$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/11fe363d-b183-3cbd-ad77-fcc4ce27a24a.roa File: 11fe363d-b183-3cbd-ad77-fcc4ce27a24a.roa (raw, json) Hash identifier: vyRr1gQGD6MZWxOQLjFKNX8p0Nfxf6T06QXn1xkT4yA= Subject key identifier: 5F:1B:9A:67:C1:D9:5B:A3:97:1A:28:5C:EB:46:70:8E:68:D3:B2:39 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5821E23911AE0175B2CAE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/11fe363d-b183-3cbd-ad77-fcc4ce27a24a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:1e:23:91:1a:e0:17:5b:2c:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=da14ea04-319b-4296-8c32-88d843139ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:5b:5c:4b:82:4b:4f:ad:63:ca:e0:d1:3e: d7:35:02:ee:cf:6e:32:97:d3:c3:ab:46:f1:27:de: b4:5f:ce:68:ec:38:dd:18:c3:71:b8:f5:66:43:0b: d4:ea:b7:bb:ff:20:50:9f:1a:a3:48:7f:3a:a2:eb: b8:dc:26:00:7e:42:0d:e5:47:52:05:17:64:58:c6: 7b:7b:26:03:94:81:92:6f:8b:66:98:b6:98:73:f2: 40:7f:bc:25:26:46:1c:9f:90:17:e7:1a:a7:cc:a5: 9a:e8:a2:de:3b:df:b0:4b:57:b2:a6:17:23:fe:bc: 20:a5:11:cd:70:21:aa:a3:7c:c7:e5:87:8b:59:4a: 64:d2:e5:47:de:9a:25:90:1c:9e:d0:0c:cb:b8:17: 55:b5:05:95:9c:d4:aa:af:e1:1d:b5:26:d1:0f:89: 6c:63:df:6b:a7:ca:20:7b:73:51:60:39:9d:59:ec: cb:b0:e2:6f:c3:aa:c7:3e:0f:b3:78:c7:bc:cc:6b: d6:0a:d8:c2:64:8f:2d:7c:14:0d:75:85:c0:08:ec: 03:4c:ec:84:99:b7:0d:76:e9:7d:d7:60:c9:dc:23: b4:ce:63:0d:27:43:6a:23:8d:29:69:8d:84:e9:23: 24:bb:21:2f:90:01:69:e8:af:fb:66:10:1c:89:3f: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1B:9A:67:C1:D9:5B:A3:97:1A:28:5C:EB:46:70:8E:68:D3:B2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/11fe363d-b183-3cbd-ad77-fcc4ce27a24a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c3:76:37:ec:b6:86:9a:e9:d3:6c:47:eb:11:c6:1b:2d:b3: d3:78:37:8f:1c:cc:cf:b7:05:96:d4:ee:36:e5:d6:f7:9b:af: d6:20:5d:b6:56:c8:d3:e7:14:8d:2e:02:11:a2:bb:ba:6d:e4: 64:84:ff:48:da:31:08:e2:7e:b8:79:0b:e5:e6:22:14:40:86: be:5c:f9:88:9a:7c:f5:81:6d:2b:37:71:af:52:0e:ab:ab:9e: 56:ef:b1:f5:9c:82:56:53:05:f0:99:06:87:f4:35:56:66:4c: b4:e0:c6:3b:e9:0d:4f:0e:70:6b:96:f7:a9:e6:97:50:c3:50: e0:b0:41:22:4a:63:eb:59:f1:da:b7:29:14:1c:89:79:31:f3: 27:7f:47:bb:a6:e2:d6:33:31:41:1f:70:d6:aa:26:6b:4f:02: 9b:29:9d:35:33:16:6a:bd:1a:97:7d:d2:b1:eb:31:78:66:cf: 65:cb:88:dc:7a:52:6d:91:e3:00:dd:1f:ab:9a:cc:63:6e:c2: 44:21:cf:52:b1:4c:07:e7:9e:6f:cf:5a:20:74:74:16:ff:b9: 23:dc:e3:5c:20:f3:a0:12:e6:83:d9:58:0d:3f:73:a3:a4:ef: 2c:3d:31:85:6b:9e:6c:b4:e7:46:36:f6:70:3f:e0:fe:6c:16: df:3a:1a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgh4jkRrgF1ssroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGExNGVhMDQtMzE5Yi00Mjk2LThjMzItODhkODQzMTM5ZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMxbXEuCS0+tY8rg0T7XNQLuz24yl9PDq0bx J960X85o7DjdGMNxuPVmQwvU6re7/yBQnxqjSH86ouu43CYAfkIN5UdSBRdkWMZ7 eyYDlIGSb4tmmLaYc/JAf7wlJkYcn5AX5xqnzKWa6KLeO9+wS1eyphcj/rwgpRHN cCGqo3zH5YeLWUpk0uVH3polkBye0AzLuBdVtQWVnNSqr+EdtSbRD4lsY99rp8og e3NRYDmdWezLsOJvw6rHPg+zeMe8zGvWCtjCZI8tfBQNdYXACOwDTOyEmbcNdul9 12DJ3CO0zmMNJ0NqI40paY2E6SMkuyEvkAFp6K/7ZhAciT/TTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8bmmfB2VujlxooXOtGcI5o07I5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTFmZTM2M2QtYjE4My0z Y2JkLWFkNzctZmNjNGNlMjdhMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDDdjfstoaa6dNsR+sRxhsts9N4N48czM+3BZbU7jbl1vebr9YgXbZW yNPnFI0uAhGiu7pt5GSE/0jaMQjifrh5C+XmIhRAhr5c+YiafPWBbSs3ca9SDqur nlbvsfWcglZTBfCZBof0NVZmTLTgxjvpDU8OcGuW96nml1DDUOCwQSJKY+tZ8dq3 KRQciXkx8yd/R7um4tYzMUEfcNaqJmtPApspnTUzFmq9Gpd90rHrMXhmz2XLiNx6 Um2R4wDdH6uazGNuwkQhz1KxTAfnnm/PWiB0dBb/uSPc41wg86AS5oPZWA0/c6Ok 7yw9MYVrnmy050Y29nA/4P5sFt86GsU= -----END CERTIFICATE-----Generated at Fri Apr 4 08:46:52 2025 by rpki-client