$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a26470d-ea47-3244-aa96-6f8ea897059b.roa File: 0a26470d-ea47-3244-aa96-6f8ea897059b.roa (raw, json) Hash identifier: DFDE3irp7G5lweRzml7MaQN6WMckx21fwZYLy5zK4+A= Subject key identifier: 01:0C:D1:91:71:52:F6:53:0B:9D:4C:24:C6:D1:ED:9B:15:2B:46:0F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA124F54E81A497A299315C Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a26470d-ea47-3244-aa96-6f8ea897059b.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:24:f5:4e:81:a4:97:a2:99:31:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=dfb055cc-2fa7-46ec-94e0-126a1e48b498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:21:50:95:52:22:e3:96:99:f7:22:71:fd: 1f:fa:f9:da:65:93:94:7c:5f:2a:91:2b:21:a0:78: 24:19:f2:9d:4d:8d:6f:c7:03:7c:bc:52:e0:fa:6a: 0c:fc:7a:ff:a3:20:04:ab:e8:76:6b:bc:7a:b5:42: 4c:e8:63:a2:bd:e0:87:60:86:30:5a:a4:75:54:92: 65:69:e3:ce:80:d6:c3:b1:7d:d0:b0:2e:48:01:6e: a3:42:8e:50:ae:4c:c3:06:96:32:34:46:07:90:90: 0a:f4:ac:36:51:c6:9e:53:e0:40:03:2d:58:01:cb: 66:72:a3:60:d9:70:1d:ca:3d:d0:cc:08:09:f0:87: 58:8d:86:28:32:01:1e:64:35:04:7a:43:8b:bd:43: 8c:7d:7a:a5:86:ae:76:1e:d5:20:1d:64:81:09:1d: 40:b9:67:a2:dc:96:11:3b:fd:dd:a8:56:d2:8a:9e: 8b:6c:39:73:c3:93:cd:41:49:7d:21:07:05:38:7e: 72:b2:b0:b9:5e:26:9d:a4:31:04:b7:4a:28:21:bb: 35:61:61:4b:94:6e:97:bc:d5:2a:05:87:45:7f:f9: a7:d2:29:c3:09:cb:ea:76:74:a3:94:f7:17:6a:e6: f4:b6:d6:e6:b2:56:5c:6b:ae:46:ff:17:9e:9f:a9: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0C:D1:91:71:52:F6:53:0B:9D:4C:24:C6:D1:ED:9B:15:2B:46:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a26470d-ea47-3244-aa96-6f8ea897059b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9d:e5:99:2e:17:1c:41:b4:14:ca:31:c4:0d:cd:ee:eb:03: f0:ec:34:89:17:86:ca:df:48:bb:fe:2f:32:41:69:85:2c:40: a4:ec:cd:3f:ee:a5:09:b3:eb:6e:d4:65:8e:dc:de:2c:c6:d2: 15:56:0b:df:a1:de:c4:4d:a7:96:b7:7f:32:c5:fe:6c:c9:8b: dc:fe:22:a3:94:5a:50:85:e6:fe:ce:dc:86:a8:52:0d:e7:9b: 1b:ac:f9:f3:0f:92:d6:bd:d5:77:77:68:0e:4b:9e:63:c4:b7: 83:3f:ac:63:47:28:b9:03:67:ff:d2:16:d6:e6:3f:d1:50:40: 0f:37:d3:c6:44:1c:00:29:2a:5c:3c:bb:89:56:a9:cf:40:57: 5c:19:d5:3f:81:39:dd:38:3a:18:68:3c:f1:e2:92:05:1b:25: 4f:47:d9:b4:5e:e2:a8:b0:27:66:7b:d9:3c:f9:d1:a0:ec:58: e2:2b:54:c9:d6:0b:39:57:4e:b1:3b:b9:48:8f:29:10:a7:b4: b4:3d:47:3a:a3:f9:8e:ab:ea:5b:21:a0:38:e0:b4:39:da:8a: c8:0e:54:8a:28:e6:1f:06:e1:a4:f1:15:c9:ed:4a:40:5a:a7: f2:5e:f6:40:8c:65:2a:72:c9:2d:86:4c:5d:60:ef:8f:65:cb: 7b:1a:8e:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoST1ToGkl6KZMVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZGZiMDU1Y2MtMmZhNy00NmVjLTk0ZTAtMTI2YTFlNDhiNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBchUJVSIuOWmfcicf0f+vnaZZOUfF8qkSsh oHgkGfKdTY1vxwN8vFLg+moM/Hr/oyAEq+h2a7x6tUJM6GOiveCHYIYwWqR1VJJl aePOgNbDsX3QsC5IAW6jQo5QrkzDBpYyNEYHkJAK9Kw2UcaeU+BAAy1YActmcqNg 2XAdyj3QzAgJ8IdYjYYoMgEeZDUEekOLvUOMfXqlhq52HtUgHWSBCR1AuWei3JYR O/3dqFbSip6LbDlzw5PNQUl9IQcFOH5ysrC5XiadpDEEt0ooIbs1YWFLlG6XvNUq BYdFf/mn0inDCcvqdnSjlPcXaub0ttbmslZca65G/xeen6ko6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEM0ZFxUvZTC51MJMbR7ZsVK0YPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGEyNjQ3MGQtZWE0Ny0z MjQ0LWFhOTYtNmY4ZWE4OTcwNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKd5ZkuFxxBtBTKMcQNze7rA/DsNIkXhsrfSLv+LzJBaYUsQKTszT/u pQmz627UZY7c3izG0hVWC9+h3sRNp5a3fzLF/mzJi9z+IqOUWlCF5v7O3IaoUg3n mxus+fMPkta91Xd3aA5LnmPEt4M/rGNHKLkDZ//SFtbmP9FQQA8308ZEHAApKlw8 u4lWqc9AV1wZ1T+BOd04OhhoPPHikgUbJU9H2bRe4qiwJ2Z72Tz50aDsWOIrVMnW CzlXTrE7uUiPKRCntLQ9Rzqj+Y6r6lshoDjgtDnaisgOVIoo5h8G4aTxFcntSkBa p/Je9kCMZSpyyS2GTF1g749ly3sajik= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:09 2025 by rpki-client