$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0333ff-017a-3e0c-8975-9b7b580911f6.roa File: 3a0333ff-017a-3e0c-8975-9b7b580911f6.roa (raw, json) Hash identifier: 9M24TUU25X8zfzfUxGMdx0JB+o8ixPu2TcjdoKFs+uI= Subject key identifier: 9C:FB:40:77:C6:A5:82:7E:69:ED:1D:3B:89:BE:85:C9:DD:0F:95:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582228048E9B4C32E43EC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0333ff-017a-3e0c-8975-9b7b580911f6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:22:80:48:e9:b4:c3:2e:43:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7ff732e2-6576-4394-923c-f1e383278fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:ff:2c:20:4c:d9:70:05:74:a9:5a:7d:c1: c0:38:7d:ee:f2:15:b1:16:a8:a4:35:d9:be:7c:bb: fb:0f:d1:fb:68:71:1c:1c:0d:92:b8:1d:14:8d:de: c5:77:c3:2e:02:fc:f5:49:51:43:79:11:26:d4:bc: 00:9f:b4:05:92:01:f7:b1:f4:6f:78:89:c7:05:ce: c0:46:43:77:f3:15:55:9d:6d:42:43:9b:61:71:de: bb:80:69:06:87:b2:98:db:3c:2c:51:c5:b5:08:82: 37:90:cb:85:fc:76:5a:14:fc:a2:3f:14:bb:7e:97: 9f:e8:e8:0f:99:a4:3a:88:8c:81:56:bd:34:33:a5: 43:5d:f9:5c:98:ce:18:29:36:e3:f0:a0:1c:6b:fe: a6:04:81:ac:59:45:48:fc:5f:fd:40:08:91:e0:90: 11:fa:42:ec:4e:bd:30:8d:d4:70:b1:cf:01:70:bf: 6d:34:77:3c:24:5b:4f:07:86:c2:0a:3c:7b:7f:cb: 12:5f:25:4d:86:7a:5c:9f:ab:61:de:ab:46:8f:f8: 0b:61:32:8a:ee:04:68:99:ea:f3:8d:cf:aa:d3:80: 70:45:bd:f9:72:e7:95:76:89:c2:bf:ff:f2:23:32: 14:fc:01:14:f6:96:9c:15:fa:87:97:67:ae:18:c8: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FB:40:77:C6:A5:82:7E:69:ED:1D:3B:89:BE:85:C9:DD:0F:95:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a0333ff-017a-3e0c-8975-9b7b580911f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e5:e6:4e:9c:a8:6c:a2:5b:90:b6:73:56:f4:01:ee:d4:28: 4c:83:fe:47:57:c4:71:37:dd:14:c3:5e:f1:6c:8b:10:eb:1b: a7:b3:37:05:72:31:9b:dd:da:10:a4:58:c4:b2:23:29:7a:c5: b4:d9:f6:a7:a5:1a:9f:b4:54:02:d4:18:b8:4a:52:51:45:f9: 71:cf:5a:1d:5f:96:6a:6a:b3:d6:17:9f:71:11:34:7e:b8:17: 2f:16:1a:5d:85:45:e8:1e:54:cf:fd:67:ba:dc:a8:2c:2c:86: 26:f5:e5:63:00:4f:e2:34:a6:31:9c:c4:89:f6:f6:bf:32:9c: c4:23:81:81:a2:5d:4e:af:2a:62:d4:e8:33:43:99:2f:f7:d5: af:7a:24:b0:b4:df:b4:90:b0:68:11:8f:6a:60:e2:89:18:29: fc:7b:24:93:7a:9b:93:00:89:a4:29:5d:e9:a8:79:6f:15:c8: d0:97:63:bb:5f:a4:31:8e:61:8c:af:24:e4:01:7a:7c:fe:6e: 01:01:ae:aa:cc:17:cc:56:76:fb:fb:7b:68:97:a2:6b:2b:56: 36:04:ca:ea:3b:bd:a9:3b:19:4c:f1:5a:72:6d:89:8e:0d:06: 4f:64:31:10:bb:76:08:12:74:62:23:f1:d6:29:fe:32:d6:e5: e9:1a:c6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiKASOm0wy5D7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2ZmNzMyZTItNjU3Ni00Mzk0LTkyM2MtZjFlMzgzMjc4ZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVX/LCBM2XAFdKlafcHAOH3u8hWxFqikNdm+ fLv7D9H7aHEcHA2SuB0Ujd7Fd8MuAvz1SVFDeREm1LwAn7QFkgH3sfRveInHBc7A RkN38xVVnW1CQ5thcd67gGkGh7KY2zwsUcW1CII3kMuF/HZaFPyiPxS7fpef6OgP maQ6iIyBVr00M6VDXflcmM4YKTbj8KAca/6mBIGsWUVI/F/9QAiR4JAR+kLsTr0w jdRwsc8BcL9tNHc8JFtPB4bCCjx7f8sSXyVNhnpcn6th3qtGj/gLYTKK7gRomerz jc+q04BwRb35cueVdonCv//yIzIU/AEU9pacFfqHl2euGMjRZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz7QHfGpYJ+ae0dO4m+hcndD5XzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2EwMzMzZmYtMDE3YS0z ZTBjLTg5NzUtOWI3YjU4MDkxMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjl5k6cqGyiW5C2c1b0Ae7UKEyD/kdXxHE33RTDXvFsixDrG6ezNwVy MZvd2hCkWMSyIyl6xbTZ9qelGp+0VALUGLhKUlFF+XHPWh1flmpqs9YXn3ERNH64 Fy8WGl2FRegeVM/9Z7rcqCwshib15WMAT+I0pjGcxIn29r8ynMQjgYGiXU6vKmLU 6DNDmS/31a96JLC037SQsGgRj2pg4okYKfx7JJN6m5MAiaQpXemoeW8VyNCXY7tf pDGOYYyvJOQBenz+bgEBrqrMF8xWdvv7e2iXomsrVjYEyuo7vak7GUzxWnJtiY4N Bk9kMRC7dggSdGIj8dYp/jLW5ekaxn8= -----END CERTIFICATE-----Generated at Fri Apr 4 08:36:02 2025 by rpki-client