$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46940689-b8ea-3e8e-badf-ef2a247523b6.roa File: 46940689-b8ea-3e8e-badf-ef2a247523b6.roa (raw, json) Hash identifier: aFDxb1NkgvLD8Qq8+lIvsbZfuRT9bYlWD21lklQw0OE= Subject key identifier: 76:8A:F6:57:68:30:BD:80:BF:25:63:36:FF:1C:29:8C:D0:38:21:58 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581871B425E712B9E5AFFA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46940689-b8ea-3e8e-badf-ef2a247523b6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:87:1b:42:5e:71:2b:9e:5a:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0fe4c29d-7fb8-43f4-ad9f-09b85425bf5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:4e:7a:3a:31:fc:d6:a4:97:51:60:3f:97: 89:d8:93:c9:01:d7:66:b9:19:e6:a1:79:fb:b8:79: db:3d:56:92:dc:25:c6:46:81:e2:ba:97:86:b3:83: 7e:90:26:d3:b2:63:63:bc:4e:5b:af:95:24:32:ac: df:2a:29:31:8e:d2:6c:29:cc:5e:09:26:a9:95:ba: 66:6d:24:a4:e0:8b:3d:ac:6f:5e:04:5f:3a:59:09: 3f:0f:ff:7c:da:08:dd:92:26:21:3a:39:b7:12:c6: 0e:2f:26:1d:e5:d8:0b:e9:97:18:66:21:59:62:89: b2:c9:32:e3:6b:a4:a6:e7:02:3e:b5:ba:c6:82:1b: fb:53:26:b3:a5:b9:14:db:97:16:e1:2d:68:46:13: 7c:41:ac:26:08:94:fa:2f:ee:5e:9e:95:f5:54:74: 22:6b:fb:87:da:64:e1:23:d5:55:c6:f5:85:18:5c: e8:f0:2c:a2:19:e0:5f:3e:59:3c:2a:64:95:1c:f7: 8a:a5:4c:40:24:e9:b7:67:56:68:c1:99:30:be:22: 07:c7:e3:fd:82:95:6d:3e:0a:44:8d:94:d5:81:d8: e9:89:ce:33:8e:08:4a:89:ec:e1:fd:3e:ec:15:70: 7f:4a:dc:4b:eb:3b:07:9e:d9:ff:53:bb:34:7b:d8: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8A:F6:57:68:30:BD:80:BF:25:63:36:FF:1C:29:8C:D0:38:21:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46940689-b8ea-3e8e-badf-ef2a247523b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:76:64:37:a2:b6:e2:c7:50:80:d5:d9:90:2c:6e:69:b3:cb: 3c:f5:ed:58:82:22:4c:4d:4b:08:91:7b:ad:b0:d8:3d:82:91: 2f:16:48:21:45:44:86:a4:f5:b2:97:9d:20:ab:cb:79:f2:9e: 49:07:40:b9:e3:db:32:66:22:9a:2c:c7:80:7a:f8:5a:9e:2b: 2d:fa:9a:12:dd:73:c4:b7:02:93:0e:09:39:d9:ae:fe:52:4e: 80:b8:7c:b8:44:2a:d2:a5:a7:16:85:8e:74:00:cf:f3:fe:d4: 02:39:53:96:c4:c7:95:60:f3:5b:cd:f3:fd:00:8f:12:d5:f7: 53:38:80:a2:d9:14:d5:c7:c7:ce:ce:66:6b:24:56:d4:4d:c2: 5f:4f:51:3a:b6:1f:30:dd:44:40:3a:61:18:9a:ba:8d:07:8e: 1e:77:4c:b9:34:28:de:32:8b:cd:0b:64:48:82:7b:38:d5:d8: c5:e6:8d:c2:a0:c9:78:0c:e8:93:76:88:c4:61:64:0a:90:38: 9a:8b:4d:78:6c:1f:6d:77:47:58:df:72:70:1e:38:38:78:51: 81:b2:b1:4f:ee:74:f6:10:df:0f:6e:e5:2d:be:6b:be:12:84: 1f:ea:49:dd:6a:96:c7:13:67:23:1b:89:6d:34:d6:3a:98:92: 43:aa:25:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYcbQl5xK55a/6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGZlNGMyOWQtN2ZiOC00M2Y0LWFkOWYtMDliODU0MjViZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqFOejox/Nakl1FgP5eJ2JPJAddmuRnmoXn7 uHnbPVaS3CXGRoHiupeGs4N+kCbTsmNjvE5br5UkMqzfKikxjtJsKcxeCSaplbpm bSSk4Is9rG9eBF86WQk/D/982gjdkiYhOjm3EsYOLyYd5dgL6ZcYZiFZYomyyTLj a6Sm5wI+tbrGghv7UyazpbkU25cW4S1oRhN8QawmCJT6L+5enpX1VHQia/uH2mTh I9VVxvWFGFzo8CyiGeBfPlk8KmSVHPeKpUxAJOm3Z1ZowZkwviIHx+P9gpVtPgpE jZTVgdjpic4zjghKiezh/T7sFXB/StxL6zsHntn/U7s0e9jX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaK9ldoML2AvyVjNv8cKYzQOCFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDY5NDA2ODktYjhlYS0z ZThlLWJhZGYtZWYyYTI0NzUyM2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvq1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt2ZDeituLHUIDV2ZAsbmmzyzz17ViCIkxNSwiRe62w2D2CkS8WSCFF RIak9bKXnSCry3nynkkHQLnj2zJmIposx4B6+FqeKy36mhLdc8S3ApMOCTnZrv5S ToC4fLhEKtKlpxaFjnQAz/P+1AI5U5bEx5Vg81vN8/0AjxLV91M4gKLZFNXHx87O ZmskVtRNwl9PUTq2HzDdREA6YRiauo0Hjh53TLk0KN4yi80LZEiCezjV2MXmjcKg yXgM6JN2iMRhZAqQOJqLTXhsH213R1jfcnAeODh4UYGysU/udPYQ3w9u5S2+a74S hB/qSd1qlscTZyMbiW001jqYkkOqJc8= -----END CERTIFICATE-----Generated at Fri Apr 4 08:56:05 2025 by rpki-client