$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c03e9d6-9445-376a-a25c-f66167f373e1.roa File: 5c03e9d6-9445-376a-a25c-f66167f373e1.roa (raw, json) Hash identifier: h/74Qz7EzlRh+xg0b/yys69mm8MnkVmv51znckvc1P4= Subject key identifier: 48:87:EC:78:CE:D0:D3:75:48:0A:A0:E1:75:89:4A:7E:9E:5B:2E:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58230F872EACF1FE9C9F840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c03e9d6-9445-376a-a25c-f66167f373e1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:30:f8:72:ea:cf:1f:e9:c9:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8500b984-326f-4883-9818-ee4b479c308f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:9f:e2:e6:fd:82:38:26:11:9e:c2:10:a4: 58:02:31:a7:29:4e:92:04:26:75:88:cb:6c:a4:44: 40:ec:08:b5:a7:c3:60:2c:d9:8c:f3:3f:44:5b:fc: f0:87:5e:76:28:3f:e1:ba:4c:10:2c:5e:f1:09:54: 7a:46:28:74:1c:a3:13:dd:22:71:af:09:3b:4b:6f: fc:6c:90:1e:79:d1:58:88:fe:a4:3d:d5:7a:b9:9c: 36:51:8d:87:70:3a:c6:ba:83:31:38:61:73:7e:52: 4c:85:7b:95:06:a5:1d:63:ff:31:0a:05:aa:47:90: 81:be:21:ca:06:9f:b0:76:ef:8e:62:d2:ca:ba:ae: f7:20:fc:2b:e5:ca:ec:6f:79:df:56:d3:f7:02:b7: e5:0b:41:c8:65:3e:f3:7f:26:7f:45:3b:cf:0c:85: dd:fa:5d:35:e0:3c:79:9f:45:8a:c3:0f:0d:38:67: be:b5:c8:a1:fb:09:9a:aa:a5:df:8a:b2:20:e6:50: c6:5b:2c:19:01:ba:5d:15:34:e9:6b:57:06:8b:d1: f6:a1:02:e1:70:52:79:7a:5d:e0:7a:04:5b:3a:4e: 1c:8b:37:0c:7c:11:37:7c:01:84:8e:ac:da:8b:16: 30:ec:c3:a8:54:14:fd:e7:6c:10:8a:59:f0:1e:81: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:87:EC:78:CE:D0:D3:75:48:0A:A0:E1:75:89:4A:7E:9E:5B:2E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c03e9d6-9445-376a-a25c-f66167f373e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b3:68:14:bc:1d:96:59:2f:1b:7f:d8:f7:67:31:e1:1d:1c: e9:35:be:13:1a:96:4c:e3:7a:4e:e3:a3:b1:b5:df:74:6b:26: 00:a5:08:10:f3:6e:0d:8e:a1:9d:62:bc:4f:a6:cf:c0:14:6c: 97:c5:c6:65:29:17:7e:b2:4c:8d:3c:36:13:b0:95:6e:cc:3a: bc:6f:34:e9:ea:ba:e6:c5:b3:f7:36:ba:a7:30:89:39:b2:07: db:38:a9:69:a6:22:98:2b:5d:c7:2b:28:b2:af:c6:84:ea:b2: 21:8f:43:ed:8e:54:ce:40:12:ad:32:55:11:af:58:7d:0c:7d: cd:d6:ca:4c:22:fc:ba:b4:a1:48:17:d0:10:3b:49:6e:e4:96: 37:fd:90:a0:a5:dd:4b:b3:1d:75:07:31:fc:07:14:06:4f:77: 69:08:36:98:5d:22:2f:69:8c:2e:69:c6:86:b0:22:d4:06:ab: 11:b5:12:4b:c9:6a:fa:9d:f0:c2:30:ff:39:4a:b1:1e:48:54: 03:53:b6:d2:7e:26:78:5d:f5:45:a7:1c:e3:8f:41:5b:f6:0f: ef:02:ce:24:bc:7e:c0:43:f1:92:c8:0b:cf:ae:51:41:95:9c: 9c:d5:65:8e:60:d3:94:46:11:b6:d5:57:3d:e8:b0:dc:f8:f7: 96:7a:f8:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjD4curPH+nJ+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODUwMGI5ODQtMzI2Zi00ODgzLTk4MTgtZWU0YjQ3OWMzMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor2f4ub9gjgmEZ7CEKRYAjGnKU6SBCZ1iMts pERA7Ai1p8NgLNmM8z9EW/zwh152KD/hukwQLF7xCVR6Rih0HKMT3SJxrwk7S2/8 bJAeedFYiP6kPdV6uZw2UY2HcDrGuoMxOGFzflJMhXuVBqUdY/8xCgWqR5CBviHK Bp+wdu+OYtLKuq73IPwr5crsb3nfVtP3ArflC0HIZT7zfyZ/RTvPDIXd+l014Dx5 n0WKww8NOGe+tcih+wmaqqXfirIg5lDGWywZAbpdFTTpa1cGi9H2oQLhcFJ5el3g egRbOk4cizcMfBE3fAGEjqzaixYw7MOoVBT952wQilnwHoFloQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiH7HjO0NN1SAqg4XWJSn6eWy4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWMwM2U5ZDYtOTQ0NS0z NzZhLWEyNWMtZjY2MTY3ZjM3M2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADizaBS8HZZZLxt/2PdnMeEdHOk1vhMalkzjek7jo7G133RrJgClCBDz bg2OoZ1ivE+mz8AUbJfFxmUpF36yTI08NhOwlW7MOrxvNOnquubFs/c2uqcwiTmy B9s4qWmmIpgrXccrKLKvxoTqsiGPQ+2OVM5AEq0yVRGvWH0Mfc3Wykwi/Lq0oUgX 0BA7SW7kljf9kKCl3UuzHXUHMfwHFAZPd2kINphdIi9pjC5pxoawItQGqxG1EkvJ avqd8MIw/zlKsR5IVANTttJ+Jnhd9UWnHOOPQVv2D+8CziS8fsBD8ZLIC8+uUUGV nJzVZY5g05RGEbbVVz3osNz495Z6+D4= -----END CERTIFICATE-----Generated at Fri Apr 4 08:36:02 2025 by rpki-client