$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa File: 23f6d5b1-a0f6-317d-bee3-89903b027032.roa (raw, json) Hash identifier: H5DNjv7faxGbA6vDinJfN82naGosJx9Nd4SEl9kTT2w= Subject key identifier: D1:6C:8F:E4:04:10:39:4A:69:46:8E:02:7E:A5:D1:E0:84:39:E4:09 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581FE5A17ED5A9172ACB380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:fe:5a:17:ed:5a:91:72:ac:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=50acd963-3ece-4ccf-aaed-e4bd490b05fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:62:b3:a7:f9:9f:65:ae:3d:e0:6f:e2:9b: 1b:24:82:ce:fb:a7:8a:a0:88:47:75:1b:4a:fa:f5: 32:e2:b6:b0:df:1f:f7:99:74:1f:22:99:80:40:87: a0:f6:c5:03:7a:d7:4c:3f:45:f1:07:c2:89:94:af: c2:f5:59:91:8b:8e:f7:d6:02:37:1f:3f:90:43:ab: 92:ed:13:62:a1:f6:6f:03:da:5e:2f:dc:11:86:d4: dc:f0:19:f3:42:9b:33:f1:53:ca:e8:bf:1c:dc:30: c9:79:57:46:c7:17:0d:90:ae:1e:83:75:31:0f:6e: 29:52:87:6d:4c:7b:31:e0:cb:c1:d2:69:34:71:f6: 27:1d:e2:e4:ce:53:bf:ae:8a:35:a6:6b:a6:9e:e6: ca:bc:8c:cd:fa:b4:82:19:13:fd:02:c8:74:8b:4b: eb:f6:75:3f:13:26:3f:88:09:d4:0e:f4:e2:ed:16: 7f:20:ac:74:24:c2:4c:52:b2:05:e7:8f:01:bb:78: ee:3b:9c:12:b4:8f:35:4f:5d:08:f4:59:fb:47:e0: 39:d7:f9:d3:67:b0:10:0d:d3:1a:bf:4a:cd:6e:8d: 92:18:5a:5b:af:46:c4:d6:84:39:7c:b5:14:d0:01: 76:e3:d8:b0:50:80:ee:d6:11:84:69:b3:7f:d2:f7: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6C:8F:E4:04:10:39:4A:69:46:8E:02:7E:A5:D1:E0:84:39:E4:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:49:7f:76:26:f7:01:b0:44:17:20:58:74:48:93:7b:51:d6: 18:98:59:ae:9c:7c:1b:ff:7a:a4:45:ef:6e:35:9d:ba:e5:bb: 14:c7:aa:f8:8c:76:40:f8:78:ec:e7:e3:de:08:aa:11:8c:93: 47:4a:2e:89:af:c3:2a:67:ef:2b:48:7d:d1:a8:f8:e8:79:18: 43:49:f4:20:03:35:f9:bc:9d:27:ed:39:03:e7:58:b5:fd:37: 1a:ad:f5:e4:e7:34:d2:45:96:0c:c5:83:da:71:8a:0c:7f:f3: 73:ca:42:d5:61:30:e9:bb:e8:c2:95:89:e0:47:3a:35:1e:bc: 46:28:b5:a0:70:65:25:e1:ee:29:0e:02:94:d9:fd:e2:d7:a7: 0f:ee:71:52:24:c1:cd:a9:bf:8b:04:21:c5:a9:8e:a0:9b:b5: 50:ee:b8:38:16:8e:b9:4c:57:d5:56:c3:94:7e:5c:48:40:26: c6:f7:a0:94:74:d1:f1:c5:87:1b:76:90:66:48:3a:be:e4:be: f8:54:f4:89:11:99:24:66:ef:9c:a5:97:46:2f:80:6c:ec:a6: d2:eb:01:ea:6f:a6:55:59:24:c9:71:59:51:04:37:83:8e:3a: b7:d3:2f:58:bf:20:e6:b1:b4:95:29:6f:0e:33:02:e2:9b:92: bb:16:23:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgf5aF+1akXKss4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTBhY2Q5NjMtM2VjZS00Y2NmLWFhZWQtZTRiZDQ5MGIwNWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4tis6f5n2WuPeBv4psbJILO+6eKoIhHdRtK +vUy4raw3x/3mXQfIpmAQIeg9sUDetdMP0XxB8KJlK/C9VmRi4731gI3Hz+QQ6uS 7RNiofZvA9peL9wRhtTc8BnzQpsz8VPK6L8c3DDJeVdGxxcNkK4eg3UxD24pUodt THsx4MvB0mk0cfYnHeLkzlO/roo1pmumnubKvIzN+rSCGRP9Ash0i0vr9nU/EyY/ iAnUDvTi7RZ/IKx0JMJMUrIF548Bu3juO5wStI81T10I9Fn7R+A51/nTZ7AQDdMa v0rNbo2SGFpbr0bE1oQ5fLUU0AF249iwUIDu1hGEabN/0vdrXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFsj+QEEDlKaUaOAn6l0eCEOeQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjNmNmQ1YjEtYTBmNi0z MTdkLWJlZTMtODk5MDNiMDI3MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlJf3Ym9wGwRBcgWHRIk3tR1hiYWa6cfBv/eqRF7241nbrluxTHqviM dkD4eOzn494IqhGMk0dKLomvwypn7ytIfdGo+Oh5GENJ9CADNfm8nSftOQPnWLX9 Nxqt9eTnNNJFlgzFg9pxigx/83PKQtVhMOm76MKVieBHOjUevEYotaBwZSXh7ikO ApTZ/eLXpw/ucVIkwc2pv4sEIcWpjqCbtVDuuDgWjrlMV9VWw5R+XEhAJsb3oJR0 0fHFhxt2kGZIOr7kvvhU9IkRmSRm75yll0YvgGzsptLrAepvplVZJMlxWVEEN4OO OrfTL1i/IOaxtJUpbw4zAuKbkrsWI1Q= -----END CERTIFICATE-----Generated at Fri Mar 14 08:10:55 2025 by rpki-client