$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f9603a1-a5e0-3a2b-a6fc-5def397f6a99.roa File: 3f9603a1-a5e0-3a2b-a6fc-5def397f6a99.roa (raw, json) Hash identifier: dmnVsi34qNFcCrZsck6ZwQs77bbaz4h7uUFaiaZv8+Y= Subject key identifier: D4:3E:1D:30:7F:98:B0:3F:22:61:9F:F5:86:A1:5E:C1:AB:80:90:73 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817223637F88DA4772F380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f9603a1-a5e0-3a2b-a6fc-5def397f6a99.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:72:23:63:7f:88:da:47:72:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e5329207-6337-42b3-8eab-c3eb81b89b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:75:f6:d9:e4:70:0c:4b:c4:4c:41:0a:41: ce:ce:16:1f:24:d6:b2:43:64:2b:cd:f3:44:c0:67: e4:54:17:d1:e5:c5:07:66:05:48:10:8b:dd:4e:4f: a0:98:b5:22:6c:db:e2:5e:10:ae:db:51:d2:ce:73: 2e:99:59:7b:87:fe:31:1c:81:d2:3b:18:b0:cb:bf: 72:b4:f5:b1:43:ad:a1:54:23:e8:b6:9d:78:ac:a9: 65:4a:0c:f7:cd:86:70:8b:69:ce:3d:df:9f:0d:6d: 12:cf:03:ff:80:04:c6:2d:38:b2:c6:c0:e0:88:b4: a2:73:98:a6:da:a6:00:44:5f:44:87:9d:e6:6a:04: 63:9c:17:db:ce:7e:8e:61:19:e1:6d:3c:59:31:c8: 58:74:45:67:22:39:46:d8:93:f1:e1:77:e4:e3:ca: 8b:f6:bc:dc:74:c0:41:43:02:56:cd:f8:9e:0f:79: 94:2b:15:78:9d:57:60:5a:49:48:c2:0f:bc:97:4b: a2:44:06:07:72:ce:52:d1:63:da:31:96:f6:92:9e: 36:a5:67:cf:18:90:81:a9:af:2c:77:c0:f1:71:00: 5b:dc:51:a8:2c:34:3d:99:67:29:c0:c4:8f:26:54: 8c:55:ec:41:4f:cc:7d:e6:f2:67:a9:e0:de:62:fa: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3E:1D:30:7F:98:B0:3F:22:61:9F:F5:86:A1:5E:C1:AB:80:90:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f9603a1-a5e0-3a2b-a6fc-5def397f6a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a6:31:26:ec:11:63:97:68:62:97:5e:12:e5:a0:ce:d5:68: 20:16:87:c1:e2:ab:91:b7:3b:0f:8c:03:ee:f3:56:b1:62:b8: 1a:50:31:7a:aa:8f:4e:86:68:c4:64:16:ad:0f:7e:cf:da:43: b0:97:3a:e9:5e:d7:80:08:c1:75:cf:90:02:db:b7:40:aa:5f: ff:94:ca:83:c1:e7:b9:cb:5c:e3:74:0f:0f:ed:5c:a2:49:48: 8a:5f:c9:f3:4b:5b:43:18:b2:ac:8d:44:7c:20:60:db:b2:93: 72:36:61:e6:04:17:ad:af:6a:a3:33:31:ff:8e:54:29:42:62: c3:11:08:07:8b:0f:2a:cb:e0:86:07:8c:de:dd:35:a6:be:99: cf:75:d3:11:cd:36:a4:76:2a:89:1f:6e:b0:ab:92:0d:19:9f: 82:42:16:e9:84:58:e9:a7:75:37:f1:ac:ce:d5:04:68:bb:36: 07:cd:97:9c:ff:20:13:3b:df:6e:d8:ae:40:b8:4a:c9:1a:04: b0:b1:1d:51:9a:fd:cf:48:ad:f3:c2:34:bb:ca:fd:60:40:89: a7:ef:58:6d:91:62:35:e0:3d:d8:ce:41:36:4e:1b:45:19:da: ef:72:75:65:24:38:55:6e:bc:c4:30:b5:b8:75:2f:be:bb:c2: d3:d9:f1:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXIjY3+I2kdy84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTUzMjkyMDctNjMzNy00MmIzLThlYWItYzNlYjgxYjg5YjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2d19tnkcAxLxExBCkHOzhYfJNayQ2QrzfNE wGfkVBfR5cUHZgVIEIvdTk+gmLUibNviXhCu21HSznMumVl7h/4xHIHSOxiwy79y tPWxQ62hVCPotp14rKllSgz3zYZwi2nOPd+fDW0SzwP/gATGLTiyxsDgiLSic5im 2qYARF9Eh53magRjnBfbzn6OYRnhbTxZMchYdEVnIjlG2JPx4Xfk48qL9rzcdMBB QwJWzfieD3mUKxV4nVdgWklIwg+8l0uiRAYHcs5S0WPaMZb2kp42pWfPGJCBqa8s d8DxcQBb3FGoLDQ9mWcpwMSPJlSMVexBT8x95vJnqeDeYvqu1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ+HTB/mLA/ImGf9YahXsGrgJBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2Y5NjAzYTEtYTVlMC0z YTJiLWE2ZmMtNWRlZjM5N2Y2YTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAamMSbsEWOXaGKXXhLloM7VaCAWh8Hiq5G3Ow+MA+7zVrFiuBpQMXqq j06GaMRkFq0Pfs/aQ7CXOule14AIwXXPkALbt0CqX/+UyoPB57nLXON0Dw/tXKJJ SIpfyfNLW0MYsqyNRHwgYNuyk3I2YeYEF62vaqMzMf+OVClCYsMRCAeLDyrL4IYH jN7dNaa+mc910xHNNqR2KokfbrCrkg0Zn4JCFumEWOmndTfxrM7VBGi7NgfNl5z/ IBM7327YrkC4SskaBLCxHVGa/c9IrfPCNLvK/WBAiafvWG2RYjXgPdjOQTZOG0UZ 2u9ydWUkOFVuvMQwtbh1L767wtPZ8W4= -----END CERTIFICATE-----Generated at Fri Apr 4 08:27:16 2025 by rpki-client