$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d6d1dc3-bcc1-3902-9f31-956e8b4104cd.roa File: 3d6d1dc3-bcc1-3902-9f31-956e8b4104cd.roa (raw, json) Hash identifier: rsDbG9XJ6IfADc9wDfX8t6ShhsfB0Qs/OOCR60DmHgs= Subject key identifier: B3:BF:75:CD:18:E7:34:64:C1:25:CA:BB:F5:3B:70:BF:C8:71:AB:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581821E9E495ED401ABE480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d6d1dc3-bcc1-3902-9f31-956e8b4104cd.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:82:1e:9e:49:5e:d4:01:ab:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b65eb698-0bb5-4d7f-8701-18bcaf838553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:23:54:02:57:d1:92:2a:56:00:4c:9a:31: fb:d8:9b:3e:aa:3a:0f:ac:40:a7:5b:9b:5d:a2:22: 0a:d5:4c:5e:31:3d:96:3d:1e:45:f1:b8:15:f1:e4: e5:01:14:e9:86:de:6f:c5:01:ab:15:ed:d8:24:6e: df:2e:cf:fc:b2:9d:62:e2:eb:c3:4b:62:7c:26:cc: 24:cc:d6:cc:c1:47:d7:13:ec:e6:1d:d3:01:88:0d: 82:2d:39:0f:9a:4a:d3:19:82:94:9a:f3:83:ab:bd: 92:34:ed:02:61:14:76:41:39:c3:cd:26:8f:f7:32: a8:f7:33:a3:f5:51:00:c5:7a:ae:c8:3b:39:9f:08: 1a:dd:6a:87:0d:25:2d:c6:3c:7c:32:97:6d:67:da: 4c:12:4c:2a:44:7a:8e:4d:a5:f1:5b:85:a0:8e:95: 1e:e9:a4:8c:f8:38:2c:76:19:cb:d9:97:2b:05:2a: a6:6c:20:04:ec:59:7b:39:09:2c:14:00:82:72:04: be:91:10:a6:fe:9d:76:b2:7f:c7:7c:be:e6:ce:a2: cd:34:52:9d:1f:19:62:d9:ae:8b:3f:db:cb:7f:ef: 89:81:f8:dd:3d:6d:8f:b2:b4:32:57:d0:22:76:ef: 0c:55:02:42:73:89:1d:66:d1:ea:08:b9:5f:29:63: c8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BF:75:CD:18:E7:34:64:C1:25:CA:BB:F5:3B:70:BF:C8:71:AB:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3d6d1dc3-bcc1-3902-9f31-956e8b4104cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3f:48:27:54:79:e0:9c:58:d2:dc:d8:08:de:f5:5d:ea:b0: df:cd:4e:f6:56:5b:ab:84:21:96:04:ad:98:6a:86:57:41:93: d4:c0:56:c5:17:8a:6e:7a:05:0c:4d:50:eb:17:65:db:2e:bd: 93:5e:d5:ba:bf:8d:59:10:03:95:00:ad:f1:bc:47:bf:f1:a3: cf:33:0d:a4:74:1a:06:f8:cc:5c:b2:ec:a4:bb:f2:92:cc:e7: 67:33:ec:53:b0:62:c1:84:b6:0d:f0:86:62:b7:3e:44:bc:9a: 4c:1c:f6:6a:48:67:56:71:a2:a6:e4:b5:71:95:e6:b7:66:ba: a6:22:94:dd:ef:e2:55:44:b7:07:67:ca:a1:4e:45:b3:0b:27: 38:36:fb:93:53:76:29:b6:94:15:62:6f:87:77:22:70:a2:95: 76:37:a0:c5:b5:ff:ee:85:77:f4:4c:ca:d5:24:db:c0:7a:6c: 00:a9:68:74:56:27:86:ef:ba:b3:f4:a3:76:f0:39:79:18:0d: a1:ec:d8:86:59:8c:e4:e7:7b:f6:38:e6:31:76:66:d6:36:fd: 39:33:c3:6a:bb:0b:46:f3:b0:59:6f:2f:a5:9d:b5:ea:24:0a: ca:7e:5d:59:1b:33:87:a6:be:3b:5f:c9:a2:c2:14:fa:c4:be: ad:59:58:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYIenkle1AGr5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjY1ZWI2OTgtMGJiNS00ZDdmLTg3MDEtMThiY2FmODM4NTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWkjVAJX0ZIqVgBMmjH72Js+qjoPrECnW5td oiIK1UxeMT2WPR5F8bgV8eTlARTpht5vxQGrFe3YJG7fLs/8sp1i4uvDS2J8Jswk zNbMwUfXE+zmHdMBiA2CLTkPmkrTGYKUmvODq72SNO0CYRR2QTnDzSaP9zKo9zOj 9VEAxXquyDs5nwga3WqHDSUtxjx8MpdtZ9pMEkwqRHqOTaXxW4WgjpUe6aSM+Dgs dhnL2ZcrBSqmbCAE7Fl7OQksFACCcgS+kRCm/p12sn/HfL7mzqLNNFKdHxli2a6L P9vLf++JgfjdPW2PsrQyV9Aidu8MVQJCc4kdZtHqCLlfKWPI/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO/dc0Y5zRkwSXKu/U7cL/IcavEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2Q2ZDFkYzMtYmNjMS0z OTAyLTlmMzEtOTU2ZThiNDEwNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA/SCdUeeCcWNLc2Aje9V3qsN/NTvZWW6uEIZYErZhqhldBk9TAVsUX im56BQxNUOsXZdsuvZNe1bq/jVkQA5UArfG8R7/xo88zDaR0Ggb4zFyy7KS78pLM 52cz7FOwYsGEtg3whmK3PkS8mkwc9mpIZ1ZxoqbktXGV5rdmuqYilN3v4lVEtwdn yqFORbMLJzg2+5NTdim2lBVib4d3InCilXY3oMW1/+6Fd/RMytUk28B6bACpaHRW J4bvurP0o3bwOXkYDaHs2IZZjOTne/Y45jF2ZtY2/Tkzw2q7C0bzsFlvL6Wdteok Csp+XVkbM4emvjtfyaLCFPrEvq1ZWMM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:46 2025 by rpki-client