$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6297adc8-6cb6-3872-ac71-d678e23f793d.roa File: 6297adc8-6cb6-3872-ac71-d678e23f793d.roa (raw, json) Hash identifier: kzi5MyQAYsTwY9M4eWWVvc8/43yEg1ZWR7YITdZXroc= Subject key identifier: 5C:2A:75:FD:CF:C1:B4:A1:97:06:E2:E0:98:EC:AD:56:1D:15:AB:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848A565F8B87B9F2F9BCD302980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6297adc8-6cb6-3872-ac71-d678e23f793d.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 15169 IP address blocks: 142.251.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f8:b8:7b:9f:2f:9b:cd:30:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=e625995c-775a-4abc-8d4d-4ad26d05ecac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:42:fc:a6:14:c9:c7:df:71:04:0c:bd:cd:55: e0:bf:b4:aa:fa:7b:c4:c4:4e:27:98:84:48:e5:84: be:8c:4f:9c:14:cf:4b:70:0b:83:ff:e3:7c:59:54: af:95:ac:e5:a1:08:2f:76:d4:bb:89:5d:73:41:3b: 7b:c1:86:03:6a:8e:3b:15:94:c7:dc:da:3b:70:82: 25:f3:7f:8a:ec:b0:a5:b5:e3:03:14:92:be:09:aa: df:b5:15:35:74:8d:b0:a5:93:4e:9e:4e:c3:0a:a5: 8b:8d:ac:95:dd:97:51:01:b0:8f:87:da:e3:c7:dd: 7a:00:29:09:42:73:f9:dc:35:b0:b9:0c:ba:3f:f3: f1:ac:f6:5b:15:09:63:13:f8:32:80:6b:98:65:16: b5:98:c6:bf:05:27:0a:d7:52:04:74:81:31:40:23: d3:9b:67:ce:e6:09:51:3b:52:b5:e7:0a:98:8d:32: 1a:ce:fb:21:4a:1a:c7:01:d5:b8:e6:4a:30:f1:e5: 5c:6b:24:32:7d:0f:a4:8d:d6:7e:a6:5d:13:16:f1: 0c:00:86:cd:fd:f0:be:6d:2f:30:fb:4a:5c:e5:a5: 72:dc:26:97:b6:53:3b:fe:af:ba:4c:fd:19:d8:38: bf:4f:8e:50:0b:2b:27:9c:d3:ec:34:06:e2:c9:e7: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2A:75:FD:CF:C1:B4:A1:97:06:E2:E0:98:EC:AD:56:1D:15:AB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6297adc8-6cb6-3872-ac71-d678e23f793d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b0:1a:a9:4d:91:ac:c6:2a:8c:25:cd:b9:5c:7b:89:a4:ec: 2b:9b:98:24:97:9e:3b:cd:e5:3f:a1:ba:06:7c:e4:5c:54:7f: 10:75:b9:e2:94:ba:a5:29:35:28:ca:82:5e:ea:74:18:66:bf: 28:ae:b6:5b:72:ff:61:25:2e:37:de:59:6e:17:cd:85:0e:51: 81:f8:a0:53:27:5f:8d:5d:43:35:7d:c4:7a:63:01:8a:b1:94: 2e:7c:a3:5b:fc:af:6e:bf:3d:b7:49:d9:79:da:43:0d:6f:39: e6:e6:04:c1:cf:7f:ce:92:92:e8:fe:87:aa:3e:97:64:4e:75: 75:10:7d:8d:cc:7a:74:e9:86:99:b9:5a:41:90:98:cb:20:07: 54:43:99:e6:cd:bc:dd:31:56:2c:c1:80:99:31:a3:b0:d8:6d: 1f:52:69:1e:bc:26:6b:f7:4f:ea:fe:0f:ea:24:55:85:2b:6d: 76:f5:d0:f2:21:be:12:b3:d8:2f:6a:ed:7d:2d:27:b3:2b:02: ee:5b:d4:67:29:ab:80:ed:27:a8:ce:a4:16:cf:2e:55:7a:45: 70:24:dd:95:86:02:b9:a8:01:32:48:98:c7:a5:52:61:5b:be: 9c:d5:0b:7d:fd:84:2c:69:da:b4:b7:b2:76:c8:02:b4:e0:0d: f4:a4:f9:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEilZfi4e58vm80wKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTYyNTk5NWMtNzc1YS00YWJjLThkNGQtNGFkMjZkMDVlY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0L8phTJx99xBAy9zVXgv7Sq+nvExE4nmIRI 5YS+jE+cFM9LcAuD/+N8WVSvlazloQgvdtS7iV1zQTt7wYYDao47FZTH3No7cIIl 83+K7LClteMDFJK+CarftRU1dI2wpZNOnk7DCqWLjayV3ZdRAbCPh9rjx916ACkJ QnP53DWwuQy6P/PxrPZbFQljE/gygGuYZRa1mMa/BScK11IEdIExQCPTm2fO5glR O1K15wqYjTIazvshShrHAdW45kow8eVcayQyfQ+kjdZ+pl0TFvEMAIbN/fC+bS8w +0pc5aVy3CaXtlM7/q+6TP0Z2Di/T45QCysnnNPsNAbiyeeI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwqdf3PwbShlwbi4JjsrVYdFavXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjI5N2FkYzgtNmNiNi0z ODcyLWFjNzEtZDY3OGUyM2Y3OTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvvTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCwGqlNkazGKowlzblce4mk7CubmCSXnjvN5T+hugZ85FxUfxB1ueKU uqUpNSjKgl7qdBhmvyiutlty/2ElLjfeWW4XzYUOUYH4oFMnX41dQzV9xHpjAYqx lC58o1v8r26/PbdJ2XnaQw1vOebmBMHPf86Skuj+h6o+l2ROdXUQfY3MenTphpm5 WkGQmMsgB1RDmebNvN0xVizBgJkxo7DYbR9SaR68Jmv3T+r+D+okVYUrbXb10PIh vhKz2C9q7X0tJ7MrAu5b1Gcpq4DtJ6jOpBbPLlV6RXAk3ZWGArmoATJImMelUmFb vpzVC339hCxp2rS3snbIArTgDfSk+bk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:10 2025 by rpki-client