$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa File: 237250b7-86de-3771-94f1-0e5037bc3109.roa (raw, json) Hash identifier: nLEmQtj6779pVPXzsUuPvuCMtkRDf2oJGgGXXWrujSA= Subject key identifier: 8E:B1:6F:60:8F:00:FD:1B:B2:C6:85:0B:41:34:AB:D8:9F:93:FE:07 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582040CDEB64A1A3D13C780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:04:0c:de:b6:4a:1a:3d:13:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0e773533-8f1a-4ddb-bc20-d09f136fc379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:92:07:62:ea:35:40:4c:8d:68:98:1b:03:e0: b1:a3:ea:24:75:68:24:c1:04:8c:5f:1a:9b:64:52: f9:e3:d1:8a:02:c1:f2:82:a8:32:cf:39:1d:e4:b2: 3b:52:41:c6:03:41:b8:ab:75:d5:bf:58:b3:1d:b0: 49:66:d7:07:a4:13:fb:db:bf:0a:a1:2c:9b:93:fa: d9:71:09:91:e1:3b:ef:53:9c:33:fc:f6:aa:d2:3a: 5b:ce:44:10:e4:f3:b3:dd:6a:df:88:16:81:53:84: 42:86:9a:fd:4b:3e:3b:e1:e8:a1:22:61:9d:5d:e5: 79:d2:de:8f:0e:b9:60:42:12:b2:47:c8:1c:43:3f: 7b:0c:6c:ef:71:48:7f:70:61:ad:72:ee:12:ba:b2: bd:ab:ee:b6:24:68:8a:65:38:1a:38:6f:a5:e1:c3: 7d:bd:af:1b:e3:2c:04:c0:c5:18:cb:57:09:5a:60: 58:d0:9d:fa:b0:35:a2:fa:0c:08:84:a5:91:7c:53: 75:f4:64:3d:fd:b2:d6:67:ae:a5:81:0c:08:a1:be: 2e:cb:be:1d:7e:3b:e7:a2:77:b8:43:b8:1f:81:42: 10:c0:5d:2f:0d:2f:8e:a1:4b:21:d3:da:db:d5:53: d9:77:d8:a1:65:c8:ad:5c:1c:d3:4f:d8:79:b4:1a: 58:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B1:6F:60:8F:00:FD:1B:B2:C6:85:0B:41:34:AB:D8:9F:93:FE:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:80:88:8b:bc:f2:59:b2:c9:6e:12:f9:c5:6e:b9:e6:29:ff: 7c:45:b3:40:cc:f2:aa:5e:75:bc:b0:43:a1:79:8f:cf:4e:48: 04:40:e6:dc:bf:23:ed:d5:0e:2e:74:ba:f8:ad:48:33:04:76: e7:ea:26:80:25:2e:f0:cb:64:f7:f4:93:89:e0:e8:58:a1:74: 54:56:49:5e:29:60:04:5d:98:fe:d4:6c:e1:dc:5f:8b:72:e5: 46:27:00:19:9c:43:b3:3e:09:f4:c1:f0:64:28:3e:e5:46:25: cd:73:15:0d:4d:8c:cc:88:31:28:6f:8a:4c:1b:f5:b0:d5:01: ae:16:b8:5b:1e:8b:c2:df:e7:87:c4:6e:7b:44:48:ba:69:a9: 18:35:92:ba:b7:e0:d5:3d:33:be:d3:6b:8a:4e:06:f9:76:8d: 5f:55:ce:2a:cf:2e:d8:ed:1c:72:5f:83:3c:9b:76:2b:81:2f: 8a:26:ab:d7:0a:3c:58:31:d2:31:31:87:1c:20:50:79:90:f6: d0:9a:1f:0d:b7:6f:0a:36:a3:0d:bb:b2:3f:29:5a:e8:06:7e: 08:93:9b:75:45:21:8d:46:7c:06:3a:00:ce:3b:94:4e:1c:d7: 5f:cb:ef:aa:a9:ad:0a:2b:76:e1:03:76:36:08:dc:c6:09:37: fc:77:b5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggQM3rZKGj0Tx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGU3NzM1MzMtOGYxYS00ZGRiLWJjMjAtZDA5ZjEzNmZjMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipIHYuo1QEyNaJgbA+Cxo+okdWgkwQSMXxqb ZFL549GKAsHygqgyzzkd5LI7UkHGA0G4q3XVv1izHbBJZtcHpBP7278KoSybk/rZ cQmR4TvvU5wz/Paq0jpbzkQQ5POz3WrfiBaBU4RChpr9Sz474eihImGdXeV50t6P DrlgQhKyR8gcQz97DGzvcUh/cGGtcu4SurK9q+62JGiKZTgaOG+l4cN9va8b4ywE wMUYy1cJWmBY0J36sDWi+gwIhKWRfFN19GQ9/bLWZ66lgQwIob4uy74dfjvnone4 Q7gfgUIQwF0vDS+OoUsh09rb1VPZd9ihZcitXBzTT9h5tBpYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6xb2CPAP0bssaFC0E0q9ifk/4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjM3MjUwYjctODZkZS0z NzcxLTk0ZjEtMGU1MDM3YmMzMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2AiIu88lmyyW4S+cVuueYp/3xFs0DM8qpedbywQ6F5j89OSARA5ty/ I+3VDi50uvitSDMEdufqJoAlLvDLZPf0k4ng6FihdFRWSV4pYARdmP7UbOHcX4ty 5UYnABmcQ7M+CfTB8GQoPuVGJc1zFQ1NjMyIMShvikwb9bDVAa4WuFsei8Lf54fE bntESLppqRg1krq34NU9M77Ta4pOBvl2jV9VzirPLtjtHHJfgzybdiuBL4omq9cK PFgx0jExhxwgUHmQ9tCaHw23bwo2ow27sj8pWugGfgiTm3VFIY1GfAY6AM47lE4c 11/L76qprQorduEDdjYI3MYJN/x3tRE= -----END CERTIFICATE-----Generated at Fri Apr 4 08:50:03 2025 by rpki-client