$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa File: 2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa (raw, json) Hash identifier: NkmbR5c2Uvdbj7nWhuq5c/GNsfBtEL6slfW/KnB+lwk= Subject key identifier: BC:23:65:F0:AE:47:BF:DC:4F:6D:B2:F2:E8:C7:F8:7D:68:8C:DA:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58185C28156B4E758653600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:85:c2:81:56:b4:e7:58:65:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2c485286-97d8-40df-bdf9-15db64de47aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:72:7f:ac:d6:84:52:b0:b4:0c:8d:37:c6: 37:7f:26:b9:b1:25:14:8a:b7:56:8c:4c:20:83:c8: 26:e3:b3:20:a2:e2:41:71:90:72:12:1a:a9:10:27: 95:21:a9:19:61:4a:f5:60:9f:e8:d4:30:ed:87:ad: 5f:60:f7:c6:2d:ea:5a:54:05:b8:24:c4:c8:5e:b3: c4:ec:e6:84:92:73:9b:72:c8:a3:d7:dd:62:9b:ca: 77:d2:b6:2c:d3:90:79:6b:f6:f1:64:a5:75:22:3b: 9a:89:35:e6:c5:c2:ad:0a:99:84:7a:75:15:5e:ec: dd:1f:55:80:ca:9b:04:14:e3:b4:84:d8:a2:c8:46: 60:49:19:a7:52:cc:95:48:64:cd:16:40:18:32:bc: b1:0e:1d:e3:9f:22:09:fb:a2:49:0f:0e:5e:c5:e9: b7:5d:71:82:23:f6:98:e7:49:8e:8b:f9:66:a2:b2: ff:3a:e6:c8:bf:95:9a:04:06:64:b4:0d:4d:3d:30: 63:9f:df:0b:1d:f9:52:60:43:a2:de:22:61:a1:5c: ab:5c:0c:2e:af:c2:8c:d3:4e:c2:18:8f:c6:2d:4a: 7a:e1:52:ce:45:14:87:03:b7:75:47:52:20:d2:b8: 86:6f:be:eb:51:29:61:01:16:34:7f:77:4c:11:d6: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:23:65:F0:AE:47:BF:DC:4F:6D:B2:F2:E8:C7:F8:7D:68:8C:DA:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5e:9d:cb:d5:b9:21:88:be:ab:3c:65:ef:6c:d1:9d:3a:fb: 03:b4:34:64:fd:85:45:95:f4:b0:6c:5e:70:54:c7:d3:09:b1: 79:2a:ba:2b:fd:5d:c2:60:a4:c2:71:59:ef:49:e4:e2:88:0b: fc:e0:16:7e:c7:84:82:39:19:e6:3e:7f:16:55:4b:9a:12:4a: 31:e7:bb:d7:df:99:ae:5d:c2:c5:e6:55:d8:0a:4d:94:33:f2: 2f:20:37:f7:83:b5:03:fc:c0:ce:d5:89:9c:eb:ae:b0:48:80: ca:30:fc:3c:b0:03:94:41:cb:8e:6e:34:72:43:83:c7:46:e7: 2b:cc:2c:bd:5d:6f:df:fc:18:d6:18:f3:ac:28:82:9b:a3:51: c1:99:0d:8f:ab:43:09:7c:b2:20:75:54:6f:b3:39:c6:36:33: 20:d0:0d:da:fa:5d:a8:43:7d:ff:78:cd:e4:11:4c:ca:f0:b8: 73:c4:d5:40:50:f7:7c:0a:90:3d:bd:dd:aa:32:24:a0:65:a7: fb:73:6b:c1:50:4e:a1:dd:58:42:07:22:18:bd:09:aa:98:3d: a9:9a:b1:58:e0:e0:f2:6f:77:4a:45:da:78:c6:ab:3e:da:ef: c7:65:11:55:02:4f:5e:36:12:71:92:2c:00:6a:cd:5d:30:1f: ef:67:a4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYXCgVa051hlNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmM0ODUyODYtOTdkOC00MGRmLWJkZjktMTVkYjY0ZGU0N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqpyf6zWhFKwtAyNN8Y3fya5sSUUirdWjEwg g8gm47MgouJBcZByEhqpECeVIakZYUr1YJ/o1DDth61fYPfGLepaVAW4JMTIXrPE 7OaEknObcsij191im8p30rYs05B5a/bxZKV1IjuaiTXmxcKtCpmEenUVXuzdH1WA ypsEFOO0hNiiyEZgSRmnUsyVSGTNFkAYMryxDh3jnyIJ+6JJDw5exem3XXGCI/aY 50mOi/lmorL/OubIv5WaBAZktA1NPTBjn98LHflSYEOi3iJhoVyrXAwur8KM007C GI/GLUp64VLORRSHA7d1R1Ig0riGb77rUSlhARY0f3dMEdbhlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwjZfCuR7/cT22y8ujH+H1ojNpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg4OWEzZWYtMjgxYS0z MDhlLWE4YjAtODJkOWI5YjJhMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBencvVuSGIvqs8Ze9s0Z06+wO0NGT9hUWV9LBsXnBUx9MJsXkquiv9 XcJgpMJxWe9J5OKIC/zgFn7HhII5GeY+fxZVS5oSSjHnu9ffma5dwsXmVdgKTZQz 8i8gN/eDtQP8wM7ViZzrrrBIgMow/DywA5RBy45uNHJDg8dG5yvMLL1db9/8GNYY 86wogpujUcGZDY+rQwl8siB1VG+zOcY2MyDQDdr6XahDff94zeQRTMrwuHPE1UBQ 93wKkD293aoyJKBlp/tza8FQTqHdWEIHIhi9CaqYPamasVjg4PJvd0pF2njGqz7a 78dlEVUCT142EnGSLABqzV0wH+9npIE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:22:53 2025 by rpki-client