$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa File: ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa (raw, json) Hash identifier: 0fv4twHUP0YdAp37u3SKTupImracgnhjTCj+xLTeGiQ= Subject key identifier: AA:6E:FB:4C:D3:CE:B6:F6:EB:A2:12:88:0E:68:FE:87:E2:D2:B5:9D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD04C5D22644C92006A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 216.58.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d0:4c:5d:22:64:4c:92:00:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5631dc0f-57f7-465a-a697-b7dd2b3bb565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:5c:9f:ac:1d:bc:7f:ad:8c:c8:db:d3:5f: 47:a1:a3:93:ed:f3:b2:5c:58:15:42:e6:93:82:89: 63:b2:53:2e:cc:65:19:12:7c:10:3d:0f:7e:3a:a3: 95:2d:19:58:6e:35:8a:27:c2:46:d0:e2:c3:6e:24: 5e:b0:c7:4b:a7:f9:2b:6a:b0:4b:cd:5a:eb:55:83: 22:ea:db:3d:42:07:bb:58:1a:8e:21:98:4b:60:f6: 83:8f:57:c5:85:9e:aa:5f:9b:d2:ff:e5:65:ae:31: 0f:af:cc:a5:ae:16:c3:5b:ed:4d:63:db:d5:c1:25: cc:5c:7e:74:ed:12:72:1c:d9:7a:16:34:36:98:e5: 20:e1:0f:e9:99:8a:e2:2c:bd:4d:2d:75:70:61:af: 29:12:8e:8e:60:a5:9b:f6:97:79:f3:de:9e:b8:0c: 1a:d6:40:3b:77:63:32:b1:b5:ea:67:1e:75:8c:2e: 2d:c7:6c:95:59:6a:c6:37:d3:a4:c8:7c:6e:00:68: 43:81:e0:26:f9:7f:98:31:7e:1a:46:c1:1d:0c:36: 67:5b:fc:57:f4:53:c5:22:59:25:f3:9d:f5:df:a6: 10:66:23:ce:08:5b:9b:87:10:3c:ba:48:41:cd:e4: ef:3e:4f:8a:5e:a9:49:48:37:57:09:29:10:a4:4c: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6E:FB:4C:D3:CE:B6:F6:EB:A2:12:88:0E:68:FE:87:E2:D2:B5:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ff9bbe8c-47ef-3326-ba49-cf68998170a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8f:61:53:64:4f:72:67:64:04:6c:58:26:33:42:7a:1d:9a: dc:b9:28:b5:07:0c:4f:67:7c:51:1b:dc:3e:8e:b9:13:9a:6a: 98:63:c3:2a:5b:2f:9b:f9:ef:e7:fe:67:61:f9:f0:a0:43:e1: f0:55:1e:ab:bb:12:86:85:e3:a8:b0:53:19:07:6f:82:00:88: 05:3b:ab:25:19:f1:f2:27:8e:70:58:87:7f:fc:64:5b:c5:bc: e8:46:85:a9:9a:14:a6:c7:a4:b1:90:85:b3:06:5f:ee:64:87: 03:56:b9:74:69:7d:62:ef:6d:d9:20:9c:da:3d:63:72:35:83: 3c:36:d5:fe:21:ee:25:67:76:ae:e1:75:8e:1b:0a:6b:98:54: df:98:57:1c:81:e8:b0:66:ea:34:73:44:27:cc:fd:cc:20:51: 8c:50:91:f0:b7:ee:5c:dc:f5:02:97:49:ae:d9:f6:f3:19:7b: 55:a0:a3:9c:97:dc:f6:51:9a:8d:89:dd:39:c2:9c:00:81:31: b3:df:09:01:96:06:ae:2e:8c:23:13:ea:21:ad:bc:2b:f0:6a: 38:73:b4:2c:7e:df:9e:f2:ea:35:d3:29:da:47:5b:ae:b5:76: c6:d5:7b:88:4b:3e:3e:8c:6f:3c:fa:eb:61:a5:17:a8:a4:47: 09:42:a0:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutBMXSJkTJIAagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTYzMWRjMGYtNTdmNy00NjVhLWE2OTctYjdkZDJiM2JiNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldlcn6wdvH+tjMjb019HoaOT7fOyXFgVQuaT goljslMuzGUZEnwQPQ9+OqOVLRlYbjWKJ8JG0OLDbiResMdLp/krarBLzVrrVYMi 6ts9Qge7WBqOIZhLYPaDj1fFhZ6qX5vS/+VlrjEPr8ylrhbDW+1NY9vVwSXMXH50 7RJyHNl6FjQ2mOUg4Q/pmYriLL1NLXVwYa8pEo6OYKWb9pd5896euAwa1kA7d2My sbXqZx51jC4tx2yVWWrGN9OkyHxuAGhDgeAm+X+YMX4aRsEdDDZnW/xX9FPFIlkl 853136YQZiPOCFubhxA8ukhBzeTvPk+KXqlJSDdXCSkQpEz9uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpu+0zTzrb266ISiA5o/ofi0rWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmY5YmJlOGMtNDdlZi0z MzI2LWJhNDktY2Y2ODk5ODE3MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2PYVNkT3JnZARsWCYzQnodmty5KLUHDE9nfFEb3D6OuROaaphjwypb L5v57+f+Z2H58KBD4fBVHqu7EoaF46iwUxkHb4IAiAU7qyUZ8fInjnBYh3/8ZFvF vOhGhamaFKbHpLGQhbMGX+5khwNWuXRpfWLvbdkgnNo9Y3I1gzw21f4h7iVndq7h dY4bCmuYVN+YVxyB6LBm6jRzRCfM/cwgUYxQkfC37lzc9QKXSa7Z9vMZe1Wgo5yX 3PZRmo2J3TnCnACBMbPfCQGWBq4ujCMT6iGtvCvwajhztCx+357y6jXTKdpHW661 dsbVe4hLPj6Mbzz662GlF6ikRwlCoOY= -----END CERTIFICATE-----Generated at Sun May 4 11:08:27 2025 by rpki-client