$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa File: 5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa (raw, json) Hash identifier: rYt38gueUiZLdO4uC6ynysjNbk/QH/QJcF+bwRz5fws= Subject key identifier: 28:53:7A:D6:EA:E8:84:8D:C4:70:F6:B1:51:37:57:B7:D4:FA:86:2B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA1257CE12D2E0CD087E980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.251.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:25:7c:e1:2d:2e:0c:d0:87:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=99b43a14-19bf-4c25-ad7f-cbf6740fda3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:a2:e0:6b:70:e3:0a:9c:1a:60:77:5e:ce: 99:0c:8c:a4:de:ee:78:61:95:0a:6c:08:09:4e:f9: 75:49:98:b9:ee:87:55:97:3b:be:b8:c7:1f:f6:f0: 03:22:89:83:7f:31:c6:48:97:c3:92:10:12:51:c2: a6:c0:55:07:d4:80:f2:4c:1e:67:89:c4:75:d3:ea: 0e:f9:fe:23:c5:9a:ca:59:8e:7a:cc:53:9c:6c:a8: 5d:f7:34:16:8f:52:3e:c7:38:fe:a7:65:a6:8c:dc: fb:e7:ae:f6:cd:bf:70:a7:80:a7:75:69:db:a1:6f: ba:b7:ed:75:43:29:99:be:de:77:9a:7c:66:35:23: 88:4f:a1:ad:a1:19:2a:ae:f1:60:be:03:04:56:85: 2e:d9:d9:24:3c:6d:3f:0e:51:d0:58:07:f1:69:a5: 9a:4a:df:9a:a7:59:b0:36:77:91:40:89:49:58:8d: 4f:ae:d6:a9:89:9a:75:2f:dc:36:9d:5b:1e:c3:fe: d8:8b:52:a5:ce:df:6d:a3:a5:81:9e:7d:40:9e:57: f6:af:1c:21:b9:f5:4a:58:68:8b:e7:01:b8:1b:35: 05:a8:38:e8:4c:95:ff:dd:f8:70:89:c7:23:67:ec: 1c:28:8e:ed:30:ce:2d:38:54:3d:e3:90:f3:66:59: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:53:7A:D6:EA:E8:84:8D:C4:70:F6:B1:51:37:57:B7:D4:FA:86:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea22b83-232e-38b0-8c81-6cf94f1022ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:03:ad:48:b5:42:11:6f:d3:a6:c1:8d:c5:28:ce:73:bb:22: 93:f6:3b:b0:35:05:56:cb:1f:8a:f7:2e:c5:78:09:c8:d8:38: 65:8f:25:d3:4e:95:92:06:71:7a:1b:ad:27:90:65:1b:68:ef: 54:08:e9:e2:30:ad:0b:84:8a:99:f1:51:3a:9a:5a:3b:a6:a6: 98:d4:24:88:b0:b4:d8:b0:61:d6:b6:5f:d9:b9:ad:25:78:bc: 3c:b4:c7:42:c0:d5:91:fd:9a:f7:fa:ba:8f:20:7b:5c:be:29: 53:85:73:5e:d7:c8:ce:1d:fe:64:d2:5c:ad:c1:99:59:ec:62: de:6b:4a:15:1b:90:4e:95:a2:88:3e:ae:66:99:81:2e:c0:e8: 28:35:da:b7:b3:b9:98:7b:78:d9:e0:ce:34:ef:37:95:c8:94: a8:e1:18:e7:2a:87:f1:e7:68:79:f4:63:a5:ce:c5:a2:42:9d: fc:8e:9e:ed:30:f7:3e:77:e5:06:55:ae:19:b5:e6:62:d1:1b: 1f:75:53:5c:1a:7f:88:d7:85:b3:2b:f6:c5:70:1e:3c:87:19: e3:74:32:c7:d7:e9:d0:01:01:e4:93:2b:2f:bb:cf:da:09:4c: c2:d9:79:c6:83:50:86:aa:38:60:a7:3d:5b:2c:ab:be:f8:a0: 86:30:2f:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSV84S0uDNCH6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk OTliNDNhMTQtMTliZi00YzI1LWFkN2YtY2JmNjc0MGZkYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+yi4Gtw4wqcGmB3Xs6ZDIyk3u54YZUKbAgJ Tvl1SZi57odVlzu+uMcf9vADIomDfzHGSJfDkhASUcKmwFUH1IDyTB5nicR10+oO +f4jxZrKWY56zFOcbKhd9zQWj1I+xzj+p2WmjNz75672zb9wp4CndWnboW+6t+11 QymZvt53mnxmNSOIT6GtoRkqrvFgvgMEVoUu2dkkPG0/DlHQWAfxaaWaSt+ap1mw NneRQIlJWI1PrtapiZp1L9w2nVsew/7Yi1Klzt9to6WBnn1Anlf2rxwhufVKWGiL 5wG4GzUFqDjoTJX/3fhwiccjZ+wcKI7tMM4tOFQ945DzZlmiqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChTetbq6ISNxHD2sVE3V7fU+oYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWVhMjJiODMtMjMyZS0z OGIwLThjODEtNmNmOTRmMTAyMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgDrUi1QhFv06bBjcUoznO7IpP2O7A1BVbLH4r3LsV4CcjYOGWPJdNO lZIGcXobrSeQZRto71QI6eIwrQuEipnxUTqaWjumppjUJIiwtNiwYda2X9m5rSV4 vDy0x0LA1ZH9mvf6uo8ge1y+KVOFc17XyM4d/mTSXK3BmVnsYt5rShUbkE6Voog+ rmaZgS7A6Cg12rezuZh7eNngzjTvN5XIlKjhGOcqh/HnaHn0Y6XOxaJCnfyOnu0w 9z535QZVrhm15mLRGx91U1waf4jXhbMr9sVwHjyHGeN0MsfX6dABAeSTKy+7z9oJ TMLZecaDUIaqOGCnPVssq774oIYwL10= -----END CERTIFICATE-----Generated at Fri Apr 4 08:28:30 2025 by rpki-client