$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b6b95554-41b9-3c48-af9f-dc2f3a2466e8.roa File: b6b95554-41b9-3c48-af9f-dc2f3a2466e8.roa (raw, json) Hash identifier: T6l39ZJk2XQSmXvZAlCE/aTYt0a8eFJKLv1OKZcbwB8= Subject key identifier: D1:E1:D4:AF:85:3E:67:5C:7A:CE:A3:22:D5:F9:4E:75:CC:F4:DD:CE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6B668BF8560AA4F55100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b6b95554-41b9-3c48-af9f-dc2f3a2466e8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 173.194.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6b:66:8b:f8:56:0a:a4:f5:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1c6e4489-a0c9-4070-a4b1-8e0e6b13c978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:bf:cc:e3:09:88:76:1f:45:0e:f9:ef:21: 4c:b8:ff:28:a5:72:2b:1a:f5:f9:89:c7:71:e5:b8: 24:b2:ee:48:c5:85:71:2e:cb:db:02:a7:0a:5c:98: 37:cf:b5:2a:ef:ce:a9:49:ba:ed:58:98:b3:1a:a3: 26:10:d0:d8:8c:ae:37:5d:8e:08:60:35:35:cb:c1: 95:eb:27:29:2f:12:5c:95:a2:a5:80:4b:65:bf:dd: 15:5d:c5:34:ee:c5:25:42:8f:7a:3d:ca:d4:55:f3: 96:42:22:67:56:40:db:39:28:58:b7:0d:86:05:16: b4:52:26:83:13:72:c4:fd:29:e0:5d:7a:9a:56:73: a8:dd:f8:5f:62:7f:2d:dd:53:85:9e:41:46:2f:58: 0e:9d:1e:bf:9f:75:13:c7:7f:01:4e:db:9a:95:dc: fe:0a:21:ae:55:46:58:a5:0c:44:e8:aa:85:2e:57: a9:2e:76:3e:80:81:7e:8e:9a:ff:2c:67:46:ba:dd: f5:e1:82:21:60:0c:4d:7e:12:d8:e1:4b:96:e0:76: 3b:79:42:36:c6:15:4b:3e:80:00:70:ee:21:6e:19: 8c:0c:86:52:0b:1b:ad:15:53:a0:b8:3b:df:d0:07: 68:c8:fb:85:90:6f:0c:09:3a:10:ba:9e:b2:f6:b4: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E1:D4:AF:85:3E:67:5C:7A:CE:A3:22:D5:F9:4E:75:CC:F4:DD:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b6b95554-41b9-3c48-af9f-dc2f3a2466e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2f:80:f2:a5:6b:3f:00:22:32:f9:0d:cc:ef:b8:89:61:ce: 55:13:d8:1d:db:8b:4f:fb:a0:8d:90:6c:af:75:c6:9a:2d:7a: d9:d4:a1:bd:d6:62:ce:d9:25:9d:19:b2:c5:19:35:09:f1:66: fa:56:fa:d3:24:7b:a0:f0:4c:39:7b:ec:d1:f3:67:f5:9b:eb: 3b:b5:6f:58:88:1a:9a:02:ff:1a:bb:55:9f:9c:90:a4:f2:6c: ba:02:f1:4e:f1:2e:af:88:36:24:2b:7a:fa:4a:fd:12:44:00: be:6b:9f:b2:94:95:96:8d:ad:ca:75:5d:16:f8:b2:63:99:7c: ca:96:8a:60:09:04:59:e5:77:bf:52:9d:93:11:75:e2:fb:44: 39:a7:29:35:c0:78:d6:69:02:4c:ca:89:3f:b9:75:f3:c5:c7: 23:13:a5:e7:38:aa:a5:6f:36:f3:87:c9:13:6c:26:85:c1:17: 62:98:ce:48:36:7e:0f:a6:90:87:38:ea:f1:4f:30:6a:e0:90: ab:ec:00:7d:df:4d:32:9e:9e:85:81:26:fb:fb:bb:14:50:a3: 3b:09:b2:1a:89:41:dd:3b:e6:fb:f5:48:57:5d:37:44:72:22: 03:6c:ff:c7:db:79:10:4c:b9:11:aa:e7:dc:aa:55:d4:75:07: 5c:71:dd:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2tmi/hWCqT1UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWM2ZTQ0ODktYTBjOS00MDcwLWE0YjEtOGUwZTZiMTNjOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7e/zOMJiHYfRQ757yFMuP8opXIrGvX5icdx 5bgksu5IxYVxLsvbAqcKXJg3z7Uq786pSbrtWJizGqMmENDYjK43XY4IYDU1y8GV 6ycpLxJclaKlgEtlv90VXcU07sUlQo96PcrUVfOWQiJnVkDbOShYtw2GBRa0UiaD E3LE/SngXXqaVnOo3fhfYn8t3VOFnkFGL1gOnR6/n3UTx38BTtualdz+CiGuVUZY pQxE6KqFLlepLnY+gIF+jpr/LGdGut314YIhYAxNfhLY4UuW4HY7eUI2xhVLPoAA cO4hbhmMDIZSCxutFVOguDvf0AdoyPuFkG8MCToQup6y9rQVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHh1K+FPmdces6jItX5TnXM9N3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjZiOTU1NTQtNDFiOS0z YzQ4LWFmOWYtZGMyZjNhMjQ2NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMvgPKlaz8AIjL5DczvuIlhzlUT2B3bi0/7oI2QbK91xpotetnUob3W Ys7ZJZ0ZssUZNQnxZvpW+tMke6DwTDl77NHzZ/Wb6zu1b1iIGpoC/xq7VZ+ckKTy bLoC8U7xLq+INiQrevpK/RJEAL5rn7KUlZaNrcp1XRb4smOZfMqWimAJBFnld79S nZMRdeL7RDmnKTXAeNZpAkzKiT+5dfPFxyMTpec4qqVvNvOHyRNsJoXBF2KYzkg2 fg+mkIc46vFPMGrgkKvsAH3fTTKenoWBJvv7uxRQozsJshqJQd075vv1SFddN0Ry IgNs/8fbeRBMuRGq59yqVdR1B1xx3cA= -----END CERTIFICATE-----Generated at Sun May 4 12:35:08 2025 by rpki-client