$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/615a8809-0cf9-3956-a9b2-054a1f89aa01.roa File: 615a8809-0cf9-3956-a9b2-054a1f89aa01.roa (raw, json) Hash identifier: +MN0cxXrIVecBGO2EzbgH2E4wTZIjFcLKyG71FBeBt4= Subject key identifier: 4D:27:A1:FE:10:0D:B3:4F:44:30:2F:10:A9:CC:29:D3:F1:03:CF:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818153557203DD05981440 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/615a8809-0cf9-3956-a9b2-054a1f89aa01.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:81:53:55:72:03:dd:05:98:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4855b467-5a90-4fd8-b71c-a72907dbe104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:4a:28:46:e9:39:de:81:c4:cb:31:bd:40: cc:cd:4d:be:e7:cd:6a:4e:98:08:ff:17:8c:ac:ae: 53:7f:c5:f7:34:26:2e:d1:73:bf:df:ba:41:35:f4: 8a:23:9e:e0:96:72:ee:4b:7e:75:db:65:5d:05:3a: f8:5c:be:94:3a:3b:cc:c7:25:fc:6c:81:10:d7:6d: e4:3a:33:37:6f:0b:93:07:28:af:0d:d4:99:1c:2c: 94:03:10:af:08:1e:ba:16:78:47:18:e2:fb:35:33: 02:cc:a8:00:18:3e:2e:61:cb:a8:9a:81:75:e1:3d: fc:b2:83:8f:9e:d6:d7:18:24:8b:53:35:35:bc:1e: 97:cb:13:d3:cf:07:0f:3b:70:51:c3:e1:36:56:61: ba:b3:50:86:13:ef:17:3a:96:db:0b:5e:8c:0d:ec: b0:ef:27:97:a2:e3:9f:6a:b1:d3:9c:a1:8c:b5:47: 41:76:40:bf:48:53:dc:27:8c:fc:d2:73:44:b5:c7: fd:61:84:92:5a:71:ec:42:39:57:c2:c6:6e:33:00: b4:b1:de:f1:ad:f0:9a:1e:74:b5:3d:e8:10:a9:e0: b9:ba:bc:d1:fd:84:4e:59:99:76:d2:dc:74:1e:55: 55:be:c6:b7:c2:c0:8e:61:38:79:0f:56:07:34:57: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:27:A1:FE:10:0D:B3:4F:44:30:2F:10:A9:CC:29:D3:F1:03:CF:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/615a8809-0cf9-3956-a9b2-054a1f89aa01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:61:d5:69:8e:a0:6e:0b:c3:cb:2c:2c:83:58:b7:4c:e5:69: e8:a4:9a:fc:6d:50:30:af:20:b3:ca:57:89:b6:4b:44:9e:13: 9f:b7:63:86:44:ce:94:c2:ad:e4:ab:b8:67:8a:17:58:fa:34: ba:40:15:5e:51:a7:27:4c:1c:a5:f9:fd:fc:a4:63:55:77:17: 47:be:52:91:b3:b8:8e:80:6c:ea:30:b9:04:6f:a6:14:d3:94: b0:1d:7f:11:36:7e:59:55:b2:5b:a8:4c:8b:6e:24:c9:d0:a9: 54:7f:4e:2c:c1:55:1f:a3:bf:31:e4:26:ea:78:05:9f:fc:cf: 1a:1c:0f:de:47:e4:e3:f3:dc:41:d2:54:3e:df:4c:2a:c7:7f: 0b:10:a8:ca:84:d4:86:a6:28:ae:a9:ac:8c:9a:5f:55:e3:fe: 03:13:2f:18:55:0b:33:3b:d5:47:28:56:bb:c6:dd:ec:c0:3a: 3e:b7:c6:5d:c5:b6:6e:e7:41:cc:93:49:3e:87:c5:ba:44:f5: d5:a2:f1:c4:46:46:7f:5b:61:2c:02:1e:d5:51:54:7d:7c:4b: cd:f8:d3:89:72:5c:c0:55:18:93:c7:1b:b1:a0:25:01:a6:dd: bd:2e:dc:c7:df:de:c8:aa:0b:b0:98:fd:20:29:ba:6e:46:ad: 7a:90:68:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYFTVXID3QWYFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDg1NWI0NjctNWE5MC00ZmQ4LWI3MWMtYTcyOTA3ZGJlMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9hKKEbpOd6BxMsxvUDMzU2+581qTpgI/xeM rK5Tf8X3NCYu0XO/37pBNfSKI57glnLuS35122VdBTr4XL6UOjvMxyX8bIEQ123k OjM3bwuTByivDdSZHCyUAxCvCB66FnhHGOL7NTMCzKgAGD4uYcuomoF14T38soOP ntbXGCSLUzU1vB6XyxPTzwcPO3BRw+E2VmG6s1CGE+8XOpbbC16MDeyw7yeXouOf arHTnKGMtUdBdkC/SFPcJ4z80nNEtcf9YYSSWnHsQjlXwsZuMwC0sd7xrfCaHnS1 PegQqeC5urzR/YROWZl20tx0HlVVvsa3wsCOYTh5D1YHNFc6RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0nof4QDbNPRDAvEKnMKdPxA89+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjE1YTg4MDktMGNmOS0z OTU2LWE5YjItMDU0YTFmODlhYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvq9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlh1WmOoG4Lw8ssLINYt0zlaeikmvxtUDCvILPKV4m2S0SeE5+3Y4ZE zpTCreSruGeKF1j6NLpAFV5RpydMHKX5/fykY1V3F0e+UpGzuI6AbOowuQRvphTT lLAdfxE2fllVsluoTItuJMnQqVR/TizBVR+jvzHkJup4BZ/8zxocD95H5OPz3EHS VD7fTCrHfwsQqMqE1IamKK6prIyaX1Xj/gMTLxhVCzM71UcoVrvG3ezAOj63xl3F tm7nQcyTST6HxbpE9dWi8cRGRn9bYSwCHtVRVH18S83404lyXMBVGJPHG7GgJQGm 3b0u3Mff3siqC7CY/SApum5GrXqQaGA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:30 2025 by rpki-client