$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17086d63-55ea-346e-b505-383f73ad55a9.roa File: 17086d63-55ea-346e-b505-383f73ad55a9.roa (raw, json) Hash identifier: fLJWhL1c+rrzmSmaWqp+1PToH+sIputFLX4y9a6ghJU= Subject key identifier: 0D:2E:FC:9D:80:E2:FB:97:25:36:B0:00:E2:EE:74:3E:49:D3:54:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582232F633D432A7C8EA480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17086d63-55ea-346e-b505-383f73ad55a9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:23:2f:63:3d:43:2a:7c:8e:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=17f92c0f-8256-4948-8fd6-199d8898684c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:de:f3:71:9c:a9:65:ba:40:4c:34:32:db: 93:c5:27:b4:18:9e:9a:ba:f1:78:6e:72:49:04:49: 82:6d:4c:9d:f2:86:50:6d:a6:ab:c2:5c:c7:77:fe: dd:5a:f5:33:79:bb:4d:b3:a6:7f:2a:a8:fb:87:86: 5f:12:68:16:06:c6:e6:36:1e:10:d7:87:68:b0:89: b1:e9:75:9d:2c:6a:4d:10:6b:60:5d:a7:8d:e8:0b: ed:25:43:c3:6d:10:45:bf:f5:84:54:d2:8e:f6:5a: 28:b0:8b:10:30:05:56:b9:07:46:df:45:48:b9:88: da:ec:2a:9f:40:02:89:d1:f1:32:c7:25:16:4f:b4: 75:fe:e3:46:14:08:82:e0:d8:fd:00:02:64:97:79: 41:6a:96:a3:ea:49:15:88:49:9e:c4:c6:04:11:b0: 0f:36:7a:db:ac:d0:fb:97:df:6b:71:96:05:d8:2e: d0:48:36:78:5f:f9:a8:e8:29:55:88:30:ca:24:ae: cf:c3:b7:39:af:6c:ff:2d:9c:f5:f3:e9:33:c6:7a: bb:92:ab:8d:8d:79:14:15:84:c6:c5:7c:90:40:25: 48:93:1e:93:e6:99:35:b5:65:cd:13:54:d9:99:30: 27:12:dc:5a:12:fd:b4:7d:3f:82:f3:65:0b:d3:bd: ec:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2E:FC:9D:80:E2:FB:97:25:36:B0:00:E2:EE:74:3E:49:D3:54:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17086d63-55ea-346e-b505-383f73ad55a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:21:a7:86:3a:bd:e4:99:b8:96:0a:c0:47:09:26:a7:27:9e: c1:f5:3b:93:fe:4d:ea:99:05:19:19:18:2a:12:9b:8b:9e:a3: f7:bb:c1:97:ad:91:0c:c8:5b:6e:3f:0f:10:c8:3a:5a:d0:94: 97:55:7d:8f:5e:f9:33:7a:1a:40:da:22:94:73:6a:6c:77:98: df:bb:93:0a:ac:d2:71:76:32:05:9b:e5:b0:d2:70:e1:6e:06: 45:af:20:d3:e7:1c:c2:fc:1b:29:23:56:bc:2b:60:d9:65:36: 57:4a:05:f8:04:dc:81:19:3d:81:75:57:f2:d9:4c:85:71:a6: e5:86:f3:78:3e:6a:33:4a:ff:a9:95:52:86:08:b7:e0:81:ad: a0:58:d7:86:f3:65:95:3e:28:2c:ac:48:cd:22:5d:e6:09:69: da:54:e9:0a:4b:e0:01:70:96:53:f6:fc:38:fd:5d:fa:00:85: 52:17:20:16:48:58:bf:97:05:cd:22:38:bc:a7:a5:63:27:db: 02:47:a9:3a:7e:4f:f9:b3:bf:f0:34:68:1d:68:c8:da:d1:bc: 33:8b:26:79:00:95:1a:77:25:0a:e9:6c:df:a5:75:07:9d:e4: 00:1e:78:70:19:e0:c3:aa:8a:2e:9e:4c:2f:43:26:f5:08:19: 87:85:7f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiMvYz1DKnyOpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTdmOTJjMGYtODI1Ni00OTQ4LThmZDYtMTk5ZDg4OTg2ODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY3e83GcqWW6QEw0MtuTxSe0GJ6auvF4bnJJ BEmCbUyd8oZQbaarwlzHd/7dWvUzebtNs6Z/Kqj7h4ZfEmgWBsbmNh4Q14dosImx 6XWdLGpNEGtgXaeN6AvtJUPDbRBFv/WEVNKO9loosIsQMAVWuQdG30VIuYja7Cqf QAKJ0fEyxyUWT7R1/uNGFAiC4Nj9AAJkl3lBapaj6kkViEmexMYEEbAPNnrbrND7 l99rcZYF2C7QSDZ4X/mo6ClViDDKJK7Pw7c5r2z/LZz18+kzxnq7kquNjXkUFYTG xXyQQCVIkx6T5pk1tWXNE1TZmTAnEtxaEv20fT+C82UL073sUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0u/J2A4vuXJTawAOLudD5J01TXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTcwODZkNjMtNTVlYS0z NDZlLWI1MDUtMzgzZjczYWQ1NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0hp4Y6veSZuJYKwEcJJqcnnsH1O5P+TeqZBRkZGCoSm4ueo/e7wZet kQzIW24/DxDIOlrQlJdVfY9e+TN6GkDaIpRzamx3mN+7kwqs0nF2MgWb5bDScOFu BkWvINPnHML8GykjVrwrYNllNldKBfgE3IEZPYF1V/LZTIVxpuWG83g+ajNK/6mV UoYIt+CBraBY14bzZZU+KCysSM0iXeYJadpU6QpL4AFwllP2/Dj9XfoAhVIXIBZI WL+XBc0iOLynpWMn2wJHqTp+T/mzv/A0aB1oyNrRvDOLJnkAlRp3JQrpbN+ldQed 5AAeeHAZ4MOqii6eTC9DJvUIGYeFf7g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:53 2025 by rpki-client