$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50b42bce-1e38-33a6-b288-69f334a9b878.roa File: 50b42bce-1e38-33a6-b288-69f334a9b878.roa (raw, json) Hash identifier: SgRnVKj74XKxdABvGOtNY+rPPjlJj9LMTE7v04z94U0= Subject key identifier: C7:B4:9A:B1:5D:C6:3D:BC:F3:F6:EE:0F:5E:88:CE:AA:5A:69:A1:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817DA15A31DC75671699A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50b42bce-1e38-33a6-b288-69f334a9b878.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7d:a1:5a:31:dc:75:67:16:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=df8e5fda-b349-415a-916c-adeeb3678772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:01:ff:82:07:c7:1b:59:86:33:c1:35:84: db:76:a7:e9:ad:ab:9a:26:4f:35:14:40:a9:7c:d6: b0:a6:28:0d:37:e4:51:fd:d7:71:83:55:c8:57:0d: f6:d7:d0:75:33:e6:79:0e:3e:ff:97:32:bf:14:3e: 60:ce:e5:7f:74:b3:d6:f3:b8:af:3b:90:0b:5c:64: b3:06:21:d6:a3:54:f0:e6:54:cb:62:2b:ea:ec:47: 7c:05:f5:89:f2:db:4c:53:0f:d9:0f:ef:f3:ac:3b: 32:59:27:c3:a3:c0:f8:13:5f:28:ab:31:09:12:55: 73:17:b6:cc:19:4c:0f:62:91:ee:c2:cd:ee:8e:44: 4f:61:5d:e2:26:b9:4c:cc:c5:ab:e2:47:e4:f4:5f: 0d:8b:fa:58:6a:1f:15:3a:c0:34:b3:2e:0a:87:dd: 22:ba:dc:62:8b:22:ba:9e:e6:27:ae:4a:ac:53:14: 0e:8a:67:c3:9b:75:70:ca:96:cc:ae:9e:95:e1:c3: e1:a5:c5:dd:96:7c:bc:b5:0f:a4:32:d0:11:14:cf: 9c:ba:d5:4a:73:b6:d4:d8:0e:fb:6d:d2:e4:99:92: a8:2a:81:7a:f0:94:d9:7c:9d:62:67:4d:93:72:6b: 1a:4c:4c:35:b1:de:88:f3:55:7a:15:b6:cd:ff:f7: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B4:9A:B1:5D:C6:3D:BC:F3:F6:EE:0F:5E:88:CE:AA:5A:69:A1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/50b42bce-1e38-33a6-b288-69f334a9b878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0b:94:70:23:a5:03:d5:98:57:ad:5b:f8:fb:06:55:2e:90: 07:ac:88:ee:45:1e:24:16:e3:81:cd:71:f4:ec:f8:f2:87:13: fb:33:b7:18:a5:57:69:f1:cc:60:93:45:c1:8b:40:75:45:64: 7f:2b:17:44:51:83:58:b6:cc:51:eb:91:77:53:63:53:46:c2: c4:b3:bf:b1:d2:59:5c:08:b3:e7:52:db:2b:ec:a4:3a:84:57: a3:ed:e2:25:ee:77:b5:0b:54:d9:22:92:66:a2:20:5a:3c:3c: 84:2b:b3:c1:f4:77:19:03:45:22:ed:98:58:ec:37:f5:81:ad: 56:44:6b:2d:a0:74:5c:62:86:10:3e:25:0b:d3:f5:0f:7e:b9: 6e:40:70:5d:7a:e9:4d:64:e9:05:2d:f0:38:0f:e4:6f:cd:f5: 72:db:4d:ab:ec:65:d7:d9:96:8e:0b:36:bb:ba:c3:4c:45:dd: 02:39:f3:0f:a4:53:53:46:34:74:29:2a:9e:ea:ac:f6:29:1d: 40:74:21:c3:db:77:e8:77:07:e6:58:a3:f8:41:18:9c:25:5a: d0:6d:05:7d:ac:12:8f:a0:44:25:ab:5b:de:f7:b8:e8:e1:5d: 73:0b:f2:76:72:b6:07:85:ab:85:4f:23:01:aa:de:e2:8a:e3: 67:f4:7a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX2hWjHcdWcWmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGY4ZTVmZGEtYjM0OS00MTVhLTkxNmMtYWRlZWIzNjc4NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMMB/4IHxxtZhjPBNYTbdqfprauaJk81FECp fNawpigNN+RR/ddxg1XIVw3219B1M+Z5Dj7/lzK/FD5gzuV/dLPW87ivO5ALXGSz BiHWo1Tw5lTLYivq7Ed8BfWJ8ttMUw/ZD+/zrDsyWSfDo8D4E18oqzEJElVzF7bM GUwPYpHuws3ujkRPYV3iJrlMzMWr4kfk9F8Ni/pYah8VOsA0sy4Kh90iutxiiyK6 nuYnrkqsUxQOimfDm3VwypbMrp6V4cPhpcXdlny8tQ+kMtARFM+cutVKc7bU2A77 bdLkmZKoKoF68JTZfJ1iZ02TcmsaTEw1sd6I81V6FbbN//fiYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe0mrFdxj288/buD16IzqpaaaGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTBiNDJiY2UtMWUzOC0z M2E2LWIyODgtNjlmMzM0YTliODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIALlHAjpQPVmFetW/j7BlUukAesiO5FHiQW44HNcfTs+PKHE/sztxil V2nxzGCTRcGLQHVFZH8rF0RRg1i2zFHrkXdTY1NGwsSzv7HSWVwIs+dS2yvspDqE V6Pt4iXud7ULVNkikmaiIFo8PIQrs8H0dxkDRSLtmFjsN/WBrVZEay2gdFxihhA+ JQvT9Q9+uW5AcF166U1k6QUt8DgP5G/N9XLbTavsZdfZlo4LNru6w0xF3QI58w+k U1NGNHQpKp7qrPYpHUB0IcPbd+h3B+ZYo/hBGJwlWtBtBX2sEo+gRCWrW973uOjh XXML8nZytgeFq4VPIwGq3uKK42f0emc= -----END CERTIFICATE-----Generated at Fri Apr 4 08:40:39 2025 by rpki-client