$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa File: 6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa (raw, json) Hash identifier: gD3izEqfmjtbuByKWGrAI+y89qtjVVoOd42FYi9JgNU= Subject key identifier: CD:8B:95:89:AD:19:DC:97:6E:57:AD:E2:C8:7C:B1:9A:08:55:D7:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58186F9AFF7DE27146ACD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:86:f9:af:f7:de:27:14:6a:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=83e90c5a-2eb4-4f96-97c0-41aff1c905dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:9b:ac:f3:42:db:bf:02:fe:dc:16:4b:16: 91:e1:ad:ea:60:3e:7c:b6:61:bc:13:b2:df:83:15: a4:97:59:ec:c7:59:89:28:06:26:8b:0c:19:db:b9: f4:9d:48:cf:69:ee:a7:42:f1:a2:8b:21:5e:20:1a: 27:ba:29:ba:3f:10:c0:c2:4f:90:0a:6e:40:ed:db: 74:3f:da:80:65:24:16:89:95:81:8f:38:92:2f:4e: 75:29:15:8d:8e:10:e0:9b:a3:cb:3d:fa:02:ee:9d: 17:d4:58:a4:f4:04:60:35:03:9b:ed:0d:4c:a9:70: c5:9a:cb:55:5b:8c:7b:4b:1f:ae:f1:8e:d1:b7:12: 8b:29:ad:1f:9c:55:db:c4:cb:b2:9e:72:d0:fa:bb: f0:42:a6:1e:b3:e8:94:6b:3a:84:1b:14:38:b1:e9: 7d:0c:23:10:a5:75:fc:a6:46:22:49:37:ce:3d:61: 53:59:8c:a5:42:82:47:db:cd:f8:64:8f:ec:30:05: 28:e3:3f:73:13:7b:d1:67:68:07:8f:e2:55:02:d6: 74:42:46:fb:83:5f:58:ce:b9:4a:ed:37:c1:f4:2d: c3:10:1e:5f:0a:89:bf:35:3d:e7:ed:92:54:70:5e: 83:39:7d:94:43:77:12:f0:71:a5:12:52:a0:f3:9a: 34:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8B:95:89:AD:19:DC:97:6E:57:AD:E2:C8:7C:B1:9A:08:55:D7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ba:2c:5f:92:ea:67:95:97:ba:49:a3:b2:0a:b1:23:3b:8e: 97:1f:51:5b:1a:c8:b6:65:4a:78:7f:de:17:6d:f7:a1:22:4f: 28:98:b1:27:d3:43:c8:57:86:a1:33:07:17:42:9a:4b:69:44: 35:7b:97:c2:53:ce:f8:28:3c:c8:06:fb:72:39:e3:59:89:c9: 23:ef:6b:32:09:0e:b9:6e:38:d8:20:38:01:69:85:e7:c4:bc: 85:46:1e:46:cd:fc:5e:69:11:cd:32:0d:c8:bd:9a:c0:36:f6: c9:9d:ab:34:4f:91:8f:06:a0:84:ac:45:d1:d3:50:de:1e:17: 22:cc:5c:d6:43:72:83:16:c9:04:2d:69:ff:e8:c2:6e:f2:c6: 3f:9e:d9:1c:29:58:be:d1:0b:32:4e:01:10:cc:61:5f:f7:6e: a9:ae:ca:50:44:ad:68:ef:44:33:e6:04:6b:6b:a7:3a:a6:8d: 1c:99:03:8e:42:f0:fd:d7:b5:07:2d:55:a4:9b:c4:10:b7:54: 3f:35:fb:14:97:1e:9f:7c:a5:81:4a:b1:20:bd:67:87:3b:5f: 8a:43:c0:48:b0:81:5c:46:07:e8:5e:dd:f8:16:50:e3:fd:2c: 62:9d:a0:34:98:6d:36:1d:83:08:56:d0:fb:f3:22:49:3b:75: 3a:91:e8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYb5r/feJxRqzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODNlOTBjNWEtMmViNC00Zjk2LTk3YzAtNDFhZmYxYzkwNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidmbrPNC278C/twWSxaR4a3qYD58tmG8E7Lf gxWkl1nsx1mJKAYmiwwZ27n0nUjPae6nQvGiiyFeIBonuim6PxDAwk+QCm5A7dt0 P9qAZSQWiZWBjziSL051KRWNjhDgm6PLPfoC7p0X1Fik9ARgNQOb7Q1MqXDFmstV W4x7Sx+u8Y7RtxKLKa0fnFXbxMuynnLQ+rvwQqYes+iUazqEGxQ4sel9DCMQpXX8 pkYiSTfOPWFTWYylQoJH2834ZI/sMAUo4z9zE3vRZ2gHj+JVAtZ0Qkb7g19YzrlK 7TfB9C3DEB5fCom/NT3n7ZJUcF6DOX2UQ3cS8HGlElKg85o0ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2LlYmtGdyXblet4sh8sZoIVddWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmM1ZWE5OWUtYTA5Ny0z NTNiLWExZTItZmFlZjQ1YzRlMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu6LF+S6meVl7pJo7IKsSM7jpcfUVsayLZlSnh/3hdt96EiTyiYsSfT Q8hXhqEzBxdCmktpRDV7l8JTzvgoPMgG+3I541mJySPvazIJDrluONggOAFphefE vIVGHkbN/F5pEc0yDci9msA29smdqzRPkY8GoISsRdHTUN4eFyLMXNZDcoMWyQQt af/owm7yxj+e2RwpWL7RCzJOARDMYV/3bqmuylBErWjvRDPmBGtrpzqmjRyZA45C 8P3XtQctVaSbxBC3VD81+xSXHp98pYFKsSC9Z4c7X4pDwEiwgVxGB+he3fgWUOP9 LGKdoDSYbTYdgwhW0PvzIkk7dTqR6OU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:12 2025 by rpki-client