$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa File: 647f9435-6948-34d1-9a8e-d32e6d7948c2.roa (raw, json) Hash identifier: TOKEJv6rICSblI5jl62IdMlsUtlHEIDGwKw4V1U3Mxc= Subject key identifier: 9D:0F:8D:25:F5:8A:C8:D8:4F:2A:DC:52:89:55:91:57:81:DD:B4:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA1247449580DDFC73EB454 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.251.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:24:74:49:58:0d:df:c7:3e:b4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=ec00cc74-0ae2-45ea-9c37-e176436f8ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:75:89:97:ad:8e:5c:02:87:27:58:8a:c4: 93:e4:88:19:59:37:92:14:d8:f2:fc:61:ac:61:83: d5:e2:1e:9d:8e:1a:dc:85:6e:3a:f4:cf:14:99:91: e3:b5:ac:cc:3c:a2:77:78:14:08:6d:57:be:b9:a9: f6:29:3f:c2:05:db:53:b4:52:22:84:d6:34:d0:3d: 4b:a5:52:f6:9c:4b:c4:76:12:c3:2a:d8:36:e1:d0: ef:54:ac:2d:3a:3c:e7:07:b9:0d:02:f5:ec:73:aa: e0:51:9c:b1:f9:eb:ce:3d:86:e9:fe:ab:d8:e2:53: 3a:0e:d5:b0:67:36:ea:55:cc:ae:a8:b0:76:bf:fc: 9f:98:cc:a5:61:fd:f8:df:f2:ae:5e:14:4a:3d:87: 05:52:6f:b0:75:25:f9:4e:9a:ae:a4:80:db:8a:50: 6d:d2:f0:93:76:fb:e3:d1:c0:6f:35:d5:42:d1:da: 4e:f6:e5:e3:a0:8d:b5:de:fc:bb:67:ae:54:da:9d: 48:43:ff:19:dc:72:bd:fa:61:b0:0e:75:ff:b6:f5: 2e:f9:53:8e:ac:48:81:4b:b3:fd:cd:19:3d:d9:3d: d2:1c:90:9e:b4:c8:2d:92:c2:07:61:d5:ce:84:07: da:47:30:49:d9:92:97:fe:01:8b:91:f8:5e:87:a8: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0F:8D:25:F5:8A:C8:D8:4F:2A:DC:52:89:55:91:57:81:DD:B4:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:62:73:c8:55:39:ad:13:f8:ae:3f:a7:84:e3:f3:66:4e:8b: 6f:bc:90:5b:e6:7d:86:7d:d7:ff:d3:1c:46:b1:82:65:d4:eb: e4:a0:5e:33:9c:50:f1:4d:ee:88:78:fe:82:25:5e:71:c6:b8: b3:32:e3:70:af:91:84:14:9e:3b:f7:fb:11:12:2e:9f:c0:06: 06:08:13:54:3d:fc:cc:77:9a:46:79:90:e4:9f:5b:d8:2f:35: f9:43:95:14:41:e6:89:3a:5f:00:d9:0e:5a:26:57:20:72:61: 9f:11:81:78:72:82:55:36:77:9c:7e:31:b8:a5:b5:2b:c2:15: 48:e2:0c:83:7d:3a:f5:01:f5:e3:f3:c3:cb:c6:fa:c0:54:29: 41:f9:9a:48:3d:61:41:4f:a4:ed:ff:e7:fe:cb:4e:db:5e:4c: a2:13:d0:de:44:ff:dc:8d:ea:34:5f:58:8d:bd:3e:de:3b:21: 86:80:94:4f:9a:77:3b:9c:94:3a:50:e8:26:c0:60:db:c9:de: b2:0f:05:c4:ad:f8:80:49:25:9f:a1:54:26:17:8e:39:d9:f2: 36:4b:34:35:d0:4d:c6:96:dd:81:f1:59:dd:2a:71:2b:f3:cc: 50:14:42:81:97:56:88:67:28:ed:cf:7f:20:6a:9e:21:d0:1d: 00:3f:6b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSR0SVgN38c+tFQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZWMwMGNjNzQtMGFlMi00NWVhLTljMzctZTE3NjQzNmY4ZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkB1iZetjlwChydYisST5IgZWTeSFNjy/GGs YYPV4h6djhrchW469M8UmZHjtazMPKJ3eBQIbVe+uan2KT/CBdtTtFIihNY00D1L pVL2nEvEdhLDKtg24dDvVKwtOjznB7kNAvXsc6rgUZyx+evOPYbp/qvY4lM6DtWw ZzbqVcyuqLB2v/yfmMylYf343/KuXhRKPYcFUm+wdSX5TpqupIDbilBt0vCTdvvj 0cBvNdVC0dpO9uXjoI213vy7Z65U2p1IQ/8Z3HK9+mGwDnX/tvUu+VOOrEiBS7P9 zRk92T3SHJCetMgtksIHYdXOhAfaRzBJ2ZKX/gGLkfheh6j6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0PjSX1isjYTyrcUolVkVeB3bRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQ3Zjk0MzUtNjk0OC0z NGQxLTlhOGUtZDMyZTZkNzk0OGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxic8hVOa0T+K4/p4Tj82ZOi2+8kFvmfYZ91//THEaxgmXU6+SgXjOc UPFN7oh4/oIlXnHGuLMy43CvkYQUnjv3+xESLp/ABgYIE1Q9/Mx3mkZ5kOSfW9gv NflDlRRB5ok6XwDZDlomVyByYZ8RgXhyglU2d5x+MbiltSvCFUjiDIN9OvUB9ePz w8vG+sBUKUH5mkg9YUFPpO3/5/7LTtteTKIT0N5E/9yN6jRfWI29Pt47IYaAlE+a dzuclDpQ6CbAYNvJ3rIPBcSt+IBJJZ+hVCYXjjnZ8jZLNDXQTcaW3YHxWd0qcSvz zFAUQoGXVohnKO3PfyBqniHQHQA/a0k= -----END CERTIFICATE-----Generated at Fri Apr 4 08:37:32 2025 by rpki-client