$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa File: b3713e25-419a-33c8-af5b-3cb02587140b.roa (raw, json) Hash identifier: obEPUyiF4vK2lDE30KZRf04kvTNcUFYkF/3Z9042n28= Subject key identifier: 72:4A:49:47:06:A9:C7:3C:69:00:82:73:9A:CC:FF:4D:37:E5:F2:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817BCF29A9A34748125980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 11344 IP address blocks: 142.250.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7b:cf:29:a9:a3:47:48:12:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e8d42076-76ea-421d-9619-7e42b96a66e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:24:ad:73:fc:cd:a5:6b:79:a6:db:a6:d9: 1d:ce:9b:ff:b5:67:46:bf:db:e5:d3:2d:96:c6:aa: 73:fd:67:24:55:7a:5c:e5:94:ff:4f:9d:70:bc:35: 9e:e4:f6:2d:30:79:2c:c6:0e:25:0b:bd:c1:93:23: 9c:b4:6a:fc:db:e5:50:81:32:d2:ce:92:0c:4f:c8: 2f:87:97:61:f2:6c:c3:08:09:0e:ff:87:0b:45:cc: f9:b3:c8:5e:ca:8f:89:5a:4f:95:a7:33:10:04:67: 10:ca:9d:27:5b:af:17:f5:d7:ac:63:0f:3b:1d:9c: 3a:7a:ad:2e:0a:cb:f3:5d:10:b2:41:29:8d:44:42: ca:66:b7:52:2c:33:81:b3:20:20:28:98:89:7e:80: 7e:38:26:d9:6d:6e:e7:04:a0:52:89:15:45:a8:2b: 60:60:f1:34:00:66:89:07:12:ba:90:0d:b7:eb:55: 29:03:7f:dd:00:ef:cf:c2:07:64:eb:91:44:0a:46: 9a:b4:ef:89:01:fd:a5:d3:cb:8e:de:08:9a:cc:35: 13:2f:9e:23:6b:e8:79:55:dd:b7:52:dd:a0:bc:b4: 3d:92:9d:30:ab:56:30:5a:76:e2:7d:9c:78:36:23: c0:05:87:d1:4d:e3:8e:34:05:80:5d:7f:26:a0:44: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4A:49:47:06:A9:C7:3C:69:00:82:73:9A:CC:FF:4D:37:E5:F2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:4e:78:cb:b5:ef:82:4b:1a:87:e3:33:17:d8:bd:e5:2e:b9: 89:cb:de:80:44:16:72:52:57:43:c4:94:78:34:5d:98:4d:e7: 82:52:34:e3:f6:85:0b:2a:b9:1d:da:05:b8:aa:ee:67:79:57: 8d:79:0a:61:57:b7:c4:31:cd:c2:71:dd:cb:69:a9:58:c6:1a: b4:fa:b9:ae:33:8f:13:21:d2:9a:53:a1:5d:9f:71:a7:44:25: e2:04:fa:c1:d3:ea:3f:2a:84:c2:b2:b2:d2:b4:ca:4a:5a:b1: 58:eb:19:b5:5a:a6:b7:28:73:4b:9c:dc:42:3b:cb:55:74:4f: aa:12:11:f2:74:b4:85:84:5e:3c:3d:f9:f2:07:be:88:49:1d: 0c:4e:d7:60:67:88:a2:6f:77:4d:a9:8d:a7:c5:e7:92:c0:83: 22:2b:2c:27:ff:32:66:b5:db:e4:8d:e6:26:57:f1:3a:68:48: 54:e3:81:16:bc:08:11:de:34:35:45:79:a4:82:00:ed:52:79: f4:b7:f7:a0:76:fd:bf:bc:7c:13:f4:db:ff:33:3f:0f:a3:6e: 70:80:61:5f:02:23:ba:7a:b5:68:e0:90:fc:46:70:1f:2e:77: a0:0c:3c:98:9a:56:da:3f:b1:97:41:9d:62:41:ac:32:35:3e: 8b:db:57:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXvPKamjR0gSWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZThkNDIwNzYtNzZlYS00MjFkLTk2MTktN2U0MmI5NmE2NmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB8krXP8zaVreabbptkdzpv/tWdGv9vl0y2W xqpz/WckVXpc5ZT/T51wvDWe5PYtMHksxg4lC73BkyOctGr82+VQgTLSzpIMT8gv h5dh8mzDCAkO/4cLRcz5s8heyo+JWk+VpzMQBGcQyp0nW68X9desYw87HZw6eq0u CsvzXRCyQSmNRELKZrdSLDOBsyAgKJiJfoB+OCbZbW7nBKBSiRVFqCtgYPE0AGaJ BxK6kA2361UpA3/dAO/Pwgdk65FECkaatO+JAf2l08uO3giazDUTL54ja+h5Vd23 Ut2gvLQ9kp0wq1YwWnbifZx4NiPABYfRTeOONAWAXX8moESYPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJKSUcGqcc8aQCCc5rM/0035fJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjM3MTNlMjUtNDE5YS0z M2M4LWFmNWItM2NiMDI1ODcxNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApOeMu174JLGofjMxfYveUuuYnL3oBEFnJSV0PElHg0XZhN54JSNOP2 hQsquR3aBbiq7md5V415CmFXt8QxzcJx3ctpqVjGGrT6ua4zjxMh0ppToV2fcadE JeIE+sHT6j8qhMKystK0ykpasVjrGbVaprcoc0uc3EI7y1V0T6oSEfJ0tIWEXjw9 +fIHvohJHQxO12BniKJvd02pjafF55LAgyIrLCf/Mma12+SN5iZX8TpoSFTjgRa8 CBHeNDVFeaSCAO1SefS396B2/b+8fBP02/8zPw+jbnCAYV8CI7p6tWjgkPxGcB8u d6AMPJiaVto/sZdBnWJBrDI1PovbV98= -----END CERTIFICATE-----Generated at Fri Apr 4 10:10:34 2025 by rpki-client