$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa File: 4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa (raw, json) Hash identifier: BR+arZZ794ogRJzpPTSFkEV2Iv9A5HNER2LZxGCBpac= Subject key identifier: 99:07:D6:27:26:C8:BB:0A:DE:DA:1F:A2:5D:D4:F6:EF:C4:6C:61:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817B749FCB2244E69AEC40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7b:74:9f:cb:22:44:e6:9a:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d37346f0-2567-493a-8c26-28dc62276c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c9:a1:48:49:29:0b:1e:84:86:05:bf:d2:1b: 37:0a:a7:01:75:26:e2:ea:20:4f:3e:29:52:02:5b: 58:fe:6f:1e:75:78:94:b8:8f:da:34:48:4b:2b:43: cf:c4:ae:39:fe:db:f4:32:fc:a6:15:c3:b3:65:96: 22:45:a4:f8:7b:0f:1e:e1:61:b9:50:12:d4:09:b0: 38:86:9c:4a:c6:6c:10:c7:49:5c:df:f8:25:18:5b: 73:a7:2a:98:18:f5:af:66:a5:02:89:5b:04:a8:d4: 62:13:46:7d:23:8a:04:4e:d0:c3:cb:8a:07:e0:b0: 31:0b:be:61:9e:6c:e2:6c:98:9b:e0:3c:28:59:19: 48:8e:d0:61:25:c1:10:9e:d2:ea:81:1c:9e:32:67: 44:55:b2:fb:d7:ca:58:24:96:99:ee:80:40:f1:4b: 01:64:20:e2:97:11:57:ec:61:17:1f:dc:5b:ee:bb: 13:b7:52:42:4e:c5:c5:43:92:b3:75:9f:f9:58:ea: 33:32:0e:b5:c0:55:27:67:98:c3:ec:ba:1a:2c:ab: 88:b1:05:b0:59:6a:59:ed:e4:74:61:32:e4:25:f4: eb:c3:84:8e:aa:de:0a:70:d1:30:f5:3b:d3:56:ab: ef:8b:b2:d1:27:0a:f5:1c:fd:37:fb:c4:db:84:20: f9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:07:D6:27:26:C8:BB:0A:DE:DA:1F:A2:5D:D4:F6:EF:C4:6C:61:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:19:98:7e:10:30:78:3b:5c:6a:86:f4:e1:72:01:4e:b7:eb: c0:54:04:7a:af:28:de:a0:e8:d3:2b:3d:34:57:55:44:61:4b: 1f:a8:a1:c8:ce:75:a5:2d:54:4f:e0:fa:d6:21:a4:10:4c:01: e9:c9:75:94:f3:00:97:0f:2e:36:89:a2:66:49:c8:a1:77:9a: a6:cc:24:bd:19:43:93:36:c9:fd:1d:ae:31:e9:d2:79:62:ea: ed:b9:0f:29:97:38:11:38:cf:9c:ec:f2:d2:e7:e2:29:33:22: 06:2b:a1:c2:d7:88:d0:ce:67:53:04:47:a1:7b:33:fb:dd:49: ee:67:8f:e8:d0:61:d6:00:3c:94:12:5c:6a:94:7c:42:d3:37: eb:ac:9e:78:9e:e6:9c:f0:c6:2c:9e:b8:d4:fc:93:1a:57:7b: 2b:b4:98:62:4e:ae:37:a8:e4:d7:b9:6a:46:72:65:ab:91:01: 2b:4c:50:8e:56:10:bf:1d:d2:3f:06:4d:83:e4:c5:f5:5b:ff: 11:ae:5d:cd:eb:0d:1e:7c:d8:a4:76:1c:29:bb:7c:04:d3:93: 02:d9:dc:60:27:df:f3:7a:af:f7:96:b6:86:05:df:e6:5a:ea: 25:73:f1:c7:55:19:07:0b:8a:03:be:b6:35:d6:49:9c:99:e4: 73:86:45:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXt0n8siROaa7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDM3MzQ2ZjAtMjU2Ny00OTNhLThjMjYtMjhkYzYyMjc2Yzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsmhSEkpCx6EhgW/0hs3CqcBdSbi6iBPPilS AltY/m8edXiUuI/aNEhLK0PPxK45/tv0MvymFcOzZZYiRaT4ew8e4WG5UBLUCbA4 hpxKxmwQx0lc3/glGFtzpyqYGPWvZqUCiVsEqNRiE0Z9I4oETtDDy4oH4LAxC75h nmzibJib4DwoWRlIjtBhJcEQntLqgRyeMmdEVbL718pYJJaZ7oBA8UsBZCDilxFX 7GEXH9xb7rsTt1JCTsXFQ5KzdZ/5WOozMg61wFUnZ5jD7LoaLKuIsQWwWWpZ7eR0 YTLkJfTrw4SOqt4KcNEw9TvTVqvvi7LRJwr1HP03+8TbhCD5/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkH1icmyLsK3tofol3U9u/EbGEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGIwMzdmOGQtZDE0OC0z ZmY3LTliZTctMzBjNGE0ZmY1NzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4ZmH4QMHg7XGqG9OFyAU6368BUBHqvKN6g6NMrPTRXVURhSx+oocjO daUtVE/g+tYhpBBMAenJdZTzAJcPLjaJomZJyKF3mqbMJL0ZQ5M2yf0drjHp0nli 6u25DymXOBE4z5zs8tLn4ikzIgYrocLXiNDOZ1MER6F7M/vdSe5nj+jQYdYAPJQS XGqUfELTN+usnnie5pzwxiyeuNT8kxpXeyu0mGJOrjeo5Ne5akZyZauRAStMUI5W EL8d0j8GTYPkxfVb/xGuXc3rDR582KR2HCm7fATTkwLZ3GAn3/N6r/eWtoYF3+Za 6iVz8cdVGQcLigO+tjXWSZyZ5HOGRTA= -----END CERTIFICATE-----Generated at Fri Apr 4 08:29:29 2025 by rpki-client