$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/357a8cdb-3fe0-30ad-998d-6e25737b2989.roa File: 357a8cdb-3fe0-30ad-998d-6e25737b2989.roa (raw, json) Hash identifier: p1FhVznKUaMs0tblx4WvAjPYGAAdTgkD/Z/806QGRf8= Subject key identifier: 0F:A1:E7:9F:16:92:38:CF:1F:AC:E3:B5:D9:FF:41:17:B4:3E:9A:0B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581720CA4C4C74D88D55200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/357a8cdb-3fe0-30ad-998d-6e25737b2989.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:72:0c:a4:c4:c7:4d:88:d5:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=331d53d1-8bd3-452a-814e-640d58ee5db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:04:7d:72:2f:81:1c:77:0b:f8:6b:82:32: d8:65:0e:5f:23:42:c5:8a:23:dc:8f:30:66:ce:03: 2a:56:cd:5f:99:31:1e:3b:12:6a:36:50:17:5a:72: e2:74:12:07:1f:37:4f:b1:42:a1:a4:1c:70:ec:8c: bc:53:6f:1b:c4:10:5a:fa:c3:9e:71:f8:39:cd:b3: 7e:ea:4f:5d:03:23:de:37:54:e1:e8:57:a6:a3:5d: d4:14:34:a7:3a:39:94:4f:e7:e8:eb:28:12:17:9b: d9:6d:04:5b:fe:12:5f:b2:b0:83:4f:a2:65:56:7d: 84:9d:a9:1e:ce:12:27:50:8e:ae:3a:8b:5f:e5:bf: e0:36:80:ab:4d:7b:bd:49:db:e7:ca:17:ce:03:a9: 17:85:4c:9a:c3:eb:ac:91:ca:30:f9:e3:bd:58:a1: a6:bc:7b:20:45:33:65:5f:85:00:e3:5e:c8:6c:d1: 02:cf:25:1b:62:fa:ff:3a:ff:8b:57:28:27:db:4e: 88:89:59:67:b6:37:3c:5e:71:72:73:d7:b6:a3:ca: 17:43:94:d3:29:0a:29:cd:da:39:80:33:35:c2:15: 63:a0:e2:36:7f:e5:08:d0:a5:af:3d:43:b4:89:8f: 3e:58:0d:f2:5a:02:39:44:d7:94:64:74:95:f5:ae: 9c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A1:E7:9F:16:92:38:CF:1F:AC:E3:B5:D9:FF:41:17:B4:3E:9A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/357a8cdb-3fe0-30ad-998d-6e25737b2989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:2a:88:43:ea:5c:c8:9f:92:8e:fa:34:ea:ae:0d:a4:90:78: 70:78:63:9f:ee:e9:75:ad:cb:5f:de:ff:6d:f6:bc:8e:43:78: 88:bb:de:3e:bd:74:47:3d:7f:ce:e8:33:80:d1:94:cf:a4:d1: b0:97:01:c1:dc:76:35:b9:3f:1f:65:35:21:4a:e7:ec:96:9e: ac:ef:a9:72:e5:ea:3c:a8:84:28:7b:c7:48:e2:a4:18:b0:ef: c8:b4:cc:0d:92:ea:8d:99:fe:95:22:21:9f:6e:35:69:d4:6b: b6:90:a7:9b:7f:4e:11:cc:2d:25:8e:2d:79:24:7f:fe:83:2d: 8b:57:5f:e4:ef:34:be:1f:b5:e9:00:95:89:ff:b4:08:8c:d6: 63:25:7e:07:04:f3:fe:bf:05:a7:45:0d:50:f2:1b:ac:92:be: aa:9d:e1:b3:9c:c8:da:82:29:a8:d3:c2:9d:f3:bb:c9:ff:bf: 86:22:20:37:77:6b:f4:66:93:b8:d2:86:a3:3c:aa:10:91:67: 0a:6e:25:3f:d0:4e:dd:83:b9:b2:49:2f:ab:ac:8d:3d:8a:84: be:7a:90:39:8e:31:66:a6:a9:67:38:2c:e2:93:6b:c5:d1:70: 54:bb:46:60:90:7e:e8:82:8a:8c:0b:a2:8e:61:88:67:31:aa: 7b:75:84:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXIMpMTHTYjVUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzMxZDUzZDEtOGJkMy00NTJhLTgxNGUtNjQwZDU4ZWU1ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8MEfXIvgRx3C/hrgjLYZQ5fI0LFiiPcjzBm zgMqVs1fmTEeOxJqNlAXWnLidBIHHzdPsUKhpBxw7Iy8U28bxBBa+sOecfg5zbN+ 6k9dAyPeN1Th6Femo13UFDSnOjmUT+fo6ygSF5vZbQRb/hJfsrCDT6JlVn2Enake zhInUI6uOotf5b/gNoCrTXu9SdvnyhfOA6kXhUyaw+uskcow+eO9WKGmvHsgRTNl X4UA417IbNECzyUbYvr/Ov+LVygn206IiVlntjc8XnFyc9e2o8oXQ5TTKQopzdo5 gDM1whVjoOI2f+UI0KWvPUO0iY8+WA3yWgI5RNeUZHSV9a6cAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+h558WkjjPH6zjtdn/QRe0PpoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzU3YThjZGItM2ZlMC0z MGFkLTk5OGQtNmUyNTczN2IyOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvq0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgqiEPqXMifko76NOquDaSQeHB4Y5/u6XWty1/e/232vI5DeIi73j69 dEc9f87oM4DRlM+k0bCXAcHcdjW5Px9lNSFK5+yWnqzvqXLl6jyohCh7x0jipBiw 78i0zA2S6o2Z/pUiIZ9uNWnUa7aQp5t/ThHMLSWOLXkkf/6DLYtXX+TvNL4ftekA lYn/tAiM1mMlfgcE8/6/BadFDVDyG6ySvqqd4bOcyNqCKajTwp3zu8n/v4YiIDd3 a/Rmk7jShqM8qhCRZwpuJT/QTt2DubJJL6usjT2KhL56kDmOMWamqWc4LOKTa8XR cFS7RmCQfuiCiowLoo5hiGcxqnt1hP8= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:27 2025 by rpki-client