$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24197f5d-ffa1-3bdf-9a18-1904424469a4.roa File: 24197f5d-ffa1-3bdf-9a18-1904424469a4.roa (raw, json) Hash identifier: GNgIYWizvzQyQ0GKzvEeOrJH36zM6qjo3E6ttcyEJsw= Subject key identifier: E6:59:B5:D5:09:88:5A:D8:E3:59:E0:72:2F:3C:7D:C7:C3:FE:5B:21 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5821BB1F2E05CF91147B1C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24197f5d-ffa1-3bdf-9a18-1904424469a4.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:1b:b1:f2:e0:5c:f9:11:47:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=92ff638c-c42d-4e85-90b1-3b7c83c22099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:94:0f:a3:0b:7d:5f:23:e1:5a:2b:0d:1b:cd: 49:63:5d:b2:46:c7:77:21:27:a7:79:b1:8b:1a:00: f4:1a:64:3c:db:7b:ea:3f:f6:a3:36:c6:7a:5c:3e: 50:29:b6:52:77:eb:4e:1c:08:e9:66:51:d0:8f:82: fc:f4:32:22:8e:74:2f:23:4e:a3:f5:7a:da:3d:30: 60:d7:43:33:78:d7:68:b8:df:7d:52:58:89:ac:29: 0e:37:e6:7d:97:2d:b5:a1:73:b2:53:c3:0c:8c:09: 20:4c:fa:0f:6b:f5:1b:f0:d6:80:3f:52:81:4b:48: ca:52:b2:7e:2f:7d:d9:28:49:6c:fa:6b:7d:f4:1b: 9b:8e:4f:47:ee:aa:73:1e:84:b0:be:43:cc:1b:9c: 4a:77:d5:00:4d:e9:89:0f:a0:b6:28:0d:d6:6c:6a: 54:9d:58:2e:c1:13:ea:8e:c5:85:dd:37:ec:cb:56: 9e:ce:43:9a:c6:98:d4:ff:33:2e:59:26:7c:6b:2f: 2f:4f:f6:6d:ed:e9:e3:71:52:2d:2d:f6:0e:a0:52: 8c:f0:0e:2a:ff:0e:5c:62:14:06:10:1b:fd:04:4c: 1e:e7:bd:4a:80:fa:9a:0b:6d:98:af:73:d7:ed:f2: 8f:bc:92:1e:44:c8:4a:d3:2e:d3:17:a7:dc:0e:f3: 3b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:59:B5:D5:09:88:5A:D8:E3:59:E0:72:2F:3C:7D:C7:C3:FE:5B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24197f5d-ffa1-3bdf-9a18-1904424469a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:b3:34:a6:2c:d4:d4:2f:9e:7b:b9:dd:c7:a5:f0:55:3a:4b: 26:fa:66:ed:90:1c:b9:2d:9d:38:50:86:e2:ae:00:ef:3a:bb: 2f:58:44:fb:7b:6c:9b:54:9c:bc:da:fc:21:df:29:73:59:2c: 85:33:c7:aa:e1:70:a3:2c:53:1b:eb:c8:5c:3e:dc:a2:17:ce: 61:d6:0d:1e:d8:43:ad:43:5a:4e:2d:8d:e8:4c:4d:25:56:c8: 5f:ed:75:1b:0e:41:a5:d3:39:1a:f8:0e:0e:43:62:f5:13:4d: 5e:c5:09:1b:88:49:62:63:d5:e6:94:8f:ae:e0:6c:a9:c8:26: 38:2e:f9:5e:11:6b:52:dd:55:ef:c6:8c:1b:db:81:cf:62:0e: 7a:2f:b7:a9:60:f1:0e:15:11:22:44:48:ba:59:09:76:c1:e5: ac:86:96:ea:b4:44:bd:fe:c9:29:44:23:30:89:22:bd:33:da: a8:e4:ed:4e:f6:11:cc:c4:1e:47:ca:fc:07:73:71:c8:07:63: 1a:37:2d:2e:dd:49:fa:40:c6:a8:24:88:8b:b0:64:c6:b1:1d: 4f:0a:ee:eb:c7:83:6c:0c:fc:dc:9b:40:63:d3:01:86:82:ef: 64:39:5a:5c:22:79:77:d2:0b:b9:94:da:71:aa:7f:9a:64:ca: 36:1b:8a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghux8uBc+RFHscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTJmZjYzOGMtYzQyZC00ZTg1LTkwYjEtM2I3YzgzYzIyMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5QPowt9XyPhWisNG81JY12yRsd3ISenebGL GgD0GmQ823vqP/ajNsZ6XD5QKbZSd+tOHAjpZlHQj4L89DIijnQvI06j9XraPTBg 10MzeNdouN99UliJrCkON+Z9ly21oXOyU8MMjAkgTPoPa/Ub8NaAP1KBS0jKUrJ+ L33ZKEls+mt99Bubjk9H7qpzHoSwvkPMG5xKd9UATemJD6C2KA3WbGpUnVguwRPq jsWF3Tfsy1aezkOaxpjU/zMuWSZ8ay8vT/Zt7enjcVItLfYOoFKM8A4q/w5cYhQG EBv9BEwe571KgPqaC22Yr3PX7fKPvJIeRMhK0y7TF6fcDvM7vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZZtdUJiFrY41ngci88fcfD/lshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjQxOTdmNWQtZmZhMS0z YmRmLTlhMTgtMTkwNDQyNDQ2OWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOzNKYs1NQvnnu53cel8FU6Syb6Zu2QHLktnThQhuKuAO86uy9YRPt7 bJtUnLza/CHfKXNZLIUzx6rhcKMsUxvryFw+3KIXzmHWDR7YQ61DWk4tjehMTSVW yF/tdRsOQaXTORr4Dg5DYvUTTV7FCRuISWJj1eaUj67gbKnIJjgu+V4Ra1LdVe/G jBvbgc9iDnovt6lg8Q4VESJESLpZCXbB5ayGluq0RL3+ySlEIzCJIr0z2qjk7U72 EczEHkfK/AdzccgHYxo3LS7dSfpAxqgkiIuwZMaxHU8K7uvHg2wM/NybQGPTAYaC 72Q5WlwieXfSC7mU2nGqf5pkyjYbiu4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:26:22 2025 by rpki-client