$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa File: 5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa (raw, json) Hash identifier: x+gpYpJRPe4Uxgrfq8HrtM/tATnaTxOMy3lf7TW5xps= Subject key identifier: E1:65:7D:7B:DC:5D:C9:5D:16:D4:A2:35:6F:1A:00:8D:44:21:0F:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581800936837D34B158F700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:80:09:36:83:7d:34:b1:58:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=602f890a-1bc1-4e3f-8550-33ff32715d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fd:28:d7:af:a7:05:ba:28:22:26:b1:d8:e4: 8f:fe:d8:8c:de:b6:5d:62:de:ca:49:c0:bc:07:13: 97:53:ec:39:2e:ba:5f:7c:31:6b:be:01:da:f9:4b: 52:ad:a9:65:35:93:8b:88:90:33:5c:b6:f4:6e:98: f8:eb:a9:1c:18:0a:eb:28:bf:ea:6c:ad:eb:2b:67: 4b:68:b2:96:16:77:34:f4:11:69:83:11:b3:3c:8b: d6:f3:1c:ff:71:7c:c2:02:b3:0d:f7:1c:ee:b9:cb: da:ce:10:45:1d:f6:92:a0:17:b6:6c:b3:d5:45:92: 4e:43:dd:02:c6:ea:51:7c:44:ec:53:15:9d:ec:ff: f3:d2:cb:14:5c:85:9d:04:b3:45:45:a3:ca:d1:32: 4d:e9:eb:10:3b:59:34:e3:7b:5a:f7:03:03:7a:04: 57:f9:7c:eb:48:5e:0f:1e:6f:63:fc:7b:1f:5b:f7: e2:b3:0d:be:ba:85:76:1e:21:c3:95:fb:cd:5b:4f: 70:c3:5b:fa:8c:ec:7c:af:3f:56:ac:75:fd:a6:ff: 32:8c:c8:63:79:30:78:dd:dd:5b:65:f9:63:a4:19: db:36:52:7b:59:69:89:74:c7:fd:85:08:ec:1f:7f: e6:7b:17:65:2f:9e:16:f5:c5:a2:f7:fc:21:b5:35: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:65:7D:7B:DC:5D:C9:5D:16:D4:A2:35:6F:1A:00:8D:44:21:0F:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f9:5b:3b:2c:02:a2:eb:1e:4f:b3:52:fd:6f:07:41:54:a3: 29:16:02:67:67:0b:f5:62:0a:3a:48:20:f7:1e:6c:fd:75:04: 01:a6:6f:ab:29:46:df:f9:ef:8f:e5:06:e5:02:4b:bb:b8:72: 71:9e:52:51:7c:c7:bd:4b:cc:30:61:e1:57:d3:0a:db:7d:a5: 24:5a:30:ee:08:56:7e:21:c7:0f:98:fd:1b:f4:75:dd:27:fc: 9f:8a:56:b1:cf:db:b4:7a:23:8c:f3:50:a0:83:8b:4e:05:f1: 29:0f:a4:2b:e3:96:7c:2c:bc:b7:45:94:ae:96:aa:e9:d3:72: dc:33:a8:1d:cd:cd:90:7e:66:02:30:fc:0e:04:fb:6a:45:80: fc:1c:6f:7f:31:69:3d:74:8b:85:a5:74:7c:8d:fa:d6:97:ef: 2b:b8:26:fc:ec:59:98:7f:bd:cd:10:bc:af:84:2f:07:64:49: 93:a2:92:11:8e:66:fb:a8:f6:07:53:72:a2:d3:32:fd:a7:01: e4:51:cc:01:7f:5e:4b:78:e8:cf:2f:c3:1b:c5:36:23:66:2d: 41:3e:77:d3:b3:33:c3:5e:2f:f1:d4:6b:14:9f:f9:8e:c0:4c: 9b:b4:42:0a:af:9f:f2:b9:47:18:93:8b:12:7c:34:8a:55:74: b3:84:19:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYAJNoN9NLFY9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjAyZjg5MGEtMWJjMS00ZTNmLTg1NTAtMzNmZjMyNzE1ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/0o16+nBbooIiax2OSP/tiM3rZdYt7KScC8 BxOXU+w5LrpffDFrvgHa+UtSrallNZOLiJAzXLb0bpj466kcGArrKL/qbK3rK2dL aLKWFnc09BFpgxGzPIvW8xz/cXzCArMN9xzuucvazhBFHfaSoBe2bLPVRZJOQ90C xupRfETsUxWd7P/z0ssUXIWdBLNFRaPK0TJN6esQO1k043ta9wMDegRX+XzrSF4P Hm9j/HsfW/fisw2+uoV2HiHDlfvNW09ww1v6jOx8rz9WrHX9pv8yjMhjeTB43d1b ZfljpBnbNlJ7WWmJdMf9hQjsH3/mexdlL54W9cWi9/whtTWYqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFlfXvcXcldFtSiNW8aAI1EIQ/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWQwMjlmMDktZTNlMS0z M2NjLWFhMGUtMDc5YmYzZDM5YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH5WzssAqLrHk+zUv1vB0FUoykWAmdnC/ViCjpIIPcebP11BAGmb6sp Rt/574/lBuUCS7u4cnGeUlF8x71LzDBh4VfTCtt9pSRaMO4IVn4hxw+Y/Rv0dd0n /J+KVrHP27R6I4zzUKCDi04F8SkPpCvjlnwsvLdFlK6WqunTctwzqB3NzZB+ZgIw /A4E+2pFgPwcb38xaT10i4WldHyN+taX7yu4JvzsWZh/vc0QvK+ELwdkSZOikhGO Zvuo9gdTcqLTMv2nAeRRzAF/Xkt46M8vwxvFNiNmLUE+d9OzM8NeL/HUaxSf+Y7A TJu0Qgqvn/K5RxiTixJ8NIpVdLOEGd8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:11:40 2025 by rpki-client