$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/632e83d4-db17-3c73-85ee-63d0467d6c6e.roa File: 632e83d4-db17-3c73-85ee-63d0467d6c6e.roa (raw, json) Hash identifier: LX11oRXjSRo0TaL9Vbbvim6aUHEXYyN2YxEMzWukXpI= Subject key identifier: F4:25:3F:EC:64:55:5F:2E:4A:8F:04:C0:99:4C:D5:F2:0C:88:C3:1F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58204F453549750AC009B20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/632e83d4-db17-3c73-85ee-63d0467d6c6e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:04:f4:53:54:97:50:ac:00:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c95ff550-66e9-40e3-b9d7-9f28d5d569ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:68:ac:a3:a4:2a:c7:85:0a:8b:a5:71:f3: 57:be:bd:4c:67:96:de:8f:7d:7b:9e:72:de:e9:2b: 3e:cf:ed:e7:79:af:b2:dc:4e:e7:6a:1c:dd:1b:01: 4f:d0:00:58:c4:f5:9f:20:5f:63:1a:78:c2:db:fd: ad:67:46:9d:ae:01:b3:65:a4:95:89:92:54:f8:10: b5:8d:67:b1:1d:6e:cb:62:39:a8:b3:4e:eb:78:a1: 64:00:48:38:a1:97:00:4c:41:f5:72:dd:16:c4:12: 2b:46:05:6a:3a:50:51:9a:5b:a1:23:65:5d:8c:86: 92:62:de:79:64:23:b5:a4:3d:f2:63:34:b7:ed:4c: cb:ca:47:3c:5d:15:63:b1:1e:32:de:7d:48:f8:75: a1:ab:a9:04:ea:02:9a:6a:fd:78:22:30:72:32:24: b7:ed:23:17:20:74:ad:91:8b:5a:9d:ca:67:f9:44: 8c:62:b3:a1:9a:72:b8:a5:9b:54:06:7e:ef:16:a4: f2:4d:3a:80:a0:b0:db:35:56:38:aa:ef:f7:19:db: 0b:f0:18:77:e0:af:0d:12:27:e2:fd:d7:6f:be:0d: e1:11:40:a8:a2:47:f0:a2:c0:0e:c7:3a:ce:75:e8: b0:2e:f5:8f:88:8c:17:97:8b:e0:e3:5d:af:7c:87: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:25:3F:EC:64:55:5F:2E:4A:8F:04:C0:99:4C:D5:F2:0C:88:C3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/632e83d4-db17-3c73-85ee-63d0467d6c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:eb:41:65:55:e9:54:59:2e:11:59:fd:00:84:95:75:9e:71: 51:f8:4b:cb:d3:cd:6a:0f:1a:2c:38:01:c5:ae:ab:51:f0:ad: b8:90:bf:17:f7:ba:14:dc:34:24:02:68:10:58:de:6e:77:ce: 64:81:7e:e3:01:2f:7f:8c:a5:30:0e:aa:90:a3:af:11:da:13: 3d:76:1d:32:e0:be:d9:7f:44:e6:c9:7d:ad:de:c3:9e:a2:b4: c1:88:81:93:5e:5d:83:fd:7a:54:3b:fc:b0:bc:dd:05:89:18: 12:d3:89:61:f8:63:7b:81:ec:37:9b:5a:f0:43:f0:f2:a1:21: df:ae:2f:34:05:55:7b:60:5e:e3:a7:45:5b:04:b6:9d:70:e4: 0e:29:97:a0:37:bd:89:92:84:c3:c1:9c:46:c5:a2:22:37:54: 40:86:82:68:e3:50:eb:54:e5:d9:b0:20:f6:20:1e:a2:a9:e6: 15:b9:a8:b6:17:02:73:30:99:08:d6:03:19:2e:08:4a:7e:c5: ac:ae:8d:3a:b3:e0:0f:eb:51:9e:af:80:c1:3f:a9:42:54:a4: d8:f0:fa:d1:a8:67:bb:7c:da:df:db:c0:bf:89:53:a5:26:ed: 37:08:e5:9d:02:e6:19:dc:99:2c:25:9f:b3:de:d6:c1:63:85: 9f:4d:57:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggT0U1SXUKwAmyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Yzk1ZmY1NTAtNjZlOS00MGUzLWI5ZDctOWYyOGQ1ZDU2OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppZorKOkKseFCoulcfNXvr1MZ5bej317nnLe 6Ss+z+3nea+y3E7nahzdGwFP0ABYxPWfIF9jGnjC2/2tZ0adrgGzZaSViZJU+BC1 jWexHW7LYjmos07reKFkAEg4oZcATEH1ct0WxBIrRgVqOlBRmluhI2VdjIaSYt55 ZCO1pD3yYzS37UzLykc8XRVjsR4y3n1I+HWhq6kE6gKaav14IjByMiS37SMXIHSt kYtancpn+USMYrOhmnK4pZtUBn7vFqTyTTqAoLDbNVY4qu/3GdsL8Bh34K8NEifi /ddvvg3hEUCookfwosAOxzrOdeiwLvWPiIwXl4vg412vfIfHPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQlP+xkVV8uSo8EwJlM1fIMiMMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjMyZTgzZDQtZGIxNy0z YzczLTg1ZWUtNjNkMDQ2N2Q2YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTrQWVV6VRZLhFZ/QCElXWecVH4S8vTzWoPGiw4AcWuq1HwrbiQvxf3 uhTcNCQCaBBY3m53zmSBfuMBL3+MpTAOqpCjrxHaEz12HTLgvtl/RObJfa3ew56i tMGIgZNeXYP9elQ7/LC83QWJGBLTiWH4Y3uB7DebWvBD8PKhId+uLzQFVXtgXuOn RVsEtp1w5A4pl6A3vYmShMPBnEbFoiI3VECGgmjjUOtU5dmwIPYgHqKp5hW5qLYX AnMwmQjWAxkuCEp+xayujTqz4A/rUZ6vgME/qUJUpNjw+tGoZ7t82t/bwL+JU6Um 7TcI5Z0C5hncmSwln7Pe1sFjhZ9NV1s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:27 2025 by rpki-client