$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73092670-38d3-3be9-88de-5582ff0c5691.roa File: 73092670-38d3-3be9-88de-5582ff0c5691.roa (raw, json) Hash identifier: WvS/8kkxiBZOfstLVhbAkGHHD70Tn/h6hyxeUZYz+f0= Subject key identifier: 96:9D:AB:A5:3D:59:F7:98:B2:93:2D:7E:1E:56:F8:E4:8F:BE:86:74 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5821F8A6B1876F2BF3C5600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73092670-38d3-3be9-88de-5582ff0c5691.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:1f:8a:6b:18:76:f2:bf:3c:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=aa85bcf3-aa6d-4bb9-87a2-2178a5c53eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:15:37:c9:53:70:08:b1:a1:99:ce:fa:f1:9c: 42:25:3f:1e:be:a5:3f:c0:13:cd:0d:c3:4b:87:f9: 13:91:e9:f5:7c:14:a7:c4:f8:f5:2c:ff:da:9b:14: 54:39:1b:6b:c6:ed:db:28:d7:84:4c:8d:3b:8b:4a: 48:e0:8b:96:0a:13:a8:4d:a4:2f:07:8b:d2:a4:b3: a6:20:64:97:72:b0:90:0c:3c:de:9d:d0:73:16:c1: c0:a5:d0:fc:f0:30:67:be:8e:e1:50:3f:c9:02:3d: f5:e3:be:5d:b5:7b:8a:86:d7:95:06:95:06:b7:42: 79:18:c2:97:a4:9d:de:50:57:12:67:b3:d6:e5:b4: 42:10:a6:6e:28:9d:5a:10:6a:50:b8:f2:b2:57:9c: 7e:be:67:33:c4:6c:6e:00:69:fc:8f:60:3c:67:61: 3b:bd:45:fc:74:5d:17:90:70:e5:a9:41:b1:5b:cc: ab:39:77:00:9d:4a:14:fa:fc:b5:60:ea:7e:f0:fb: d8:38:97:7e:60:c3:34:8c:62:72:e3:fb:70:c8:97: 18:10:c4:e9:22:08:db:e3:83:a1:23:89:85:51:69: a1:57:6d:df:91:00:31:1a:09:5f:ab:0b:ce:f5:53: 6d:e9:c2:fb:82:c2:2f:99:4a:4a:06:1b:2c:26:56: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9D:AB:A5:3D:59:F7:98:B2:93:2D:7E:1E:56:F8:E4:8F:BE:86:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73092670-38d3-3be9-88de-5582ff0c5691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:74:a7:00:20:44:4d:04:8b:d3:89:19:90:1e:e7:7d:7b:cb: c7:5f:70:4b:2b:fc:91:30:75:07:ab:75:d1:be:93:71:e9:a5: 09:0e:cb:ce:f7:d8:5b:4c:96:c1:ac:08:30:57:66:10:02:7f: d7:b2:3c:b5:99:cc:ca:4f:6d:d2:03:0e:26:da:29:a7:5e:4e: a7:0b:01:ea:43:96:4a:ef:5a:78:7d:3a:31:12:ad:83:f2:e9: 66:88:6a:f8:dc:ca:a1:b8:1f:66:dd:02:75:58:70:68:89:0d: 87:cb:51:7b:6e:77:c3:30:e0:a2:bb:f3:b9:e9:88:cf:41:96: b1:f4:33:a3:dd:3d:41:a2:56:9f:75:c7:84:44:e6:19:51:1d: ea:38:8c:1f:3b:cc:ca:db:69:89:d7:73:61:23:f7:4b:43:db: c8:f8:ea:82:b1:7a:85:b6:97:ab:0b:98:5d:ae:97:5e:fb:19: 1c:da:d9:0b:9b:4b:89:ef:bf:66:ee:54:24:9e:67:57:e9:b7: 25:43:14:87:f9:86:e1:e0:f7:6a:b1:6a:b2:6b:6c:20:4c:ce: c1:14:7d:b0:23:a9:a0:58:79:ff:c2:bc:06:96:aa:ea:63:02: 19:b3:c2:b5:db:95:3b:1f:fe:83:b4:e1:30:aa:77:c1:f2:19: 26:bf:f6:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgh+Kaxh28r88VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWE4NWJjZjMtYWE2ZC00YmI5LTg3YTItMjE3OGE1YzUzZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxU3yVNwCLGhmc768ZxCJT8evqU/wBPNDcNL h/kTken1fBSnxPj1LP/amxRUORtrxu3bKNeETI07i0pI4IuWChOoTaQvB4vSpLOm IGSXcrCQDDzendBzFsHApdD88DBnvo7hUD/JAj31475dtXuKhteVBpUGt0J5GMKX pJ3eUFcSZ7PW5bRCEKZuKJ1aEGpQuPKyV5x+vmczxGxuAGn8j2A8Z2E7vUX8dF0X kHDlqUGxW8yrOXcAnUoU+vy1YOp+8PvYOJd+YMM0jGJy4/twyJcYEMTpIgjb44Oh I4mFUWmhV23fkQAxGglfqwvO9VNt6cL7gsIvmUpKBhssJlY4bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJadq6U9WfeYspMtfh5W+OSPvoZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzMwOTI2NzAtMzhkMy0z YmU5LTg4ZGUtNTU4MmZmMGM1NjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR0pwAgRE0Ei9OJGZAe5317y8dfcEsr/JEwdQerddG+k3HppQkOy873 2FtMlsGsCDBXZhACf9eyPLWZzMpPbdIDDibaKadeTqcLAepDlkrvWnh9OjESrYPy 6WaIavjcyqG4H2bdAnVYcGiJDYfLUXtud8Mw4KK787npiM9BlrH0M6PdPUGiVp91 x4RE5hlRHeo4jB87zMrbaYnXc2Ej90tD28j46oKxeoW2l6sLmF2ul177GRza2Qub S4nvv2buVCSeZ1fptyVDFIf5huHg92qxarJrbCBMzsEUfbAjqaBYef/CvAaWqupj AhmzwrXblTsf/oO04TCqd8HyGSa/9io= -----END CERTIFICATE-----Generated at Fri Apr 4 08:50:02 2025 by rpki-client