$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa File: 668ba1c5-3435-3ef3-a8d7-a353e6418069.roa (raw, json) Hash identifier: FcS07yieyYlUUblaJQQ+aevxzFJG5PXbo4nwtR2W2Zc= Subject key identifier: 4E:44:1F:7D:FB:E4:4F:F9:1E:D3:05:FA:11:97:AC:FB:07:A4:F3:84 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12B7CA529045313BD9080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.251.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2b:7c:a5:29:04:53:13:bd:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=47fafcf0-fd96-43b9-adea-c0e2f68a23c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6d:44:a7:ca:ff:ac:47:e7:95:c2:ea:39:6a: 21:9e:fa:82:70:dc:a5:45:bd:47:12:cc:1f:51:8c: 19:6a:ee:7e:f6:7d:6b:08:41:11:15:83:6d:ad:51: 81:ca:05:c6:5c:a2:83:31:36:19:d8:e9:31:45:a1: 1e:3d:26:8b:62:29:0d:96:f2:58:92:c9:07:c9:ea: 98:4f:ad:21:54:4c:a3:a0:42:54:52:6a:61:c3:ed: 66:07:66:51:08:a9:63:82:35:6f:dd:d7:0d:77:f6: ec:85:28:54:30:62:b4:fb:55:be:fe:2e:71:fa:70: 2c:c8:d0:8e:2c:43:c5:ad:78:c6:fa:9a:63:bf:a9: 41:e0:f3:26:2a:95:63:bd:77:2b:05:0d:60:d0:98: 59:4c:1c:76:0b:e5:9f:23:1f:16:d9:90:bc:a0:b7: dd:6a:e1:77:b1:b0:3b:43:97:90:eb:b5:9b:25:85: a5:fa:82:d6:20:cb:85:5e:95:12:b5:e4:bb:3c:05: 5f:fd:02:64:54:9e:3f:27:62:d7:cd:90:88:a4:97: e1:29:3e:95:ba:50:55:ac:00:cc:3f:38:5b:0b:98: 2d:d3:d8:76:79:d8:d5:1a:9f:f1:75:be:dc:9e:ae: 9b:56:9d:fa:34:41:6d:7f:e6:f1:64:a6:f5:27:e8: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:44:1F:7D:FB:E4:4F:F9:1E:D3:05:FA:11:97:AC:FB:07:A4:F3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:7b:d9:7a:17:f2:cc:ea:73:b4:c9:74:ad:a8:fe:1c:14:0f: ea:cd:b3:bf:de:df:d7:a9:2a:7f:b1:a4:fa:f1:c7:f9:f7:8c: 67:26:e9:b9:0a:17:f3:9d:7f:97:6c:9a:10:d0:a4:43:b7:0c: e2:a6:d5:2b:de:a2:c1:b8:79:71:dd:22:b2:d9:84:60:5a:c2: 68:35:b1:18:49:9e:20:53:21:87:f6:fe:70:13:6f:35:20:9c: b4:f6:a8:d6:16:69:cd:95:ca:38:76:8e:fa:65:43:49:65:45: 01:d9:95:1e:24:7f:8b:2c:e9:ca:6f:8f:5c:76:7f:69:52:82: b3:c3:c4:dc:a6:27:67:45:28:a8:4f:32:ff:d2:e5:63:74:77: 12:b8:de:e3:50:96:44:58:d0:f3:25:2c:c3:d8:61:52:88:2d: 75:14:c3:ed:23:4b:e2:bb:e0:23:c2:98:91:78:a2:7f:a9:3b: 93:dd:d8:96:6a:4f:83:51:d3:47:d9:86:e3:36:31:60:1f:e9: aa:5c:e6:4f:95:27:7e:6a:39:b3:fe:8f:61:8a:27:78:02:02: fa:96:f0:ee:ab:fc:28:9d:bf:50:0b:10:85:a5:62:17:79:82: d9:3f:94:0c:d6:b6:58:7b:89:f3:7a:f1:d1:ac:7c:9f:f6:b1: 0d:36:27:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSt8pSkEUxO9kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NDdmYWZjZjAtZmQ5Ni00M2I5LWFkZWEtYzBlMmY2OGEyM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk21Ep8r/rEfnlcLqOWohnvqCcNylRb1HEswf UYwZau5+9n1rCEERFYNtrVGBygXGXKKDMTYZ2OkxRaEePSaLYikNlvJYkskHyeqY T60hVEyjoEJUUmphw+1mB2ZRCKljgjVv3dcNd/bshShUMGK0+1W+/i5x+nAsyNCO LEPFrXjG+ppjv6lB4PMmKpVjvXcrBQ1g0JhZTBx2C+WfIx8W2ZC8oLfdauF3sbA7 Q5eQ67WbJYWl+oLWIMuFXpUSteS7PAVf/QJkVJ4/J2LXzZCIpJfhKT6VulBVrADM PzhbC5gt09h2edjVGp/xdb7cnq6bVp36NEFtf+bxZKb1J+j7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5EH3375E/5HtMF+hGXrPsHpPOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjY4YmExYzUtMzQzNS0z ZWYzLWE4ZDctYTM1M2U2NDE4MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR72XoX8szqc7TJdK2o/hwUD+rNs7/e39epKn+xpPrxx/n3jGcm6bkK F/Odf5dsmhDQpEO3DOKm1SveosG4eXHdIrLZhGBawmg1sRhJniBTIYf2/nATbzUg nLT2qNYWac2Vyjh2jvplQ0llRQHZlR4kf4ss6cpvj1x2f2lSgrPDxNymJ2dFKKhP Mv/S5WN0dxK43uNQlkRY0PMlLMPYYVKILXUUw+0jS+K74CPCmJF4on+pO5Pd2JZq T4NR00fZhuM2MWAf6apc5k+VJ35qObP+j2GKJ3gCAvqW8O6r/Cidv1ALEIWlYhd5 gtk/lAzWtlh7ifN68dGsfJ/2sQ02J+g= -----END CERTIFICATE-----Generated at Fri Apr 4 08:32:50 2025 by rpki-client