$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa File: ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa (raw, json) Hash identifier: UnccoW3AFq0BciKXJe17YXbTjbavoRI2WCLRJz0VDv0= Subject key identifier: D1:C3:56:44:44:50:D1:1B:75:00:DE:94:5D:5F:90:7C:79:93:4C:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB621916169C209AC2EA40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:62:19:16:16:9c:20:9a:c2:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5392ace6-b1f4-4094-b77d-569023aabb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:aa:bf:aa:c8:f8:cc:ee:95:93:84:97:a9:a0: e7:d1:97:3b:84:3f:6b:b0:84:4f:aa:e2:99:62:30: bd:28:18:ab:f1:b1:67:26:8c:59:94:b0:25:94:e8: 02:6d:cb:25:53:9d:62:b2:bf:00:0e:08:46:d4:bf: 23:57:9d:08:68:1d:61:7a:33:59:c1:c7:6f:ed:db: 02:f4:43:22:fe:13:f4:81:fe:88:58:2c:f0:cb:f6: fa:e6:d0:f1:ce:fb:a3:d7:2a:a9:63:9a:6a:14:3e: 43:6b:01:6b:5b:70:13:39:17:9a:f4:18:28:d1:e4: ed:da:56:db:7b:ee:4b:4e:f9:01:b0:e8:e1:c3:6b: 0a:97:f7:55:a1:ad:50:90:90:d1:b5:5b:48:29:44: af:e7:21:58:74:23:f3:fa:d0:e2:58:29:48:89:a6: 25:49:7a:31:00:81:50:89:6d:78:52:30:0e:5a:f5: cd:e0:51:22:1c:fe:7c:3f:6f:cd:d0:dc:f0:d4:a3: f3:ca:ce:2d:89:f4:62:5b:6e:31:89:27:b2:15:ab: 16:de:6a:6e:87:c3:0d:5b:fe:2c:b0:25:56:6e:7f: 3c:25:79:1b:19:ae:b8:e4:e1:f0:44:9c:af:6c:01: 7c:e6:bd:fb:ff:ce:e1:0a:fa:a1:6c:9c:44:fc:f1: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C3:56:44:44:50:D1:1B:75:00:DE:94:5D:5F:90:7C:79:93:4C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce2c5b92-a096-3c84-84b2-9a6339cd31ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:dd:08:b0:22:d0:91:f6:21:d2:06:95:6b:bd:15:83:4e:e4: 5b:01:61:7d:94:4c:68:f5:c1:4c:b6:4c:6b:b0:50:ac:c9:6b: 04:c2:0c:84:ec:21:ef:90:69:b5:9f:87:ff:04:a0:08:91:bc: 23:e1:b7:56:c4:67:6f:25:9a:7d:2a:64:57:18:35:23:ac:da: 14:28:71:55:d6:33:d1:3f:ff:28:dd:66:c0:a0:4f:0e:8e:28: 71:aa:1b:17:32:bb:92:47:13:61:ad:b5:27:cf:49:ee:19:e1: c5:d8:53:4e:3d:7e:e7:2c:62:01:49:20:ed:86:33:fa:d5:91: 48:31:07:68:a8:f9:0d:ac:8e:fe:72:d2:56:a3:2a:fe:80:73: 93:dc:c5:22:6b:44:98:1b:9d:33:2d:7d:48:93:27:3b:1e:d0: 21:9e:6b:ad:c6:fd:a2:cf:bf:e7:b4:39:7d:a5:51:8f:64:64: c4:f2:1a:68:69:c1:73:c8:87:b4:4c:9f:2b:e0:f1:89:f1:42: 89:fd:cc:25:8c:97:9c:27:61:ce:e3:5b:06:ed:7c:bc:6e:c6: e8:72:24:9a:b5:0f:a3:23:b5:13:a9:62:15:49:8e:8e:e4:34: 92:a5:79:c0:83:90:22:0f:01:b6:ba:51:58:72:30:2a:8b:d2: a7:33:c5:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2IZFhacIJrC6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTM5MmFjZTYtYjFmNC00MDk0LWI3N2QtNTY5MDIzYWFiYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06q/qsj4zO6Vk4SXqaDn0Zc7hD9rsIRPquKZ YjC9KBir8bFnJoxZlLAllOgCbcslU51isr8ADghG1L8jV50IaB1hejNZwcdv7dsC 9EMi/hP0gf6IWCzwy/b65tDxzvuj1yqpY5pqFD5DawFrW3ATORea9Bgo0eTt2lbb e+5LTvkBsOjhw2sKl/dVoa1QkJDRtVtIKUSv5yFYdCPz+tDiWClIiaYlSXoxAIFQ iW14UjAOWvXN4FEiHP58P2/N0Nzw1KPzys4tifRiW24xiSeyFasW3mpuh8MNW/4s sCVWbn88JXkbGa645OHwRJyvbAF85r37/87hCvqhbJxE/PEwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHDVkREUNEbdQDelF1fkHx5k0xOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2UyYzViOTItYTA5Ni0z Yzg0LTg0YjItOWE2MzM5Y2QzMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPdCLAi0JH2IdIGlWu9FYNO5FsBYX2UTGj1wUy2TGuwUKzJawTCDITs Ie+QabWfh/8EoAiRvCPht1bEZ28lmn0qZFcYNSOs2hQocVXWM9E//yjdZsCgTw6O KHGqGxcyu5JHE2GttSfPSe4Z4cXYU049fucsYgFJIO2GM/rVkUgxB2io+Q2sjv5y 0lajKv6Ac5PcxSJrRJgbnTMtfUiTJzse0CGea63G/aLPv+e0OX2lUY9kZMTyGmhp wXPIh7RMnyvg8YnxQon9zCWMl5wnYc7jWwbtfLxuxuhyJJq1D6MjtROpYhVJjo7k NJKlecCDkCIPAba6UVhyMCqL0qczxfQ= -----END CERTIFICATE-----Generated at Sun May 4 11:03:25 2025 by rpki-client