$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0db6d064-acdb-3ab9-ac6c-6b5952d692e3.roa File: 0db6d064-acdb-3ab9-ac6c-6b5952d692e3.roa (raw, json) Hash identifier: f0JmedfrrwDYy0zZpwYXezlKoruG7CjVVQctHBPS0mU= Subject key identifier: 99:B4:CB:54:A4:94:ED:12:1F:8E:0A:0E:D9:E3:92:3F:CB:74:CF:E6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58225C3A2EE19730D51A8A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0db6d064-acdb-3ab9-ac6c-6b5952d692e3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:25:c3:a2:ee:19:73:0d:51:a8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=780c8ae2-c674-474c-803e-4006315c06cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:d8:2b:08:ee:3c:b2:0d:9e:10:e3:06:93: bd:e8:2a:c8:40:53:a5:95:1e:b4:3c:68:1c:2b:4d: bb:df:db:87:93:b3:1b:4f:2b:ff:a3:25:15:c4:cb: 15:6f:0d:5e:05:74:19:c8:f0:c6:96:61:ee:4e:d6: 41:7e:a9:0e:bc:48:d0:30:56:fc:2f:6f:75:af:e7: cc:04:6b:80:ee:5f:2c:ad:03:30:4e:61:06:be:58: fb:01:e9:4b:5a:b3:3d:19:13:6f:9f:44:83:f3:b3: a8:9f:4b:81:02:77:9e:cc:c6:00:bc:6a:d2:70:0e: 94:55:a4:df:cd:78:fd:f3:70:64:56:fc:d7:49:ea: 8e:ad:41:74:33:7b:82:44:a2:3c:59:8b:05:ba:5e: 36:d1:5d:80:3e:02:40:67:89:ca:98:cc:8d:ae:f9: ac:7c:9f:12:53:e6:ae:97:bf:a7:21:43:74:bd:3e: 58:04:9d:29:1e:f8:f8:a9:02:78:c0:11:cf:06:1a: 4b:91:f4:0b:75:07:cf:cd:98:d7:fe:08:7b:2d:7e: 1e:e3:a0:2d:0d:e6:99:72:e3:70:71:02:32:79:4c: e8:cf:5c:90:5b:5a:77:6b:f3:4e:dc:3c:85:51:ce: eb:eb:6b:ff:61:96:bb:dd:7a:ea:89:88:1c:1a:71: 65:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B4:CB:54:A4:94:ED:12:1F:8E:0A:0E:D9:E3:92:3F:CB:74:CF:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0db6d064-acdb-3ab9-ac6c-6b5952d692e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:08:11:bf:50:0f:54:f7:7a:66:cc:12:3c:cb:ce:7e:9d:46: da:9d:29:7b:19:de:c3:15:1d:40:6e:c4:70:96:4f:9f:3f:f5: 85:f2:45:5b:02:5f:f4:2a:eb:4b:ca:a5:56:f5:6a:7f:bd:98: 1a:5d:27:b9:0b:eb:63:d9:f6:3c:49:6f:93:c3:c8:32:8f:99: 3f:f4:a6:ad:ae:27:dc:f2:48:31:d3:19:9c:26:2f:f1:02:ba: 81:a9:67:86:b5:03:9e:16:3f:90:70:24:79:17:ab:20:22:8d: 3a:28:08:be:ba:3f:0b:84:7d:ee:86:a1:f0:49:5a:7a:54:14: 50:de:37:29:93:02:72:32:04:02:98:c3:b5:0b:49:86:e0:6f: c6:6c:4d:ac:03:77:54:4a:ee:22:97:44:e9:9c:49:99:50:c4: ea:fc:90:d0:8e:f0:05:d0:53:14:83:94:76:fe:c3:08:8d:77: 00:ff:61:f8:51:e1:1e:eb:75:56:ec:83:48:eb:ac:5e:ec:48: 84:75:87:9b:a4:71:94:de:b0:be:3c:0c:b0:f5:35:d0:15:82: 29:98:23:4a:1a:bf:40:11:82:72:3c:98:57:7c:a1:f8:0e:fa: dd:45:bc:93:d6:96:a9:b4:40:93:8c:d3:7a:53:1a:95:1a:0b: f5:03:aa:c8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjFgiXDou4Zcw1RqKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzgwYzhhZTItYzY3NC00NzRjLTgwM2UtNDAwNjMxNWMwNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTPYKwjuPLINnhDjBpO96CrIQFOllR60PGgc K02739uHk7MbTyv/oyUVxMsVbw1eBXQZyPDGlmHuTtZBfqkOvEjQMFb8L291r+fM BGuA7l8srQMwTmEGvlj7AelLWrM9GRNvn0SD87Oon0uBAneezMYAvGrScA6UVaTf zXj983BkVvzXSeqOrUF0M3uCRKI8WYsFul420V2APgJAZ4nKmMyNrvmsfJ8SU+au l7+nIUN0vT5YBJ0pHvj4qQJ4wBHPBhpLkfQLdQfPzZjX/gh7LX4e46AtDeaZcuNw cQIyeUzoz1yQW1p3a/NO3DyFUc7r62v/YZa73XrqiYgcGnFlPQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJm0y1SklO0SH44KDtnjkj/LdM/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGRiNmQwNjQtYWNkYi0z YWI5LWFjNmMtNmI1OTUyZDY5MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBjvowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASggRv1APVPd6ZswSPMvOfp1G2p0pexnewxUdQG7EcJZPnz/1hfJFWwJf 9CrrS8qlVvVqf72YGl0nuQvrY9n2PElvk8PIMo+ZP/Smra4n3PJIMdMZnCYv8QK6 galnhrUDnhY/kHAkeRerICKNOigIvro/C4R97oah8ElaelQUUN43KZMCcjIEApjD tQtJhuBvxmxNrAN3VEruIpdE6ZxJmVDE6vyQ0I7wBdBTFIOUdv7DCI13AP9h+FHh Hut1VuyDSOusXuxIhHWHm6RxlN6wvjwMsPU10BWCKZgjShq/QBGCcjyYV3yh+A76 3UW8k9aWqbRAk4zTelMalRoL9QOqyA== -----END CERTIFICATE-----Generated at Fri Apr 4 08:25:10 2025 by rpki-client