$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0e7fa46b-74eb-3175-802d-62df1b601831.roa File: 0e7fa46b-74eb-3175-802d-62df1b601831.roa (raw, json) Hash identifier: DOCZ6MO9jA0e9/T3pNd8D6Drm1m84TbIuT6HO0iuIu4= Subject key identifier: CF:23:FB:20:F7:0C:1E:7E:25:4E:67:DE:F9:C2:42:FE:BD:FA:6D:AE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5821200C73C97E1D9E84B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0e7fa46b-74eb-3175-802d-62df1b601831.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:12:00:c7:3c:97:e1:d9:e8:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0b3072e7-1d17-48d5-aa40-58f6ed17adac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:64:90:d5:4b:2e:c3:27:af:9a:a5:d1:c3: f9:b8:cd:00:2a:e4:e1:00:bb:2f:27:31:2f:df:89: 40:07:6e:b7:da:21:53:5f:8b:29:ab:f3:a4:20:ba: 91:79:bc:73:a2:5d:21:68:1a:10:df:0b:61:56:d2: 68:ff:fe:3d:4a:4d:41:92:a7:86:60:81:34:e6:be: 5f:03:f7:b9:04:7f:86:d4:cf:ac:5a:6f:d3:fc:6a: fa:84:20:16:32:ef:5c:e4:eb:06:a1:9d:46:a5:2d: 2c:90:ae:24:f1:aa:e0:59:a5:20:2f:ac:6a:18:40: 86:3c:45:1e:dc:77:ae:86:61:c4:75:bb:88:f6:6d: 25:bc:6b:d1:9d:df:92:22:e4:9e:a1:df:6c:f4:2f: 65:28:4b:97:38:15:ab:64:b9:70:19:db:ac:f1:d0: 6f:09:d6:0d:93:9b:26:05:da:b3:0c:87:4d:07:56: bc:99:92:0c:ff:a4:e0:4e:73:18:6f:9b:f7:25:cf: 38:50:59:6f:5e:0e:27:97:12:b3:28:67:38:ae:f6: 76:22:49:66:7f:f2:2b:32:02:95:be:01:03:c3:f3: 60:27:75:f1:ab:74:0a:8f:0d:2d:53:6f:a4:51:02: 46:66:41:a8:fe:8d:f4:bd:9b:8b:48:39:80:91:08: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:23:FB:20:F7:0C:1E:7E:25:4E:67:DE:F9:C2:42:FE:BD:FA:6D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0e7fa46b-74eb-3175-802d-62df1b601831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:16:b1:15:89:8d:f0:f3:9f:dd:b6:c4:67:ed:88:58:95:3e: bc:76:72:fa:0d:7a:15:65:3d:3e:cd:fd:10:70:7c:ab:14:8b: 26:8a:86:a5:bc:da:f2:c8:72:a2:83:d8:20:f1:5d:f4:c3:f5: ae:92:af:58:57:ed:b3:75:98:63:24:1b:dc:f1:33:c5:6d:01: aa:6e:01:79:40:8a:fc:2d:3d:80:d9:ff:50:6b:67:8b:5f:14: 89:99:17:e3:fd:d2:24:4f:e6:64:72:e0:12:3b:9b:09:62:92: d4:ef:e4:f7:19:83:4f:43:d8:17:cb:ec:e5:ad:5e:56:c3:31: 8d:1e:11:91:73:ef:2f:0e:33:e4:e0:b1:bc:ba:a8:15:39:ea: 96:55:00:a1:01:9b:7c:9f:2b:15:d6:2d:20:ac:6f:4b:0f:3a: fb:74:38:54:eb:b1:02:14:fe:00:57:89:9d:49:9b:7b:a6:99: ff:22:41:a0:a0:8c:9c:8c:27:5f:3d:05:f8:ca:6b:eb:0c:06: 6a:41:70:a0:47:44:4c:dc:e0:4c:18:75:51:9b:6c:83:05:8e: 3c:9f:37:25:eb:ce:7f:0c:1c:8e:0b:a1:af:55:80:ed:06:b1: bc:7c:2d:7d:89:c1:63:8f:12:16:e7:2b:4a:7e:df:2c:1c:b5: 90:1b:1d:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghIAxzyX4dnoS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGIzMDcyZTctMWQxNy00OGQ1LWFhNDAtNThmNmVkMTdhZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6FkkNVLLsMnr5ql0cP5uM0AKuThALsvJzEv 34lAB2632iFTX4spq/OkILqRebxzol0haBoQ3wthVtJo//49Sk1BkqeGYIE05r5f A/e5BH+G1M+sWm/T/Gr6hCAWMu9c5OsGoZ1GpS0skK4k8argWaUgL6xqGECGPEUe 3HeuhmHEdbuI9m0lvGvRnd+SIuSeod9s9C9lKEuXOBWrZLlwGdus8dBvCdYNk5sm BdqzDIdNB1a8mZIM/6TgTnMYb5v3Jc84UFlvXg4nlxKzKGc4rvZ2Iklmf/IrMgKV vgEDw/NgJ3Xxq3QKjw0tU2+kUQJGZkGo/o30vZuLSDmAkQiBCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8j+yD3DB5+JU5n3vnCQv69+m2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGU3ZmE0NmItNzRlYi0z MTc1LTgwMmQtNjJkZjFiNjAxODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIWsRWJjfDzn922xGftiFiVPrx2cvoNehVlPT7N/RBwfKsUiyaKhqW8 2vLIcqKD2CDxXfTD9a6Sr1hX7bN1mGMkG9zxM8VtAapuAXlAivwtPYDZ/1BrZ4tf FImZF+P90iRP5mRy4BI7mwliktTv5PcZg09D2BfL7OWtXlbDMY0eEZFz7y8OM+Tg sby6qBU56pZVAKEBm3yfKxXWLSCsb0sPOvt0OFTrsQIU/gBXiZ1Jm3ummf8iQaCg jJyMJ189BfjKa+sMBmpBcKBHREzc4EwYdVGbbIMFjjyfNyXrzn8MHI4Loa9VgO0G sbx8LX2JwWOPEhbnK0p+3ywctZAbHXU= -----END CERTIFICATE-----Generated at Fri Apr 4 08:36:05 2025 by rpki-client