$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64223dd2-111e-39ee-8c2e-c0348ec78c18.roa File: 64223dd2-111e-39ee-8c2e-c0348ec78c18.roa (raw, json) Hash identifier: OHct6xQlwR1SAInYNxsBQjdFrVpdc2Rp+wvp+ayveLg= Subject key identifier: 8F:44:B4:2A:6A:2C:A7:1F:3B:F1:3E:4F:56:B6:C8:71:B0:87:39:85 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5816ED384647E44AC786A10 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64223dd2-111e-39ee-8c2e-c0348ec78c18.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:6e:d3:84:64:7e:44:ac:78:6a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=823f8f39-e107-4bcb-9e10-760cd50b25d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:a9:db:1d:a1:6d:ed:78:2b:4f:1f:b8:04: 57:10:a6:31:e2:55:fd:80:48:12:67:5d:0c:0f:ca: 6c:06:27:05:92:40:15:7f:58:3e:75:52:4d:c1:2a: 96:8a:a1:8d:f5:1e:fd:16:71:ab:4c:1c:bf:2e:76: be:28:73:a1:0c:58:be:16:52:40:14:bf:4e:53:4b: 48:85:5e:45:8d:a7:00:63:fd:af:bf:2c:ed:29:de: 48:0f:e7:2c:48:a2:7a:ac:46:49:5c:ba:50:f5:48: 73:98:58:ad:35:f3:68:9c:00:56:21:41:08:67:57: 4e:68:ed:de:6e:dc:b5:24:87:9a:2e:4b:f3:09:2d: af:7a:97:a4:70:ad:97:a1:c0:69:a3:88:b2:7f:a1: 2e:30:d4:8d:c0:c9:ba:aa:fa:86:16:d3:13:31:11: 29:86:7f:d7:55:16:cf:a8:c1:ec:b7:8b:64:0a:a7: 4b:78:7b:d9:4e:83:7e:41:9e:c1:4a:1d:b2:77:3a: 68:1e:93:33:a0:fb:1b:46:de:fb:98:2b:2b:4d:84: 94:9f:6f:5e:90:67:b7:d9:68:f2:44:43:09:87:cd: 33:e1:7a:df:66:83:4e:82:51:9d:7f:c4:a7:0b:b5: 32:05:00:12:b5:b6:8c:58:d5:14:40:56:b6:12:35: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:44:B4:2A:6A:2C:A7:1F:3B:F1:3E:4F:56:B6:C8:71:B0:87:39:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64223dd2-111e-39ee-8c2e-c0348ec78c18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:25:8b:36:56:0c:ca:07:cc:be:55:07:cd:7d:e9:d3:15:ed: 09:bc:72:1d:83:84:73:c8:5a:e0:f1:20:d4:cb:de:a4:e5:4b: 71:51:2d:b4:02:4c:ff:8d:fd:2c:22:65:84:ec:53:ff:3f:10: 2f:b6:40:a4:2a:1d:95:d2:0f:ca:5d:53:8f:bb:f6:2a:cf:48: d9:24:7d:95:89:64:9c:ce:ff:83:77:02:1b:8d:26:53:a4:ae: f6:dc:f5:6e:65:5e:f1:2c:97:6a:f0:84:8c:e5:d6:4b:cd:4b: a9:62:f9:24:a7:ba:a6:8e:1a:77:d3:87:5b:f4:07:9d:ac:16: 11:a9:8c:7f:01:84:06:10:4e:82:df:7b:8f:d0:cf:71:9a:0e: 10:a2:e4:ef:f0:51:6d:98:5c:7e:eb:26:4c:60:31:26:1a:1d: 63:fe:0f:bc:ab:e0:49:66:80:a1:04:db:3a:02:d5:82:33:44: 55:4c:44:06:83:f2:44:a8:7f:ae:93:14:a7:49:b8:cf:78:0c: 0a:87:b6:38:06:99:0c:60:48:59:68:05:4c:3b:c3:80:ab:2a: 5a:84:56:89:10:c2:50:94:be:54:94:c1:f8:05:78:5d:1e:75: 1a:d4:4b:8f:61:86:20:b3:1e:1a:61:83:a6:7e:c8:61:16:77: 3a:8c:1b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgW7ThGR+RKx4ahAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODIzZjhmMzktZTEwNy00YmNiLTllMTAtNzYwY2Q1MGIyNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhep2x2hbe14K08fuARXEKYx4lX9gEgSZ10M D8psBicFkkAVf1g+dVJNwSqWiqGN9R79FnGrTBy/Lna+KHOhDFi+FlJAFL9OU0tI hV5FjacAY/2vvyztKd5ID+csSKJ6rEZJXLpQ9UhzmFitNfNonABWIUEIZ1dOaO3e bty1JIeaLkvzCS2vepekcK2XocBpo4iyf6EuMNSNwMm6qvqGFtMTMREphn/XVRbP qMHst4tkCqdLeHvZToN+QZ7BSh2ydzpoHpMzoPsbRt77mCsrTYSUn29ekGe32Wjy REMJh80z4XrfZoNOglGdf8SnC7UyBQAStbaMWNUUQFa2EjV9gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9EtCpqLKcfO/E+T1a2yHGwhzmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQyMjNkZDItMTExZS0z OWVlLThjMmUtYzAzNDhlYzc4YzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAglizZWDMoHzL5VB8196dMV7Qm8ch2DhHPIWuDxINTL3qTlS3FRLbQC TP+N/SwiZYTsU/8/EC+2QKQqHZXSD8pdU4+79irPSNkkfZWJZJzO/4N3AhuNJlOk rvbc9W5lXvEsl2rwhIzl1kvNS6li+SSnuqaOGnfTh1v0B52sFhGpjH8BhAYQToLf e4/Qz3GaDhCi5O/wUW2YXH7rJkxgMSYaHWP+D7yr4ElmgKEE2zoC1YIzRFVMRAaD 8kSof66TFKdJuM94DAqHtjgGmQxgSFloBUw7w4CrKlqEVokQwlCUvlSUwfgFeF0e dRrUS49hhiCzHhphg6Z+yGEWdzqMG/A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:46 2025 by rpki-client