$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36570800-5c11-3c22-8e0c-a78d28863714.roa File: 36570800-5c11-3c22-8e0c-a78d28863714.roa (raw, json) Hash identifier: XMoBGuYuzDDnC991M88ymDOwjc5bFgMUFlWPrHFAJC0= Subject key identifier: 66:B1:61:AF:D6:A8:A4:10:26:ED:6F:20:9D:7C:C0:97:ED:6F:66:0B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58177FFEEFA75FE8E240400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36570800-5c11-3c22-8e0c-a78d28863714.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:77:ff:ee:fa:75:fe:8e:24:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3fb231c0-4799-45bb-ac61-34021421700d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:f0:6c:00:b3:33:21:7f:55:91:a4:21:94: 48:51:2c:93:59:84:e1:9f:91:be:13:29:22:0e:19: a4:ab:ba:fc:bd:b1:c3:7c:75:c2:7f:f8:42:16:56: 27:9b:09:d4:b8:1c:0a:ae:9a:70:cc:32:be:e3:bc: 91:f6:6b:f7:89:9e:95:61:e1:f4:8a:34:e3:2e:8f: 18:7d:0f:bb:66:0c:9e:a4:33:45:83:b7:07:3c:74: 2c:37:a9:ec:cb:b6:5c:47:98:d1:8f:20:63:a0:91: b0:56:d7:85:08:e2:7d:08:5b:99:ff:00:9a:15:5d: bf:d1:fd:67:09:5b:f1:a5:93:dd:e8:95:0b:7e:38: 75:9d:6e:54:55:57:54:26:a7:34:15:53:6a:4b:89: 08:16:f3:5c:0d:b1:bc:58:f6:75:c4:f9:18:50:27: f1:6c:1f:9a:cf:81:ce:09:46:83:dd:5a:79:3d:50: 51:0f:be:cc:58:44:22:4b:5d:1e:74:a4:53:14:39: b0:7d:3b:70:41:e1:b0:65:08:94:0c:7b:a5:15:e7: d2:ce:fb:74:bd:a1:b4:77:96:0e:f5:b7:01:c4:4f: 76:8e:b7:e7:7d:71:6b:fe:0b:fd:4b:1e:4b:7f:c1: 1e:95:34:00:de:bf:92:ac:d9:0e:a7:55:f3:23:23: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B1:61:AF:D6:A8:A4:10:26:ED:6F:20:9D:7C:C0:97:ED:6F:66:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36570800-5c11-3c22-8e0c-a78d28863714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:0d:29:2d:cc:a4:73:d6:ec:6e:70:87:79:73:a3:58:48:02: 99:a3:ab:d5:52:81:a8:ae:29:25:2e:a3:f5:c3:67:72:f8:fc: 7b:6b:d5:6f:06:8c:32:75:11:a4:7f:f1:d3:97:0f:c7:cd:fb: 1d:ee:dd:d8:32:2e:a6:09:37:a9:45:99:f4:bc:98:66:09:7b: 00:09:c0:d5:40:98:3d:d9:aa:b8:e9:3f:6f:33:e0:11:58:83: 85:88:f1:45:64:a2:2e:d1:41:73:86:56:fd:e0:de:e2:59:c3: ff:a2:0f:29:7f:77:24:f2:93:b0:8a:eb:80:99:57:3c:26:5a: 0a:c9:00:f5:59:61:62:bc:9f:e5:e5:8d:94:a3:d9:91:c2:af: 03:2c:c3:d7:4c:7f:97:2a:5b:ce:20:85:22:ce:2b:48:77:0b: 12:33:08:b0:e0:ed:0d:33:22:31:c0:fd:58:7f:42:16:5d:2e: 5d:17:bc:bc:1a:a2:90:3f:38:f4:a3:49:db:f6:42:b3:f1:a9: 0c:74:ee:21:bf:88:cb:eb:14:66:56:20:5e:3a:35:cb:0d:4f: 56:a4:27:77:55:58:32:53:0d:55:a4:12:7a:f8:15:64:a4:bf: ed:ab:cd:61:a5:37:4d:2d:92:29:77:a0:34:f4:20:1b:5c:1a: 15:f3:88:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXf/7vp1/o4kBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2ZiMjMxYzAtNDc5OS00NWJiLWFjNjEtMzQwMjE0MjE3MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLwbACzMyF/VZGkIZRIUSyTWYThn5G+Eyki Dhmkq7r8vbHDfHXCf/hCFlYnmwnUuBwKrppwzDK+47yR9mv3iZ6VYeH0ijTjLo8Y fQ+7ZgyepDNFg7cHPHQsN6nsy7ZcR5jRjyBjoJGwVteFCOJ9CFuZ/wCaFV2/0f1n CVvxpZPd6JULfjh1nW5UVVdUJqc0FVNqS4kIFvNcDbG8WPZ1xPkYUCfxbB+az4HO CUaD3Vp5PVBRD77MWEQiS10edKRTFDmwfTtwQeGwZQiUDHulFefSzvt0vaG0d5YO 9bcBxE92jrfnfXFr/gv9Sx5Lf8EelTQA3r+SrNkOp1XzIyNUVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaxYa/WqKQQJu1vIJ18wJftb2YLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzY1NzA4MDAtNWMxMS0z YzIyLThlMGMtYTc4ZDI4ODYzNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUNKS3MpHPW7G5wh3lzo1hIApmjq9VSgaiuKSUuo/XDZ3L4/Htr1W8G jDJ1EaR/8dOXD8fN+x3u3dgyLqYJN6lFmfS8mGYJewAJwNVAmD3ZqrjpP28z4BFY g4WI8UVkoi7RQXOGVv3g3uJZw/+iDyl/dyTyk7CK64CZVzwmWgrJAPVZYWK8n+Xl jZSj2ZHCrwMsw9dMf5cqW84ghSLOK0h3CxIzCLDg7Q0zIjHA/Vh/QhZdLl0XvLwa opA/OPSjSdv2QrPxqQx07iG/iMvrFGZWIF46NcsNT1akJ3dVWDJTDVWkEnr4FWSk v+2rzWGlN00tkil3oDT0IBtcGhXziAg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:59 2025 by rpki-client