$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68265e2e-e1c8-388b-8fc0-d6401745c121.roa File: 68265e2e-e1c8-388b-8fc0-d6401745c121.roa (raw, json) Hash identifier: y8NW0ZrGRdA5XVsEkyhhwZazOQXwEkXhNOBrTEpzOhg= Subject key identifier: 99:C6:9A:E1:71:C1:13:C8:98:1C:75:8A:24:C6:DD:1F:1D:7F:DE:0A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58185569B7906D5D520BE40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68265e2e-e1c8-388b-8fc0-d6401745c121.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:85:56:9b:79:06:d5:d5:20:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0451cf1a-96aa-444a-81f3-dccc8044d70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c6:dd:f3:7d:97:ff:cf:95:a8:93:87:35:7f: d5:3e:d5:a5:f2:a0:c7:7a:39:92:79:a5:31:c0:87: 5c:9e:c5:e2:64:64:48:da:84:38:a0:7a:3b:c9:a7: e2:15:05:b3:05:4f:64:c0:67:27:41:42:bf:16:1c: 90:92:08:16:e3:73:e4:0d:5b:40:39:27:b9:cc:b3: 65:00:84:3e:70:1e:ab:5d:6b:c1:f7:3d:98:d5:eb: d8:26:cd:91:9b:01:47:8a:15:46:93:bc:cd:31:df: df:1a:9a:b6:d2:4d:bf:fa:f4:54:06:85:22:43:c8: ef:22:f9:e9:66:d0:0f:76:12:58:45:68:dd:c3:36: 13:ed:5c:7a:b3:d3:3f:61:b8:2d:02:0d:c7:97:53: 3d:00:33:ca:e9:66:77:a4:88:45:26:e2:19:8d:ec: d7:74:08:2e:70:ae:53:0e:a0:18:85:45:25:36:90: de:ff:17:ca:32:ae:0d:3d:78:c8:4a:6b:c9:95:5a: ea:fc:9d:d5:54:ea:c2:82:fd:fb:31:bb:3e:81:91: c9:a6:74:fb:71:a7:b7:f3:41:99:08:ca:18:83:6c: 5b:8d:ae:ac:22:b7:61:fe:1c:9d:d0:9d:08:cd:25: f2:ff:2c:64:d1:30:19:4d:11:3d:a0:1e:88:3e:64: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:9A:E1:71:C1:13:C8:98:1C:75:8A:24:C6:DD:1F:1D:7F:DE:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68265e2e-e1c8-388b-8fc0-d6401745c121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:07:9f:b4:c4:df:db:7f:6d:59:62:32:1c:fc:db:c5:11:34: 03:08:ac:4c:1a:e6:73:05:0b:d6:06:84:e3:fb:51:33:1f:24: 57:11:9f:76:89:86:00:3b:a0:69:d4:0a:cc:0f:82:1b:d5:3f: d3:27:06:38:8a:3e:37:dd:b2:d5:eb:2d:71:d7:53:f2:24:fe: ad:a0:4b:89:cc:07:a0:10:1b:93:93:4c:23:82:7c:6d:c0:bf: c8:1e:7f:40:a4:3d:ac:61:30:d1:da:35:7e:8b:72:1e:0c:24: 12:c2:0e:31:0d:ee:55:61:f6:a8:93:af:72:56:72:42:1f:e1: 17:0a:14:1f:86:5a:50:ac:43:5c:ee:38:57:0d:cb:dd:d9:d4: 5e:ac:cd:c3:4e:7e:e8:c1:65:35:46:b7:38:90:48:9a:94:08: 3f:bc:28:07:93:59:5e:ee:c5:f7:5d:82:6c:bb:7e:73:1b:96: ba:c7:e8:00:f6:77:b6:9f:d8:bb:93:61:df:98:68:a8:c8:fc: 29:d7:69:86:e1:fc:01:0c:4e:4f:0e:f3:aa:b1:dc:90:70:e0: c4:7c:af:82:7a:24:76:5a:16:cd:9f:bc:a6:a8:cc:a3:b1:95: bc:c8:60:b3:c9:9e:d0:85:7a:8b:ba:11:82:fa:41:1f:de:10: 0e:27:99:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYVWm3kG1dUgvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDQ1MWNmMWEtOTZhYS00NDRhLTgxZjMtZGNjYzgwNDRkNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisbd832X/8+VqJOHNX/VPtWl8qDHejmSeaUx wIdcnsXiZGRI2oQ4oHo7yafiFQWzBU9kwGcnQUK/FhyQkggW43PkDVtAOSe5zLNl AIQ+cB6rXWvB9z2Y1evYJs2RmwFHihVGk7zNMd/fGpq20k2/+vRUBoUiQ8jvIvnp ZtAPdhJYRWjdwzYT7Vx6s9M/YbgtAg3Hl1M9ADPK6WZ3pIhFJuIZjezXdAgucK5T DqAYhUUlNpDe/xfKMq4NPXjISmvJlVrq/J3VVOrCgv37Mbs+gZHJpnT7cae380GZ CMoYg2xbja6sIrdh/hyd0J0IzSXy/yxk0TAZTRE9oB6IPmSRcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnGmuFxwRPImBx1iiTG3R8df94KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjgyNjVlMmUtZTFjOC0z ODhiLThmYzAtZDY0MDE3NDVjMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvujMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8Hn7TE39t/bVliMhz828URNAMIrEwa5nMFC9YGhOP7UTMfJFcRn3aJ hgA7oGnUCswPghvVP9MnBjiKPjfdstXrLXHXU/Ik/q2gS4nMB6AQG5OTTCOCfG3A v8gef0CkPaxhMNHaNX6Lch4MJBLCDjEN7lVh9qiTr3JWckIf4RcKFB+GWlCsQ1zu OFcNy93Z1F6szcNOfujBZTVGtziQSJqUCD+8KAeTWV7uxfddgmy7fnMblrrH6AD2 d7af2LuTYd+YaKjI/CnXaYbh/AEMTk8O86qx3JBw4MR8r4J6JHZaFs2fvKaozKOx lbzIYLPJntCFeou6EYL6QR/eEA4nmR4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:40 2025 by rpki-client