$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28c7c8ca-d7bc-3903-a998-fd73afa3060b.roa File: 28c7c8ca-d7bc-3903-a998-fd73afa3060b.roa (raw, json) Hash identifier: y+0u3Ha6NbM+Tb6rZgWAdqiZxQVT+Wm2rjj2+ST5np0= Subject key identifier: AB:B8:1C:17:66:FF:33:90:00:D4:DF:F6:AF:54:0C:F2:36:BB:84:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5823018034512E0058F4500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28c7c8ca-d7bc-3903-a998-fd73afa3060b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:30:18:03:45:12:e0:05:8f:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=79e26ae6-8d19-4860-9d12-5d7d1d643321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:65:10:80:70:44:8e:61:f2:ae:dd:1d:09:c5: b1:00:6a:e9:a8:60:62:4b:51:ac:0e:b6:9d:70:88: 1f:7b:5f:91:6a:a7:bb:73:4e:23:bc:39:ae:55:94: 7e:aa:af:8c:9d:70:24:71:ed:e3:d7:ae:af:fc:8c: 60:99:1f:24:da:11:84:8e:5d:1d:d1:6e:28:9e:26: 8b:30:6a:f4:25:7e:2e:66:b2:b8:1d:02:ec:38:f5: a2:9e:f4:e9:4a:53:13:a7:71:90:1b:7c:a8:1e:39: ca:3a:73:ca:c6:bb:7f:bb:77:a3:a4:1c:9d:7d:d6: b0:67:39:15:43:ed:78:b6:79:b8:36:20:04:c1:e8: dc:74:3e:e2:6c:f8:56:43:b8:e3:79:0e:31:8c:70: 21:b0:ff:43:14:14:c3:d7:38:25:e8:14:95:30:62: 5d:4f:7b:9f:b5:16:a0:8f:86:bc:bb:96:5f:34:21: cd:31:11:e6:36:9d:c2:4d:13:69:a2:c6:99:80:a1: 24:d0:db:9a:40:81:e6:2a:19:e7:12:9f:c9:86:b7: 3e:c5:d0:fc:39:6c:60:2e:b7:e7:6d:f0:1c:0c:08: c1:98:b7:f1:fe:e4:3d:74:34:b0:ca:11:ce:e5:d6: da:fd:20:5d:1e:30:c8:9e:bb:36:33:5f:e8:25:35: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B8:1C:17:66:FF:33:90:00:D4:DF:F6:AF:54:0C:F2:36:BB:84:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28c7c8ca-d7bc-3903-a998-fd73afa3060b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:43:a9:7e:ba:07:f5:97:c1:45:ed:e7:75:9c:b3:4b:d2:df: 78:17:18:ef:2c:27:ff:22:e8:a1:e2:e3:26:ab:d6:bf:9e:eb: 30:e7:ae:ae:d4:20:2c:03:0b:cf:73:e2:fb:56:a5:c6:c6:3a: 2b:a6:68:85:6e:27:b4:6e:e1:8e:f2:23:79:54:a7:6d:46:da: 2d:93:81:c4:32:e2:16:29:c8:85:c8:bc:56:99:21:a6:52:df: 77:c3:a1:56:c4:43:7d:55:4a:93:e3:af:c8:85:57:4a:6f:62: b2:16:c1:8c:60:e0:52:80:f5:1e:74:cf:ad:5e:35:eb:86:e2: 07:f1:d1:37:ab:f6:e3:35:2a:05:b0:bd:7f:af:d2:f8:6c:2b: 4e:ce:15:5b:11:d4:86:c8:11:57:77:83:29:58:94:6d:2a:9d: ee:c9:66:36:d6:f3:15:ed:2f:f2:02:8f:f8:0f:62:f2:8b:5f: c4:5c:57:90:05:0a:56:3b:b8:bc:e7:ce:8f:a4:bf:a6:5b:65: be:02:c3:56:37:b3:fc:0d:46:e1:04:a7:3c:ca:3c:65:2e:3b: 44:55:59:aa:68:e1:83:64:ec:60:84:29:da:f1:98:77:0b:3c: 70:a4:13:ff:23:b4:d9:14:33:c2:20:c3:03:d5:12:ca:ac:fd: 53:c0:95:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjAYA0US4AWPRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzllMjZhZTYtOGQxOS00ODYwLTlkMTItNWQ3ZDFkNjQzMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2UQgHBEjmHyrt0dCcWxAGrpqGBiS1GsDrad cIgfe1+Raqe7c04jvDmuVZR+qq+MnXAkce3j166v/IxgmR8k2hGEjl0d0W4oniaL MGr0JX4uZrK4HQLsOPWinvTpSlMTp3GQG3yoHjnKOnPKxrt/u3ejpBydfdawZzkV Q+14tnm4NiAEwejcdD7ibPhWQ7jjeQ4xjHAhsP9DFBTD1zgl6BSVMGJdT3uftRag j4a8u5ZfNCHNMRHmNp3CTRNposaZgKEk0NuaQIHmKhnnEp/Jhrc+xdD8OWxgLrfn bfAcDAjBmLfx/uQ9dDSwyhHO5dba/SBdHjDInrs2M1/oJTWEPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKu4HBdm/zOQANTf9q9UDPI2u4RWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjhjN2M4Y2EtZDdiYy0z OTAzLWE5OTgtZmQ3M2FmYTMwNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvunMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFDqX66B/WXwUXt53Wcs0vS33gXGO8sJ/8i6KHi4yar1r+e6zDnrq7U ICwDC89z4vtWpcbGOiumaIVuJ7Ru4Y7yI3lUp21G2i2TgcQy4hYpyIXIvFaZIaZS 33fDoVbEQ31VSpPjr8iFV0pvYrIWwYxg4FKA9R50z61eNeuG4gfx0Ter9uM1KgWw vX+v0vhsK07OFVsR1IbIEVd3gylYlG0qne7JZjbW8xXtL/ICj/gPYvKLX8RcV5AF ClY7uLznzo+kv6ZbZb4Cw1Y3s/wNRuEEpzzKPGUuO0RVWapo4YNk7GCEKdrxmHcL PHCkE/8jtNkUM8IgwwPVEsqs/VPAld0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:26 2025 by rpki-client