$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa File: 589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa (raw, json) Hash identifier: HH/8XaofYWpASzuHk6Z0AYvSZ/ZejEk6hQGK12xVDWQ= Subject key identifier: A7:1C:00:83:71:C9:EC:C1:76:5B:01:E0:10:12:65:00:7B:36:85:72 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58213CD928C6F355AD4D880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:13:cd:92:8c:6f:35:5a:d4:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5820f2bd-78e7-4b2d-ab01-db54b205138b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:4a:41:93:4c:4a:ed:7a:99:b2:40:71:db: 9e:53:25:9b:95:6e:16:b1:c2:2d:b6:c9:7e:05:c8: 36:36:03:b7:6a:46:34:2f:bc:9e:0e:39:05:04:5f: 04:26:0c:b2:78:21:81:91:53:77:1d:29:e1:37:82: 10:d2:06:00:32:db:50:44:26:c3:08:9d:8a:80:73: 54:01:62:73:16:11:70:17:74:cd:2c:3b:b4:c1:98: f1:06:a6:d5:81:47:d7:bf:72:5d:3f:2c:88:d3:30: c9:72:59:87:92:47:0e:15:80:6a:b8:a9:99:64:ce: 7b:0c:72:c3:dc:7d:37:6d:64:7d:a9:e3:30:69:d0: 09:a8:f2:dc:85:06:5d:41:0f:62:cc:66:69:1d:28: 13:dd:ef:76:c5:db:03:04:aa:2d:c9:34:3a:9d:70: 96:3e:06:cd:5f:e7:70:4f:b0:af:5f:a4:17:16:d5: 85:f9:84:e8:ae:93:cc:14:81:c1:71:ab:61:0f:3b: 9d:3b:ac:72:42:cd:6a:21:6c:51:f2:30:f8:65:5f: 06:1c:70:4f:a8:d3:1b:f4:6b:7c:8a:e3:fb:2e:88: a6:ba:93:ed:89:65:0f:db:68:f3:21:b0:f4:14:bb: 0b:1f:93:98:61:6f:65:8f:f0:ce:c0:eb:12:23:2c: 99:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1C:00:83:71:C9:EC:C1:76:5B:01:E0:10:12:65:00:7B:36:85:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6b:60:33:7b:86:f4:94:c2:83:36:47:ba:29:02:43:e7:10: 2d:c9:67:a8:86:90:d4:5d:5f:de:d3:e5:0b:9a:28:d6:08:3c: 1c:dc:1c:39:0c:87:87:bb:bf:4c:6d:ac:6a:30:20:a7:bf:d8: de:50:10:f5:bf:1d:d8:a8:2b:6c:29:da:d5:4e:56:3f:a7:da: 97:7b:39:ed:8b:25:d1:33:c5:19:83:69:ac:26:4b:5d:ee:0d: cd:3c:9c:c9:ec:8e:6b:0c:a1:be:bd:fb:f4:83:7d:61:52:6e: 3d:96:87:b9:98:dd:c3:4c:82:8b:ee:21:ef:2c:f2:57:b4:b6: e4:f9:3a:b7:47:cb:5a:de:bb:d2:dc:5b:08:6b:81:11:01:60: fe:ae:92:63:bb:9c:a8:b6:94:16:89:22:3b:6c:be:0e:2d:c2: 5e:09:07:01:9f:a5:df:0d:2b:f1:15:66:8a:fa:5a:bc:eb:6a: 89:21:b2:74:27:e4:1f:0d:8b:c1:3d:30:94:3f:2d:21:73:80: 10:bb:5e:52:7a:82:f7:f8:92:b1:23:42:1b:ce:59:10:2b:9b: 8e:68:0e:40:d2:e7:81:03:7e:a0:54:8b:78:3f:9d:12:79:61: 2d:16:c3:26:4d:b1:48:eb:af:f4:b5:34:bb:98:96:11:12:bc: f9:91:97:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghPNkoxvNVrU2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTgyMGYyYmQtNzhlNy00YjJkLWFiMDEtZGI1NGIyMDUxMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/RKQZNMSu16mbJAcdueUyWblW4WscIttsl+ Bcg2NgO3akY0L7yeDjkFBF8EJgyyeCGBkVN3HSnhN4IQ0gYAMttQRCbDCJ2KgHNU AWJzFhFwF3TNLDu0wZjxBqbVgUfXv3JdPyyI0zDJclmHkkcOFYBquKmZZM57DHLD 3H03bWR9qeMwadAJqPLchQZdQQ9izGZpHSgT3e92xdsDBKotyTQ6nXCWPgbNX+dw T7CvX6QXFtWF+YTorpPMFIHBcathDzudO6xyQs1qIWxR8jD4ZV8GHHBPqNMb9Gt8 iuP7LoimupPtiWUP22jzIbD0FLsLH5OYYW9lj/DOwOsSIyyZawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKccAINxyezBdlsB4BASZQB7NoVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg5ZGQ5N2QtZGNkYi0z ZGFjLTk5ZTctYjY3OGE3ZWEzYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvphMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABprYDN7hvSUwoM2R7opAkPnEC3JZ6iGkNRdX97T5QuaKNYIPBzcHDkM h4e7v0xtrGowIKe/2N5QEPW/HdioK2wp2tVOVj+n2pd7Oe2LJdEzxRmDaawmS13u Dc08nMnsjmsMob69+/SDfWFSbj2Wh7mY3cNMgovuIe8s8le0tuT5OrdHy1reu9Lc WwhrgREBYP6ukmO7nKi2lBaJIjtsvg4twl4JBwGfpd8NK/EVZor6WrzraokhsnQn 5B8Ni8E9MJQ/LSFzgBC7XlJ6gvf4krEjQhvOWRArm45oDkDS54EDfqBUi3g/nRJ5 YS0WwyZNsUjrr/S1NLuYlhESvPmRl28= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:08 2025 by rpki-client