$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7262320f-6e46-3404-ad33-fa92977a1392.roa File: 7262320f-6e46-3404-ad33-fa92977a1392.roa (raw, json) Hash identifier: iC2rcyNs2EZUonsn/UYwyzIe9NpPAKNSmte/gwZl9yY= Subject key identifier: A3:29:86:65:14:B1:44:92:64:80:96:F6:2B:63:D1:B0:8B:A4:C0:87 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12E77EBEAAAB6B0F72A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7262320f-6e46-3404-ad33-fa92977a1392.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2e:77:eb:ea:aa:b6:b0:f7:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=de51c462-d6e3-46f4-a11b-3930b8163815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ba:26:31:19:d4:b4:23:ca:ba:c8:e9:88:17: 25:8f:d5:bd:3c:bb:47:60:2e:78:34:44:24:49:6b: 6d:8d:e6:e2:80:e5:22:75:76:d3:ef:34:a4:1a:59: 96:3d:17:b6:80:0d:66:e5:da:61:32:0b:0f:3f:01: 62:d7:2f:fa:c9:43:b3:2d:d9:16:60:42:d4:86:75: c3:87:22:28:a7:c4:e0:32:e7:a9:48:b3:0c:55:d6: b4:eb:b1:a7:c1:cc:9c:3e:71:f0:7e:f9:d5:f4:f0: b1:6c:76:3a:43:7f:01:03:22:58:4d:07:48:e0:07: 41:91:c3:c7:31:11:fe:32:2b:3e:89:6e:7f:a2:6a: ec:0a:6c:c7:c7:45:96:f9:14:37:3d:66:94:36:64: c7:61:4e:c7:0b:db:07:45:be:40:c5:e3:42:48:a6: 79:67:fe:e9:bf:a4:ef:58:75:80:eb:aa:1e:cb:3c: e2:ae:d6:9d:62:83:bd:f7:3f:76:92:cc:dc:f9:63: e1:f2:d8:3e:b7:63:39:ad:d4:cd:4d:0a:15:3b:99: 8f:c3:a1:0a:28:d7:01:93:a1:94:51:0f:5a:47:2f: 58:2c:a5:f8:7d:7f:2a:89:4e:b7:21:2c:27:69:66: c7:2f:c0:46:32:3c:bc:0a:36:ba:49:77:4a:50:5e: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:29:86:65:14:B1:44:92:64:80:96:F6:2B:63:D1:B0:8B:A4:C0:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7262320f-6e46-3404-ad33-fa92977a1392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9f:dd:80:25:c9:22:34:68:5d:06:d0:00:d3:21:78:ff:7c: b2:ad:86:44:32:ea:41:1f:90:0c:8f:53:b5:3e:2a:3b:77:ac: 50:31:2a:e6:aa:59:a0:1a:db:e2:bd:c4:ef:4b:0e:38:1e:1b: fa:6c:1b:89:65:ff:42:db:29:09:a6:21:3e:3d:86:47:79:26: 82:2c:17:f9:8b:fd:d6:5e:b6:f0:d8:14:8c:99:15:64:71:e0: 03:0a:e2:11:60:1f:dc:f0:a6:e3:8d:1c:e0:8f:1a:f7:71:46: a0:f0:6e:e1:72:ce:56:eb:39:45:b8:31:fa:65:ee:69:cc:08: 54:bf:cf:da:21:32:31:72:d9:cf:4e:e4:a3:58:22:32:56:3e: a9:98:9f:f7:18:98:f7:3d:b8:40:9b:90:83:0d:b4:c0:76:f2: 9e:e9:b6:01:87:ea:f1:52:ba:93:a8:56:e3:6b:b0:b7:a6:22: 41:da:e8:3d:39:2b:9a:26:9a:a8:85:8d:27:d5:a1:c6:35:ed: 7a:c2:dc:48:57:63:3f:4b:b5:e2:c5:ce:03:90:4c:dd:b4:ac: 4a:e8:c0:1f:cc:fc:59:28:f5:db:61:29:6b:01:9d:8c:f6:d3: b7:58:ca:bd:5e:27:c6:63:44:0e:86:84:d6:4f:ce:42:41:05: c7:ea:67:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS536+qqtrD3KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZGU1MWM0NjItZDZlMy00NmY0LWExMWItMzkzMGI4MTYzODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLomMRnUtCPKusjpiBclj9W9PLtHYC54NEQk SWttjebigOUidXbT7zSkGlmWPRe2gA1m5dphMgsPPwFi1y/6yUOzLdkWYELUhnXD hyIop8TgMuepSLMMVda067GnwcycPnHwfvnV9PCxbHY6Q38BAyJYTQdI4AdBkcPH MRH+Mis+iW5/omrsCmzHx0WW+RQ3PWaUNmTHYU7HC9sHRb5AxeNCSKZ5Z/7pv6Tv WHWA66oeyzzirtadYoO99z92kszc+WPh8tg+t2M5rdTNTQoVO5mPw6EKKNcBk6GU UQ9aRy9YLKX4fX8qiU63ISwnaWbHL8BGMjy8Cja6SXdKUF7N8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMphmUUsUSSZICW9itj0bCLpMCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzI2MjMyMGYtNmU0Ni0z NDA0LWFkMzMtZmE5Mjk3N2ExMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKf3YAlySI0aF0G0ADTIXj/fLKthkQy6kEfkAyPU7U+Kjt3rFAxKuaq WaAa2+K9xO9LDjgeG/psG4ll/0LbKQmmIT49hkd5JoIsF/mL/dZetvDYFIyZFWRx 4AMK4hFgH9zwpuONHOCPGvdxRqDwbuFyzlbrOUW4Mfpl7mnMCFS/z9ohMjFy2c9O 5KNYIjJWPqmYn/cYmPc9uECbkIMNtMB28p7ptgGH6vFSupOoVuNrsLemIkHa6D05 K5ommqiFjSfVocY17XrC3EhXYz9LteLFzgOQTN20rErowB/M/Fko9dthKWsBnYz2 07dYyr1eJ8ZjRA6GhNZPzkJBBcfqZ4g= -----END CERTIFICATE-----Generated at Fri Mar 14 09:40:38 2025 by rpki-client