$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a7d8988-408e-3442-83b9-7474ec475a96.roa File: 3a7d8988-408e-3442-83b9-7474ec475a96.roa (raw, json) Hash identifier: 81Jekipy/LZPaOx1dt/rHZ/sIaqxB5+ELKGXIsM5kps= Subject key identifier: 88:53:45:BC:BF:4B:32:60:A5:C4:46:C1:28:BF:6C:51:C5:E8:E9:A5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816F056EF5F6828214B080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a7d8988-408e-3442-83b9-7474ec475a96.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6f:05:6e:f5:f6:82:82:14:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ea94434e-e6d3-43ff-95ba-5d1159f93f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:54:e1:2b:5f:9f:e6:92:6c:dd:25:9b:64: c5:4f:59:f6:99:54:2f:34:0e:e6:0e:7e:7d:df:c4: 21:93:cc:cb:0a:8b:cf:1e:0f:6c:df:3c:2e:d5:9f: d5:21:45:ef:30:0c:c0:fc:52:48:5c:d2:f3:34:9a: 87:9b:f6:79:ff:b8:23:8a:dc:1c:95:2a:68:92:b0: 3d:a7:de:7d:a1:04:c9:6e:6d:23:fd:bd:21:34:c3: 93:3b:d2:95:9a:1b:67:c0:95:7e:a4:30:f0:04:a9: 04:52:56:39:2f:b9:c8:3e:b0:4a:54:cd:db:f5:56: a1:1f:33:89:75:8b:77:cf:5f:7b:ef:a4:5a:b8:67: 25:ea:98:7a:2e:65:ce:40:0f:dd:81:c3:b0:b7:fb: 6f:74:3c:46:83:f4:52:f5:24:51:cf:98:2c:0c:de: c5:04:96:12:68:ff:27:d5:4d:c5:be:7f:e3:a1:c8: 66:d4:2d:ba:c9:e2:77:b4:38:44:6a:52:db:68:1b: e2:7c:94:2a:6c:3f:4f:4c:59:76:26:a1:bc:0b:9a: 4e:91:8c:59:d0:83:1a:a4:46:74:b2:bb:0c:fd:ea: 76:c7:9f:d9:7f:da:eb:54:9e:cf:d2:0b:d9:79:0e: d6:30:04:bd:ee:33:49:af:9c:c4:9b:6f:61:bf:ef: 67:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:53:45:BC:BF:4B:32:60:A5:C4:46:C1:28:BF:6C:51:C5:E8:E9:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a7d8988-408e-3442-83b9-7474ec475a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:cd:53:4d:9a:ec:af:d0:33:92:60:ac:62:7a:f2:e5:cc:af: 7f:6e:ba:8b:ab:bd:05:d3:13:c2:7e:68:9b:d1:e5:09:53:cf: 7a:02:cb:60:bf:55:72:b3:95:35:8f:a1:cb:8a:45:4b:80:b4: d4:c8:10:0e:4c:7e:78:c6:72:3b:29:53:93:79:14:5b:17:e5: b7:ec:33:f0:08:fd:aa:c9:44:b3:a7:95:18:bf:d6:cc:16:61: 39:30:04:5d:66:50:c2:fc:5c:b6:88:a1:6f:5b:24:1d:40:ac: fa:9e:b1:53:4e:24:b8:74:1e:33:0b:b5:9f:16:77:61:dd:16: 9a:a6:70:0b:9a:39:40:9a:62:1d:57:a6:3a:ef:a5:f6:9f:00: 7f:12:9b:7f:1d:9a:9b:ed:ad:9b:26:f3:20:ea:2f:98:97:ec: a0:58:43:f7:d4:f3:c0:46:1f:a6:ab:cb:fe:24:18:ec:cb:bc: 0b:ee:c5:55:bc:b9:a1:1a:69:ab:5b:ed:21:09:4e:52:3d:ee: 03:7f:52:cf:76:14:6e:b2:b4:25:d8:fa:a0:f2:d0:98:61:ac: c0:cf:35:23:22:3e:cc:fd:16:58:67:1a:3d:9f:e6:dc:4f:83: b9:2e:05:7c:7a:97:9d:c9:0c:dc:cf:ea:75:4b:27:3a:27:5f: bb:18:d9:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgW8FbvX2goIUsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWE5NDQzNGUtZTZkMy00M2ZmLTk1YmEtNWQxMTU5ZjkzZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFJU4Stfn+aSbN0lm2TFT1n2mVQvNA7mDn59 38Qhk8zLCovPHg9s3zwu1Z/VIUXvMAzA/FJIXNLzNJqHm/Z5/7gjitwclSpokrA9 p959oQTJbm0j/b0hNMOTO9KVmhtnwJV+pDDwBKkEUlY5L7nIPrBKVM3b9VahHzOJ dYt3z19776RauGcl6ph6LmXOQA/dgcOwt/tvdDxGg/RS9SRRz5gsDN7FBJYSaP8n 1U3Fvn/jochm1C26yeJ3tDhEalLbaBvifJQqbD9PTFl2JqG8C5pOkYxZ0IMapEZ0 srsM/ep2x5/Zf9rrVJ7P0gvZeQ7WMAS97jNJr5zEm29hv+9nMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhTRby/SzJgpcRGwSi/bFHF6OmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2E3ZDg5ODgtNDA4ZS0z NDQyLTgzYjktNzQ3NGVjNDc1YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbNU02a7K/QM5JgrGJ68uXMr39uuourvQXTE8J+aJvR5QlTz3oCy2C/ VXKzlTWPocuKRUuAtNTIEA5MfnjGcjspU5N5FFsX5bfsM/AI/arJRLOnlRi/1swW YTkwBF1mUML8XLaIoW9bJB1ArPqesVNOJLh0HjMLtZ8Wd2HdFpqmcAuaOUCaYh1X pjrvpfafAH8Sm38dmpvtrZsm8yDqL5iX7KBYQ/fU88BGH6ary/4kGOzLvAvuxVW8 uaEaaatb7SEJTlI97gN/Us92FG6ytCXY+qDy0JhhrMDPNSMiPsz9FlhnGj2f5txP g7kuBXx6l53JDNzP6nVLJzonX7sY2U8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:56 2025 by rpki-client