$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d38dc57f-2981-3b2c-9030-22e62e506079.roa File: d38dc57f-2981-3b2c-9030-22e62e506079.roa (raw, json) Hash identifier: Ob0Wdvic2T/QcOQ7lFH/XFmD3jddWbhYqcEx1nUHNOw= Subject key identifier: 2C:00:1A:3A:8B:E1:13:68:6F:7B:9B:D9:D7:66:2E:B8:FD:37:FA:1B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6DE74D75A2138DFDB040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d38dc57f-2981-3b2c-9030-22e62e506079.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6d:e7:4d:75:a2:13:8d:fd:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=49beca3a-7a65-4fea-9607-e83ebe688cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3a:1e:77:61:1b:81:3b:b4:dd:34:97:56:79: aa:f7:27:a3:eb:7c:db:ee:86:93:a1:58:90:92:fd: a9:7d:1d:64:48:73:c5:8f:30:fc:2f:2b:8f:71:1b: 9e:e9:fd:94:c8:93:f2:6d:41:58:88:77:66:56:88: b0:fb:f2:93:6a:92:cc:56:f4:58:c8:ff:87:9a:91: 31:11:00:8d:61:40:de:98:91:8c:cd:65:4e:0c:55: c2:65:ad:66:a6:2d:c4:db:02:01:53:99:55:da:63: 23:61:b0:cc:ea:cf:29:eb:2a:3a:63:2a:36:a8:1f: 47:ab:06:d8:bd:84:16:64:98:78:0b:82:1c:b2:5d: 38:8a:32:96:e2:87:6e:1d:60:e5:8b:56:25:f3:fd: a5:c8:41:ef:85:98:ec:06:c5:9b:92:c0:0a:9f:d0: 92:19:87:3e:9b:27:09:59:01:1b:d2:87:c0:61:7d: 63:2d:ce:0a:6f:7a:2a:db:a4:57:45:d4:85:17:99: b3:79:79:d2:20:26:ac:1f:8c:ba:5d:e8:c8:c7:71: 3b:6a:61:b4:69:3a:37:d2:13:cd:0b:db:6d:27:fb: f2:b6:94:49:2e:fd:a2:78:6e:34:09:3e:d6:ca:97: d1:40:3f:6b:b4:ae:8c:26:ea:dc:f2:48:f3:b8:d5: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:00:1A:3A:8B:E1:13:68:6F:7B:9B:D9:D7:66:2E:B8:FD:37:FA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d38dc57f-2981-3b2c-9030-22e62e506079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a1:67:d9:bb:53:46:bf:3c:2c:97:c5:6e:f4:e0:78:a7:75: a8:d9:6d:d1:75:ba:b9:c2:94:7c:15:ac:9f:6d:c3:9f:86:f3: 8d:28:04:ae:df:d6:ae:28:d4:08:81:2c:74:c4:15:eb:bd:aa: 80:7c:0c:ff:c8:c3:80:83:16:1b:7d:ab:7e:33:9f:50:11:2d: 2a:d0:a8:ec:72:4b:0e:ee:7a:b5:b6:89:94:a8:1b:a9:6a:8a: 95:2c:8f:fb:af:e6:75:bf:28:0f:12:be:b6:4e:de:85:6c:c8: f9:2a:2c:7f:01:97:81:36:24:c7:c1:7b:6a:61:aa:d4:89:a2: 3b:ee:4c:6d:ae:9f:2d:60:74:2b:c6:7a:65:96:fb:81:ab:d1: 05:fa:87:e7:06:3f:30:87:e8:ee:11:6e:79:fe:ed:25:5e:db: 35:07:8f:9d:a9:fc:9e:95:aa:2d:1c:ea:07:af:bc:78:73:c5: 94:6b:f7:06:c0:f0:c2:a2:11:aa:0e:0d:f7:11:f6:58:10:e3: a0:c6:be:ba:e0:00:6f:0c:0d:25:a7:f1:2c:6c:4c:11:20:fa: 5a:5f:3b:ac:5b:9b:be:01:5e:7d:b5:72:c5:e5:8b:10:8f:46: 9c:c0:00:b4:4d:04:68:20:b7:78:43:43:ba:e7:e6:0e:c0:92: 2c:7e:86:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku23nTXWiE439sEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDliZWNhM2EtN2E2NS00ZmVhLTk2MDctZTgzZWJlNjg4Y2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzoed2EbgTu03TSXVnmq9yej63zb7oaToViQ kv2pfR1kSHPFjzD8LyuPcRue6f2UyJPybUFYiHdmVoiw+/KTapLMVvRYyP+HmpEx EQCNYUDemJGMzWVODFXCZa1mpi3E2wIBU5lV2mMjYbDM6s8p6yo6Yyo2qB9HqwbY vYQWZJh4C4Icsl04ijKW4oduHWDli1Yl8/2lyEHvhZjsBsWbksAKn9CSGYc+mycJ WQEb0ofAYX1jLc4Kb3oq26RXRdSFF5mzeXnSICasH4y6XejIx3E7amG0aTo30hPN C9ttJ/vytpRJLv2ieG40CT7WypfRQD9rtK6MJurc8kjzuNUz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwAGjqL4RNob3ub2ddmLrj9N/obMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDM4ZGM1N2YtMjk4MS0z YjJjLTkwMzAtMjJlNjJlNTA2MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqhZ9m7U0a/PCyXxW704HindajZbdF1urnClHwVrJ9tw5+G840oBK7f 1q4o1AiBLHTEFeu9qoB8DP/Iw4CDFht9q34zn1ARLSrQqOxySw7uerW2iZSoG6lq ipUsj/uv5nW/KA8SvrZO3oVsyPkqLH8Bl4E2JMfBe2phqtSJojvuTG2uny1gdCvG emWW+4Gr0QX6h+cGPzCH6O4Rbnn+7SVe2zUHj52p/J6Vqi0c6gevvHhzxZRr9wbA 8MKiEaoODfcR9lgQ46DGvrrgAG8MDSWn8SxsTBEg+lpfO6xbm74BXn21csXlixCP RpzAALRNBGggt3hDQ7rn5g7Akix+huA= -----END CERTIFICATE-----Generated at Sun May 4 11:08:16 2025 by rpki-client