWZhN2I4ZmQtMGUyYy00OTgwLWJhZWMtNTk0ZDNlY2YwNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv5n5wgWKEEGhowm10oQb5pQdTKhbBaACVyA ERYlMkLCokm0pbfvNZ10/Zacgbr29lfxN42n5vu0NrPpAk59irKOT2SDlQYTZO93 jg+SR9Ktin83/joXbHv3YGk1mGspsxtsNIsE4kjej6twQ2wF2IYxouUcw55THLMU fgRPipPWFKATfoKZloFOMaayn8hOhGHDzZT9WGkLLeOf9QozGW+3/HS4y8cTNlVI WH57e7pVQ03p3irvKc6Duc/i+in+TuIdAjIPoIxfdI0nb8Bm1mCP+2kYNZ6gJCHE ebjuvObuGumRwdpinbCwvsX7NFiNaK+heT27EN87nxqLxbx1rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4q2ORIpQDHHfW8HCdC6lqZAs1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjNlMDZkYzUtZWM5OC0z Njg2LTg0YzQtNmQ3NmQ3ODgwNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH46CTu7S7fEEUrxEmQRY4mZYl31HAw2nrcyV89SGNoFwHqIBHPpQpjy ZyS2r/B7b8w7yoDQrYhBIIzIooChcwwk/eiIbppLc7UaB7VAovyo2Mh3xhnvHhQn TpKK0jlBQ1RtrBr3j4wcttqlqwep7MFv8jhLioeuxEwcMq//IMcnkQ8VqVZDqeti G9disZcLg16NRfnaHB9RRnNFGYWf+ktqr13FaPdcFmvq4P2T1FB4t1gxWS8T28zz 9LpJhSKEvs3XHPAG/5W8IFLIBDlgBGBtjgmWM96Gz/SwmFmJ3wSeL6MWOPwjUwt4 vKJ3qyWnk6imTBi99TRQGNYq6wX9l94= -----END CERTIFICATE-----Generated at Sun May 4 14:52:01 2025 by rpki-client