$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72ab5f63-96ee-37dd-9115-b697ca33fbca.roa File: 72ab5f63-96ee-37dd-9115-b697ca33fbca.roa (raw, json) Hash identifier: 0/N9IvUZEWFRjYsgrT+my+QF2MXaWvva0gBUzxYB8C4= Subject key identifier: 53:82:BD:DF:19:9E:EA:60:10:1F:0E:39:A9:DE:C9:2C:F8:42:EA:39 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58173BFECA9060CD0476D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72ab5f63-96ee-37dd-9115-b697ca33fbca.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:73:bf:ec:a9:06:0c:d0:47:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a8fa3935-c0f0-4048-8183-3bcd5a0bb2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:e2:fd:47:88:7f:4a:2a:59:dd:34:78:4e: 36:5f:bc:48:c2:44:56:9c:69:76:e1:12:a2:34:90: ef:c0:ef:cc:ff:37:f7:57:b4:18:5c:aa:e0:36:56: 26:1e:07:0b:a7:ba:71:8d:61:ae:8e:d3:f4:23:ec: b1:d5:1e:af:b9:8d:64:7a:d7:8e:e5:58:bf:b7:34: 38:45:69:7b:4f:2c:c8:ef:e7:b2:df:5a:2d:89:e4: 47:32:c3:13:68:28:33:cc:6e:b2:b4:ba:3f:57:da: d1:d4:64:c4:4a:9f:64:81:f0:fe:11:e1:b8:48:a9: 4e:1c:a1:6b:92:01:e8:d8:b8:a9:fe:99:57:ae:fb: 14:4e:4b:27:02:64:6e:9d:a9:6b:a4:68:0b:62:aa: 25:46:22:58:a4:42:7e:4d:f6:23:85:ec:51:e3:90: af:26:6f:b2:69:3a:a2:03:f2:19:1c:d5:3d:44:67: 96:01:bd:e4:35:bc:a2:ec:3c:87:7b:a3:eb:c6:41: 0e:96:64:d4:f2:c0:fa:fa:fa:40:04:8e:89:c1:f1: 11:1c:3b:18:85:dc:ae:a6:09:10:8e:5c:9d:d9:ec: ae:b4:a9:75:83:fe:16:6b:d8:b3:a3:3f:8b:f4:df: e4:f8:88:a6:94:fb:5d:62:07:26:c3:ff:84:06:cb: 7d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:82:BD:DF:19:9E:EA:60:10:1F:0E:39:A9:DE:C9:2C:F8:42:EA:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72ab5f63-96ee-37dd-9115-b697ca33fbca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e9:5a:fa:2a:27:08:42:68:4d:30:5b:67:79:39:2f:07:3c: b4:ea:b2:1f:31:2a:c1:71:80:96:34:6c:ff:e1:29:06:fe:38: ad:0d:72:19:7b:ce:14:35:99:bf:5d:9b:93:ca:0e:4b:4f:54: 94:fc:f5:12:f9:c4:aa:9e:0d:c2:94:1d:44:f2:ad:77:fa:14: dc:2c:ff:9c:66:b7:28:31:8b:b4:45:52:66:5f:03:d5:69:18: de:a5:18:21:84:8c:92:a2:41:a0:cd:24:5c:67:7f:af:a3:55: 45:e6:eb:87:f1:13:6a:ae:0e:8f:9b:a8:19:9e:14:44:7e:71: 00:86:ae:3f:a9:f4:20:be:46:79:3e:b1:97:b7:2a:22:e5:6e: 99:ac:e2:48:61:1e:a3:84:1b:94:cb:86:12:a2:34:42:d5:38: 49:29:d3:23:1e:f2:0c:84:41:49:2e:10:ef:62:f2:47:1b:ca: b3:4a:17:84:f8:a4:53:30:11:53:c7:29:21:9f:83:70:ac:2c: a6:83:eb:10:ef:26:7f:b1:41:4e:b7:ef:53:55:e4:bd:4c:77: 44:0c:f5:ad:f9:0e:26:dd:52:69:32:09:9b:04:91:5a:aa:21: 0c:94:f0:d8:ab:bd:39:2a:16:e5:0b:cd:37:4b:cb:71:8e:9e: 59:02:dd:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXO/7KkGDNBHbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YThmYTM5MzUtYzBmMC00MDQ4LTgxODMtM2JjZDVhMGJiMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscvi/UeIf0oqWd00eE42X7xIwkRWnGl24RKi NJDvwO/M/zf3V7QYXKrgNlYmHgcLp7pxjWGujtP0I+yx1R6vuY1keteO5Vi/tzQ4 RWl7TyzI7+ey31otieRHMsMTaCgzzG6ytLo/V9rR1GTESp9kgfD+EeG4SKlOHKFr kgHo2Lip/plXrvsUTksnAmRunalrpGgLYqolRiJYpEJ+TfYjhexR45CvJm+yaTqi A/IZHNU9RGeWAb3kNbyi7DyHe6PrxkEOlmTU8sD6+vpABI6JwfERHDsYhdyupgkQ jlyd2eyutKl1g/4Wa9izoz+L9N/k+IimlPtdYgcmw/+EBst9FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOCvd8ZnupgEB8OOaneySz4Quo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzJhYjVmNjMtOTZlZS0z N2RkLTkxMTUtYjY5N2NhMzNmYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXpWvoqJwhCaE0wW2d5OS8HPLTqsh8xKsFxgJY0bP/hKQb+OK0Nchl7 zhQ1mb9dm5PKDktPVJT89RL5xKqeDcKUHUTyrXf6FNws/5xmtygxi7RFUmZfA9Vp GN6lGCGEjJKiQaDNJFxnf6+jVUXm64fxE2quDo+bqBmeFER+cQCGrj+p9CC+Rnk+ sZe3KiLlbpms4khhHqOEG5TLhhKiNELVOEkp0yMe8gyEQUkuEO9i8kcbyrNKF4T4 pFMwEVPHKSGfg3CsLKaD6xDvJn+xQU6371NV5L1Md0QM9a35DibdUmkyCZsEkVqq IQyU8NirvTkqFuULzTdLy3GOnlkC3X8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:52 2025 by rpki-client