$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa File: 4af43742-c872-3d5e-a21f-1c5ec5858071.roa (raw, json) Hash identifier: GFaLzV/mBVwBmefAa3ewAHw0VE84Yp+UfFeWYvW56Xg= Subject key identifier: FA:4D:F9:EE:3C:71:87:01:CD:27:4C:FE:6A:59:14:83:7B:7F:8E:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822C6721E5CE3BCE88BDC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2c:67:21:e5:ce:3b:ce:88:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6209b447-dbcf-4726-a4a9-8321a62eb894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:05:86:b4:ce:fe:d6:42:52:d1:2a:af:04: 55:78:c3:4d:3e:7a:9f:d8:69:f2:66:cd:af:04:89: 59:e5:49:f6:2e:6c:74:5f:90:eb:92:75:a5:f0:54: e5:d6:92:a2:88:10:b9:e0:17:94:4a:b7:4b:3c:9f: 59:65:50:7c:54:b1:49:b5:e0:8c:b2:83:01:c3:50: 10:91:85:d2:32:94:f3:12:fc:2a:b5:6a:ba:40:da: 1e:8a:1e:ff:c4:24:61:4e:0f:d6:60:a2:9d:dc:e6: fb:22:bd:fc:4b:55:e6:0c:37:f5:4b:b0:1d:40:41: 73:dd:9a:ad:52:cc:b2:c5:c5:26:e5:03:b9:62:d1: 85:07:48:23:ee:04:4c:c4:fd:a6:4d:76:da:c9:c4: 6e:5a:86:bb:0e:0f:26:7d:82:de:ce:5a:c9:08:cc: 6c:2b:62:60:d5:49:3d:b9:55:f7:6c:d6:ca:42:50: 7f:91:85:a8:c2:34:5e:11:30:ad:de:d9:41:b6:9a: 72:1e:39:f9:83:71:76:ae:1b:36:41:e4:e8:e9:3c: 37:f8:0b:3d:8c:6a:e0:8b:67:41:dd:ec:70:7e:bd: 38:37:2b:99:d8:8e:d3:50:02:cf:ce:04:17:c8:50: 93:9e:a5:bb:eb:1b:c3:01:ea:d9:a5:23:77:76:80: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4D:F9:EE:3C:71:87:01:CD:27:4C:FE:6A:59:14:83:7B:7F:8E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:55:5c:46:d7:03:d3:21:cd:3c:95:d8:5b:8e:a9:5d:87:cb: 79:31:94:b5:1d:91:d4:98:a9:66:c6:65:22:5c:86:3c:51:ab: b7:87:35:16:3a:da:b5:6e:97:67:f0:61:88:cb:19:2d:de:26: 42:78:c4:7c:d3:97:67:de:7b:24:25:24:d7:3b:d6:f2:68:4f: d9:80:54:7c:ce:52:7f:4c:32:20:8a:24:fa:13:1a:b1:af:e9: 17:d5:ce:00:06:a5:ba:05:17:d7:f5:2f:8e:39:2c:6e:15:be: 18:7b:d5:5d:86:2b:64:74:90:0b:d4:32:ef:82:23:b4:9c:77: 74:0e:e8:39:32:bc:ee:d3:a5:d9:2a:59:ab:35:ec:fe:54:bf: bc:75:f2:46:a5:01:88:05:2c:e0:e9:a0:fd:f6:89:28:b8:da: 09:47:68:6e:fd:32:44:10:7a:9a:5e:8a:29:dd:84:f0:61:56: 46:54:4e:10:6a:5d:d3:1b:2e:61:3f:6e:77:56:a9:58:9a:86: af:87:c6:12:1e:d5:21:65:7e:ff:4f:dc:7f:22:2e:28:cb:60: 5e:ed:f1:59:c4:af:73:b0:09:f9:0a:e0:2c:eb:2a:af:1b:72: 28:02:30:7d:23:4f:d1:3f:8b:03:67:d6:7c:73:a9:f2:33:11: bf:61:a1:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgixnIeXOO86IvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjIwOWI0NDctZGJjZi00NzI2LWE0YTktODMyMWE2MmViODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk8FhrTO/tZCUtEqrwRVeMNNPnqf2GnyZs2v BIlZ5Un2Lmx0X5DrknWl8FTl1pKiiBC54BeUSrdLPJ9ZZVB8VLFJteCMsoMBw1AQ kYXSMpTzEvwqtWq6QNoeih7/xCRhTg/WYKKd3Ob7Ir38S1XmDDf1S7AdQEFz3Zqt UsyyxcUm5QO5YtGFB0gj7gRMxP2mTXbaycRuWoa7Dg8mfYLezlrJCMxsK2Jg1Uk9 uVX3bNbKQlB/kYWowjReETCt3tlBtppyHjn5g3F2rhs2QeTo6Tw3+As9jGrgi2dB 3exwfr04NyuZ2I7TUALPzgQXyFCTnqW76xvDAerZpSN3doDiLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpN+e48cYcBzSdM/mpZFIN7f47EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGFmNDM3NDItYzg3Mi0z ZDVlLWEyMWYtMWM1ZWM1ODU4MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClVXEbXA9MhzTyV2FuOqV2Hy3kxlLUdkdSYqWbGZSJchjxRq7eHNRY6 2rVul2fwYYjLGS3eJkJ4xHzTl2feeyQlJNc71vJoT9mAVHzOUn9MMiCKJPoTGrGv 6RfVzgAGpboFF9f1L445LG4Vvhh71V2GK2R0kAvUMu+CI7Scd3QO6DkyvO7Tpdkq Was17P5Uv7x18kalAYgFLODpoP32iSi42glHaG79MkQQeppeiindhPBhVkZUThBq XdMbLmE/bndWqViahq+HxhIe1SFlfv9P3H8iLijLYF7t8VnEr3OwCfkK4CzrKq8b cigCMH0jT9E/iwNn1nxzqfIzEb9hoWM= -----END CERTIFICATE-----Generated at Fri Apr 4 08:31:38 2025 by rpki-client