$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa File: 23e558ef-b1ed-349b-bb7c-72c343e78b57.roa (raw, json) Hash identifier: 9WDE/dwTfVsIRxq6elvhtgbNtjTMo/8zWSxNgl1wxb0= Subject key identifier: AC:4A:22:B7:BE:09:D5:43:CC:FC:06:FA:C9:B1:97:AA:28:C7:80:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816CF9C077C5D0D83B0600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6c:f9:c0:77:c5:d0:d8:3b:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0f461bd0-1cf3-4e1b-bf4d-67af52acf738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:35:a1:46:14:37:b7:e6:0c:09:50:83:97: f3:0d:4f:4d:a3:28:d8:26:16:bc:e7:82:53:6a:e2: 38:35:07:16:53:19:e4:76:5c:af:61:a6:91:84:5b: af:6b:d8:19:44:3d:c3:93:b9:46:ae:5d:f3:cd:4e: 37:55:51:7f:29:a2:b3:e8:03:4e:3e:90:d9:53:03: 08:b6:01:f8:bc:a5:15:1f:1a:7e:9b:35:cc:f3:79: 46:11:ff:03:cc:17:b2:e4:4b:23:85:f3:4c:43:e8: b2:9c:dc:d2:e5:48:24:3b:92:70:88:80:ac:34:95: b8:0d:e6:87:2a:e0:84:91:e3:69:e6:00:bd:1c:d0: 29:88:86:c6:8d:c9:ac:e9:d8:5f:48:2b:fa:eb:a5: b7:f3:31:72:26:a7:9a:50:21:77:51:71:5f:ea:a4: f8:dd:1b:3e:27:d2:c9:8c:fd:5f:cd:f9:22:a3:48: 5a:fe:0f:bc:17:d2:c0:9e:63:3f:1a:df:2c:c0:d7: a0:04:17:97:d7:9b:1e:f3:b5:3b:5d:38:03:28:18: 72:1c:c3:60:df:f4:52:7f:01:5c:20:10:b7:ae:21: 2d:47:f6:3b:c4:7a:2c:5f:f4:24:00:7c:67:c3:b0: c5:2c:6c:a2:33:61:cf:ac:4c:aa:32:e5:da:1f:1c: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4A:22:B7:BE:09:D5:43:CC:FC:06:FA:C9:B1:97:AA:28:C7:80:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a6:01:ab:05:ae:11:64:d9:3c:57:2b:0f:42:ff:95:28:a8: 6d:64:ab:2b:32:e8:15:1b:96:6a:56:29:c0:ea:2d:09:16:17: c3:68:c5:fc:71:db:5c:d1:e8:1f:bc:67:f0:47:44:6e:5a:42: ab:cd:fb:a3:11:bf:fb:c6:1d:fd:5a:b7:25:f9:88:50:fe:ed: a7:6d:00:03:dd:53:45:8c:7d:9d:76:e8:65:41:9a:ae:56:ae: 68:9f:93:04:f4:c6:ca:88:7a:07:fe:8f:3b:aa:88:2c:0e:1a: de:34:ab:3f:1b:21:be:6b:8d:1d:c4:d8:cf:a4:ef:78:c4:b7: 38:72:09:a8:48:c8:aa:45:4a:c0:5f:cc:0a:1d:fc:be:24:2d: 12:e7:ce:fa:0a:9a:31:ed:90:5e:c1:7e:28:15:06:f6:5a:29: c8:6e:d2:5f:1b:b3:d6:74:21:93:98:21:7c:62:df:80:ef:73: 27:38:a8:d7:b1:9d:15:e3:24:dd:9d:08:30:6a:09:ff:75:85: 4c:02:a6:d2:a3:d5:b4:4c:4b:d5:13:2d:86:5a:bd:1d:cf:fa: 7b:0f:ca:34:43:4e:47:e7:d9:1f:47:9c:db:05:0a:89:9e:7f: 07:eb:3a:66:4b:ca:2f:b0:86:08:b0:42:a6:7d:3d:66:fb:cd: 7c:11:cb:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgWz5wHfF0Ng7BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGY0NjFiZDAtMWNmMy00ZTFiLWJmNGQtNjdhZjUyYWNmNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzns1oUYUN7fmDAlQg5fzDU9NoyjYJha854JT auI4NQcWUxnkdlyvYaaRhFuva9gZRD3Dk7lGrl3zzU43VVF/KaKz6ANOPpDZUwMI tgH4vKUVHxp+mzXM83lGEf8DzBey5EsjhfNMQ+iynNzS5UgkO5JwiICsNJW4DeaH KuCEkeNp5gC9HNApiIbGjcms6dhfSCv666W38zFyJqeaUCF3UXFf6qT43Rs+J9LJ jP1fzfkio0ha/g+8F9LAnmM/Gt8swNegBBeX15se87U7XTgDKBhyHMNg3/RSfwFc IBC3riEtR/Y7xHosX/QkAHxnw7DFLGyiM2HPrEyqMuXaHxy7DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxKIre+CdVDzPwG+smxl6oox4AoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjNlNTU4ZWYtYjFlZC0z NDliLWJiN2MtNzJjMzQzZTc4YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKmAasFrhFk2TxXKw9C/5UoqG1kqysy6BUblmpWKcDqLQkWF8Noxfxx 21zR6B+8Z/BHRG5aQqvN+6MRv/vGHf1atyX5iFD+7adtAAPdU0WMfZ126GVBmq5W rmifkwT0xsqIegf+jzuqiCwOGt40qz8bIb5rjR3E2M+k73jEtzhyCahIyKpFSsBf zAod/L4kLRLnzvoKmjHtkF7BfigVBvZaKchu0l8bs9Z0IZOYIXxi34Dvcyc4qNex nRXjJN2dCDBqCf91hUwCptKj1bRMS9UTLYZavR3P+nsPyjRDTkfn2R9HnNsFCome fwfrOmZLyi+whgiwQqZ9PWb7zXwRyy4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:33 2025 by rpki-client