$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa File: 5a720a5a-25e3-3747-9676-70856a8a9f69.roa (raw, json) Hash identifier: JuqieU9QKvGRLfYQgH4le8VGMIrpobMZK31ISyNERU8= Subject key identifier: 09:05:45:C2:84:A4:E0:41:39:32:35:EE:39:5C:4D:02:3E:95:C3:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582073636FCACF95B08C280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:07:36:36:fc:ac:f9:5b:08:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=da7bf5ff-b911-4882-a500-cf15d243138d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e1:b5:8d:b2:99:aa:e1:0d:86:30:9b:84:80: 81:f2:f4:89:aa:e2:55:e1:54:ab:ea:8d:50:27:6b: 95:33:16:e1:ee:d5:e1:30:c1:df:71:95:be:03:5a: b2:44:5a:c0:59:4b:36:3b:3f:b0:3c:08:cc:3a:92: ba:f9:85:ca:57:50:b2:3e:aa:5d:73:f8:d6:e8:88: 16:dc:75:95:00:f6:5a:ec:c7:ff:5e:e4:53:8a:14: 3d:03:72:ff:77:e8:09:52:a3:72:ec:e6:0d:20:21: f4:4e:a2:2a:45:05:da:08:d0:18:e8:99:37:66:d5: 01:ee:21:ea:ed:7b:8d:fe:d8:f8:a0:54:5c:27:a7: c2:e7:9f:d5:55:c8:7f:16:ed:47:75:95:b3:80:c9: f0:84:f4:03:68:9c:3b:18:a2:fc:da:40:59:69:01: 9d:06:83:63:52:cd:3f:03:f1:74:bc:17:ba:00:03: 15:64:29:69:52:4a:06:23:19:df:93:7e:28:ab:09: ce:36:de:8f:27:9a:0c:c2:a8:31:b0:42:7d:09:d4: 6c:7c:3c:7e:c9:ba:db:57:c5:9e:87:ba:bd:a9:65: a0:cc:b2:95:cb:b2:6e:3f:d6:22:f1:64:5c:0b:d3: 55:0a:10:c3:72:8d:f5:13:5e:3b:b5:ca:43:e6:06: 55:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:05:45:C2:84:A4:E0:41:39:32:35:EE:39:5C:4D:02:3E:95:C3:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:aa:40:3e:d7:02:02:9f:96:a3:00:0a:3b:9b:2b:34:a4:b9: 5c:6f:01:f4:6c:c7:43:18:4a:5b:37:13:af:06:e5:5d:4a:b6: 82:25:c2:6e:0a:bf:8d:51:08:a3:1b:b9:6d:7a:c9:27:bc:1c: 86:5b:43:5c:41:74:d1:2f:86:24:6a:e0:eb:92:18:6f:2d:ab: 72:12:1b:f6:79:1e:e0:0d:d9:33:9c:16:df:4e:a0:30:20:60: ab:fc:eb:9d:a4:5f:b1:ff:5a:05:79:71:33:b0:1d:78:e4:fb: 7b:02:f7:2f:f7:b3:17:e3:e3:a2:ed:b1:0d:d4:56:2a:4f:15: 3a:8a:e3:3d:a6:75:64:c7:08:05:4d:e7:51:e4:2b:b0:0b:28: 76:e5:51:e6:0c:0c:d5:29:e6:98:69:b9:a9:81:bf:fa:a3:9a: 75:9e:4f:47:fd:82:90:af:78:c8:ca:99:fb:bc:1e:1f:d2:75: e5:0b:b8:38:df:9b:b6:aa:30:9c:90:6b:b2:f6:5c:11:46:76: ba:f7:e5:73:45:92:98:00:94:ca:9d:36:7c:5f:57:f0:60:e0: 8b:3b:c7:20:38:be:bc:7d:f0:d1:83:60:34:ac:09:16:94:b1: fe:d2:05:19:54:bd:50:d2:05:cf:34:fe:86:78:54:b6:ba:34: 40:9a:28:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggc2Nvys+VsIwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGE3YmY1ZmYtYjkxMS00ODgyLWE1MDAtY2YxNWQyNDMxMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+G1jbKZquENhjCbhICB8vSJquJV4VSr6o1Q J2uVMxbh7tXhMMHfcZW+A1qyRFrAWUs2Oz+wPAjMOpK6+YXKV1CyPqpdc/jW6IgW 3HWVAPZa7Mf/XuRTihQ9A3L/d+gJUqNy7OYNICH0TqIqRQXaCNAY6Jk3ZtUB7iHq 7XuN/tj4oFRcJ6fC55/VVch/Fu1HdZWzgMnwhPQDaJw7GKL82kBZaQGdBoNjUs0/ A/F0vBe6AAMVZClpUkoGIxnfk34oqwnONt6PJ5oMwqgxsEJ9CdRsfDx+ybrbV8We h7q9qWWgzLKVy7JuP9Yi8WRcC9NVChDDco31E147tcpD5gZV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkFRcKEpOBBOTI17jlcTQI+lcN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE3MjBhNWEtMjVlMy0z NzQ3LTk2NzYtNzA4NTZhOGE5ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+qQD7XAgKflqMACjubKzSkuVxvAfRsx0MYSls3E68G5V1KtoIlwm4K v41RCKMbuW16ySe8HIZbQ1xBdNEvhiRq4OuSGG8tq3ISG/Z5HuAN2TOcFt9OoDAg YKv8652kX7H/WgV5cTOwHXjk+3sC9y/3sxfj46LtsQ3UVipPFTqK4z2mdWTHCAVN 51HkK7ALKHblUeYMDNUp5phpuamBv/qjmnWeT0f9gpCveMjKmfu8Hh/SdeULuDjf m7aqMJyQa7L2XBFGdrr35XNFkpgAlMqdNnxfV/Bg4Is7xyA4vrx98NGDYDSsCRaU sf7SBRlUvVDSBc80/oZ4VLa6NECaKMo= -----END CERTIFICATE-----Generated at Fri Apr 4 08:46:52 2025 by rpki-client