$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa File: 7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa (raw, json) Hash identifier: YgPMd6XGo4u4vC7EcWTERReml4LAAyTZvfTaGX8kvnw= Subject key identifier: CE:CD:AB:E2:09:59:8E:54:F0:D4:6F:75:3C:01:D2:D4:FA:12:F6:F5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12461DCBD4BE5FCDB4E20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.251.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:24:61:dc:bd:4b:e5:fc:db:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=43fbccf1-e65c-4996-9ae3-cc569e2e039f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2b:ab:a3:0f:04:c4:a1:14:2a:ca:f4:e4:3b: d7:48:44:c2:99:83:f6:ab:71:99:e9:83:05:6e:98: 62:a9:81:40:6b:0e:94:04:07:7c:42:14:37:57:ac: 4c:72:1f:ad:8d:4e:2d:c7:44:b5:8c:b4:bb:23:6d: 2a:54:d3:91:46:e7:71:e8:a4:38:66:5a:1b:eb:c1: 14:a0:f0:5e:50:a4:b0:ce:bc:68:5a:45:eb:a7:01: 3d:65:91:5a:46:e0:15:0f:87:9f:2c:af:d0:23:7b: ed:cc:83:06:a5:c4:3e:68:ad:6c:14:f3:05:e9:e5: 5c:a4:b6:45:37:18:f3:04:d2:f6:59:7d:87:ca:6f: a3:0b:f1:d4:14:e5:5c:8c:bb:60:01:f5:0a:8a:a8: 32:ff:3a:a2:d9:ad:e8:a2:68:9b:6a:54:96:a5:26: f4:73:bf:29:4b:94:30:56:0f:07:78:98:a1:47:4a: 3d:d6:18:65:3f:b4:0c:c9:8f:15:c0:8f:a3:21:10: 0b:0d:97:53:7f:d0:30:54:8e:0a:79:fe:32:d6:4d: ed:f9:c0:37:ef:e4:d4:3d:cb:8f:ba:0e:98:6b:8f: a2:cd:5a:3c:13:0d:1e:51:8a:9c:95:c7:7e:97:3e: 73:8b:16:c8:81:cd:b6:04:23:16:66:9e:bb:fa:e1: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CD:AB:E2:09:59:8E:54:F0:D4:6F:75:3C:01:D2:D4:FA:12:F6:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7a:33:6a:50:3d:12:4e:2f:9f:b1:a4:f0:25:d2:e1:c3:5b: e8:6a:39:24:35:66:b7:36:b1:cd:2d:94:21:90:9b:71:ed:6d: a4:2a:e4:d5:83:d5:d1:bd:6a:b2:15:57:4d:c3:ca:f7:bf:20: e5:2c:57:23:98:ca:27:db:49:b0:33:85:38:11:f9:7c:86:7a: 0f:9d:a7:31:62:a1:41:5e:15:08:9d:1c:04:17:b8:66:92:9c: 8e:d2:af:a9:c0:1d:5a:fb:6d:f9:d9:0e:86:87:4e:28:d8:7f: da:41:da:6e:1b:08:65:d9:8d:f8:ce:85:75:2c:ee:2a:6a:1f: 77:1b:f4:4a:96:85:91:1b:a1:40:8d:69:04:e9:c0:81:40:bb: cd:e4:13:0b:48:88:42:ab:d3:4a:25:48:12:08:bd:37:eb:55: ca:d7:d9:2c:26:e8:64:5b:a1:69:31:4f:0b:d9:e7:58:2f:b6: af:6d:1d:79:e3:17:cd:ad:0c:df:b8:31:67:ff:da:42:d2:c2: d3:43:45:cb:96:34:ba:14:32:0e:ee:34:49:35:1c:c4:63:2e: 50:a9:f4:f0:8d:69:4a:96:8a:ca:b3:b1:c6:71:a6:b6:5d:23: 40:f4:1c:fa:45:64:7c:c9:2e:d2:8f:d8:ec:6e:98:a5:88:b0: 41:0e:1f:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSRh3L1L5fzbTiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NDNmYmNjZjEtZTY1Yy00OTk2LTlhZTMtY2M1NjllMmUwMzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCurow8ExKEUKsr05DvXSETCmYP2q3GZ6YMF bphiqYFAaw6UBAd8QhQ3V6xMch+tjU4tx0S1jLS7I20qVNORRudx6KQ4Zlob68EU oPBeUKSwzrxoWkXrpwE9ZZFaRuAVD4efLK/QI3vtzIMGpcQ+aK1sFPMF6eVcpLZF NxjzBNL2WX2Hym+jC/HUFOVcjLtgAfUKiqgy/zqi2a3oomibalSWpSb0c78pS5Qw Vg8HeJihR0o91hhlP7QMyY8VwI+jIRALDZdTf9AwVI4Kef4y1k3t+cA37+TUPcuP ug6Ya4+izVo8Ew0eUYqclcd+lz5zixbIgc22BCMWZp67+uEXewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7Nq+IJWY5U8NRvdTwB0tT6Evb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzQ3MWIzYTQtMzAzZi0z ZGQwLWIyMTEtOTRkOWEwNDY3ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD96M2pQPRJOL5+xpPAl0uHDW+hqOSQ1Zrc2sc0tlCGQm3HtbaQq5NWD 1dG9arIVV03Dyve/IOUsVyOYyifbSbAzhTgR+XyGeg+dpzFioUFeFQidHAQXuGaS nI7Sr6nAHVr7bfnZDoaHTijYf9pB2m4bCGXZjfjOhXUs7ipqH3cb9EqWhZEboUCN aQTpwIFAu83kEwtIiEKr00olSBIIvTfrVcrX2Swm6GRboWkxTwvZ51gvtq9tHXnj F82tDN+4MWf/2kLSwtNDRcuWNLoUMg7uNEk1HMRjLlCp9PCNaUqWisqzscZxprZd I0D0HPpFZHzJLtKP2OxumKWIsEEOH20= -----END CERTIFICATE-----Generated at Fri Apr 4 08:40:39 2025 by rpki-client