$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25483ce1-289a-3987-973e-237a84ba075f.roa File: 25483ce1-289a-3987-973e-237a84ba075f.roa (raw, json) Hash identifier: 0w4plRgs2HmhLVNlbH2BK0e/Ahd6foSZzEY9t+F6Q3I= Subject key identifier: 45:31:BA:55:97:C1:0B:9A:69:B1:B5:A8:17:D6:0F:98:F8:66:3F:74 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58210B6135FAC8A77113F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25483ce1-289a-3987-973e-237a84ba075f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:10:b6:13:5f:ac:8a:77:11:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=73bf3878-0eeb-4e55-a40e-8490e4a3ab13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:54:ab:42:50:7a:90:ec:34:a6:c7:63:af:b6: 99:2d:c4:78:13:66:29:2c:45:86:a4:7b:10:ce:5f: c4:49:1d:6e:e5:71:32:bf:32:88:60:45:c1:24:0a: 8f:c0:f8:2f:98:84:58:ac:fc:44:aa:ec:74:12:ef: 64:7f:26:d8:e8:3b:35:2e:2d:8b:32:d9:88:01:bf: 95:16:2b:26:4f:4e:59:fc:55:61:2d:e3:70:9e:3e: 82:19:ad:21:15:82:11:3d:a3:c5:44:c9:93:a1:5b: ea:e1:c9:f6:b2:a1:48:1c:5d:01:8d:7a:19:e6:9b: a3:a4:0f:34:a6:c9:b4:54:55:8b:2a:47:03:ad:a5: 42:80:49:6b:1d:13:eb:2e:40:b4:6d:94:65:c3:40: 38:2e:0d:98:ca:03:d8:cd:5d:fa:0c:c0:84:8a:b6: 5e:c3:4e:d6:f7:0f:8c:33:67:f7:25:62:25:b0:68: 8a:5f:52:0d:b1:a8:a2:46:63:ec:b9:de:79:e4:61: 46:cc:5b:28:4f:1b:bd:48:21:f9:a8:65:a9:c3:ee: 49:7f:f8:98:6b:8d:1b:d6:66:62:a2:56:f6:30:62: 02:00:13:da:82:ea:87:fa:40:dc:54:e2:92:e8:dd: 9e:c0:a7:06:c7:c1:28:a6:fa:fa:aa:ee:79:bb:32: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:BA:55:97:C1:0B:9A:69:B1:B5:A8:17:D6:0F:98:F8:66:3F:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25483ce1-289a-3987-973e-237a84ba075f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cd:1c:cc:22:e8:da:ea:89:1b:28:e7:d1:a4:be:1f:2c:48: dc:60:f5:90:ed:ff:b7:9e:49:95:0c:38:9c:cb:e2:e8:f3:16: 7c:1c:f9:27:23:79:e1:f0:e4:c7:c2:a8:7d:b7:61:0d:3d:8f: 8d:13:e7:6f:ea:15:a0:fe:9a:c6:79:ce:1b:e7:85:18:95:99: e8:9b:0b:a2:de:8d:c8:6a:bf:f2:83:9d:e4:06:a7:ec:e0:ed: 28:0a:da:b6:f1:b3:6e:01:72:4b:21:73:3c:57:86:70:37:8b: 27:c5:ea:58:ed:c0:b6:94:f0:bb:54:82:cc:3c:fa:d5:d2:a9: b3:c8:b3:67:2d:a4:19:b8:33:0a:18:03:80:88:53:10:d2:8c: e7:33:79:45:46:36:45:cc:6a:d7:d1:49:9b:36:f7:13:01:49: 9f:ee:55:41:64:f4:62:c3:c2:a7:d2:98:a4:2e:a9:64:31:06: 99:4e:2b:8f:e1:af:5d:45:e1:8c:1a:e5:86:a6:d2:a0:a4:8d: 62:69:e1:28:fd:78:05:68:5e:0d:bb:3f:c8:b8:98:ed:1e:03: c3:18:57:9e:b7:b8:f7:cc:3f:98:d3:07:ca:2f:c4:3d:ea:a7: cf:68:a5:71:95:cf:58:7c:72:9a:5d:a8:bb:f3:2c:e6:de:f9: 58:76:61:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghC2E1+sincRPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzNiZjM4NzgtMGVlYi00ZTU1LWE0MGUtODQ5MGU0YTNhYjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1SrQlB6kOw0psdjr7aZLcR4E2YpLEWGpHsQ zl/ESR1u5XEyvzKIYEXBJAqPwPgvmIRYrPxEqux0Eu9kfybY6Ds1Li2LMtmIAb+V FismT05Z/FVhLeNwnj6CGa0hFYIRPaPFRMmToVvq4cn2sqFIHF0BjXoZ5pujpA80 psm0VFWLKkcDraVCgElrHRPrLkC0bZRlw0A4Lg2YygPYzV36DMCEirZew07W9w+M M2f3JWIlsGiKX1INsaiiRmPsud555GFGzFsoTxu9SCH5qGWpw+5Jf/iYa40b1mZi olb2MGICABPaguqH+kDcVOKS6N2ewKcGx8Eopvr6qu55uzJ/qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUxulWXwQuaabG1qBfWD5j4Zj90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjU0ODNjZTEtMjg5YS0z OTg3LTk3M2UtMjM3YTg0YmEwNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALNHMwi6NrqiRso59Gkvh8sSNxg9ZDt/7eeSZUMOJzL4ujzFnwc+Scj eeHw5MfCqH23YQ09j40T52/qFaD+msZ5zhvnhRiVmeibC6Lejchqv/KDneQGp+zg 7SgK2rbxs24BckshczxXhnA3iyfF6ljtwLaU8LtUgsw8+tXSqbPIs2ctpBm4MwoY A4CIUxDSjOczeUVGNkXMatfRSZs29xMBSZ/uVUFk9GLDwqfSmKQuqWQxBplOK4/h r11F4Ywa5Yam0qCkjWJp4Sj9eAVoXg27P8i4mO0eA8MYV563uPfMP5jTB8ovxD3q p89opXGVz1h8cppdqLvzLObe+Vh2YWE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:22 2025 by rpki-client