$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa File: 0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa (raw, json) Hash identifier: li0m7vPuM8FZCAWHlvlGsjKZBsY1PvanW7zzFParjfA= Subject key identifier: 1A:DC:86:BC:03:41:07:4F:10:5E:17:D5:04:58:DB:EE:D6:1A:B9:C7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12C087BF784BABAD86640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.251.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2c:08:7b:f7:84:ba:ba:d8:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=3a4ef017-a70a-4564-b1c6-81129bee20cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:3c:a7:4e:20:5b:b0:f2:0c:bf:8e:d7:c0: c8:fe:88:82:4b:ba:e8:b0:6c:29:d9:be:d6:bf:6c: 78:1f:84:1c:03:a8:b9:38:af:98:40:87:3a:20:f9: 1b:41:45:f2:ff:ad:d5:4f:f3:ca:8a:90:25:4f:7a: 29:1e:6f:fe:b5:fd:c4:72:fe:41:d1:a4:a7:e4:59: cd:52:d2:93:be:66:f5:29:90:9d:35:fe:fa:31:55: f5:c7:48:0b:e3:bb:67:af:d0:87:ff:cf:f5:a1:5d: bc:b9:15:9d:0b:5b:27:f4:fd:74:73:92:b4:f6:75: c5:5c:3e:6a:94:f4:96:10:d3:c1:72:fb:c2:fd:b3: 1f:22:f0:78:0e:1c:c5:4d:c6:43:cc:f6:b0:1f:30: 7b:3e:17:d3:5b:ff:6c:9a:61:ab:9b:e4:ee:7b:0a: d7:03:76:3e:a6:94:df:9e:e4:57:5d:01:99:dc:32: 95:0e:18:fa:f4:1c:5a:8e:0b:30:e4:55:7c:cd:ae: 63:36:a2:dc:ff:ba:8b:61:c0:63:d0:09:c6:a2:79: 4b:5d:c0:fb:a1:1b:9b:f1:12:c3:87:a9:96:9f:75: 54:fb:7f:37:67:a8:6a:a2:66:3c:7c:43:dc:15:83: de:17:86:75:57:9f:00:69:ad:97:58:a7:1e:d1:cd: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DC:86:BC:03:41:07:4F:10:5E:17:D5:04:58:DB:EE:D6:1A:B9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:36:6b:35:c3:6b:51:5d:7c:d5:4e:13:1e:77:9b:fe:f2:b1: bc:2d:46:2f:93:b1:55:b3:b9:04:a1:4f:d3:09:f8:3d:e4:6f: 33:57:08:e0:dc:2d:47:3a:33:4b:e6:c2:5b:55:6e:5a:a0:71: 05:bf:e9:6a:6b:ec:dd:4d:99:c7:85:88:81:78:51:bc:e0:e8: d2:41:4b:b8:eb:c9:79:ec:cd:90:6f:ba:31:52:bc:fb:3d:b0: e4:50:d3:54:4a:a3:7d:33:d3:d4:68:6a:b9:22:9c:fc:e1:9e: c8:d7:81:7e:67:8c:9b:44:fe:c3:c9:eb:d4:66:aa:9b:8b:f7: a2:cb:43:d8:68:eb:1d:b7:ae:67:33:83:18:67:2c:3a:1e:f0: 1f:34:6e:64:be:ce:28:5a:c7:a2:2f:da:6b:87:cd:7f:51:db: 52:76:53:eb:95:b9:14:74:37:77:ea:00:65:24:4b:82:19:5e: 2f:ca:ca:78:b2:72:ae:2a:40:4f:0c:2f:27:e1:e3:67:03:8e: b1:57:18:42:95:df:b0:6a:35:1c:f7:f8:c6:fc:a8:98:ec:df: d8:b7:f0:9e:4f:8d:cf:c6:d5:2f:9a:6b:b3:03:3c:83:cf:66: 5b:ae:39:65:7d:38:21:5c:ed:a0:c3:f6:7e:29:41:89:94:b8: 49:9c:46:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSwIe/eEurrYZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk M2E0ZWYwMTctYTcwYS00NTY0LWIxYzYtODExMjliZWUyMGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4M8p04gW7DyDL+O18DI/oiCS7rosGwp2b7W v2x4H4QcA6i5OK+YQIc6IPkbQUXy/63VT/PKipAlT3opHm/+tf3Ecv5B0aSn5FnN UtKTvmb1KZCdNf76MVX1x0gL47tnr9CH/8/1oV28uRWdC1sn9P10c5K09nXFXD5q lPSWENPBcvvC/bMfIvB4DhzFTcZDzPawHzB7PhfTW/9smmGrm+TuewrXA3Y+ppTf nuRXXQGZ3DKVDhj69Bxajgsw5FV8za5jNqLc/7qLYcBj0AnGonlLXcD7oRub8RLD h6mWn3VU+383Z6hqomY8fEPcFYPeF4Z1V58Aaa2XWKce0c0AAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrchrwDQQdPEF4X1QRY2+7WGrnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGViODVhNzAtZWY0MC0z OWU0LThlYzUtNjk1MWQ2YzJlZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk2azXDa1FdfNVOEx53m/7ysbwtRi+TsVWzuQShT9MJ+D3kbzNXCODc LUc6M0vmwltVblqgcQW/6Wpr7N1NmceFiIF4Ubzg6NJBS7jryXnszZBvujFSvPs9 sORQ01RKo30z09RoarkinPzhnsjXgX5njJtE/sPJ69RmqpuL96LLQ9ho6x23rmcz gxhnLDoe8B80bmS+zihax6Iv2muHzX9R21J2U+uVuRR0N3fqAGUkS4IZXi/Kyniy cq4qQE8MLyfh42cDjrFXGEKV37BqNRz3+Mb8qJjs39i38J5Pjc/G1S+aa7MDPIPP ZluuOWV9OCFc7aDD9n4pQYmUuEmcRnY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:59 2025 by rpki-client