$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c8cda32-4517-3c10-88c3-119668b9c293.roa File: 7c8cda32-4517-3c10-88c3-119668b9c293.roa (raw, json) Hash identifier: lqwj6KAXFUATCq0WeEvE9R+/Sz4FGsGGBVwgroEENNs= Subject key identifier: 52:52:DF:53:D1:44:4F:97:6F:5E:76:E7:8C:8F:9F:0E:70:D0:27:85 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA126797C0D830C8D73B600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c8cda32-4517-3c10-88c3-119668b9c293.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:26:79:7c:0d:83:0c:8d:73:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=13252f1d-4831-4cf9-8a13-2d298b88b604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:66:23:e3:d3:44:47:1f:3f:d4:dd:2e:e6: 0f:0a:a5:31:64:52:59:af:31:8d:ef:09:f8:b8:9f: ab:40:c2:a2:1d:b7:4b:1d:2f:9d:11:28:4f:65:1f: 10:61:cb:65:a2:2b:fa:e1:50:57:cb:fa:a0:6c:ae: 54:cc:e8:44:7f:16:32:58:69:9b:4f:3a:1c:6f:08: 4f:32:ec:b9:f2:c9:4a:f3:a2:d6:8f:46:33:b7:34: 74:02:9a:af:ed:0d:c3:48:f3:91:a2:c0:c1:59:62: ce:0d:95:7c:29:8e:d1:35:15:f7:d0:d0:cb:5f:29: 59:6b:99:89:0a:79:2d:c2:f2:be:a3:91:90:5b:74: 52:6a:90:bc:3c:70:81:4b:54:ad:ab:13:fc:b9:dc: 5f:0f:7d:54:ea:b5:7b:21:fb:28:12:01:04:6e:39: 73:45:d7:59:2f:0b:6c:c6:b5:5b:74:1a:bd:64:eb: 96:2f:ec:8f:d9:b6:90:d5:17:07:b1:05:f0:dd:79: 71:30:4a:18:71:e0:f0:1c:25:11:d8:24:ac:b6:19: 5c:5e:05:6d:7f:fe:73:39:45:c2:5a:6f:23:46:c2: 3b:18:76:c5:20:04:a2:bb:0a:10:89:e9:25:3c:1d: 29:15:75:b9:9f:55:3e:3b:64:cb:d5:c3:05:10:58: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:DF:53:D1:44:4F:97:6F:5E:76:E7:8C:8F:9F:0E:70:D0:27:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c8cda32-4517-3c10-88c3-119668b9c293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ee:ba:5f:09:e5:33:10:dd:b7:41:98:23:d9:d2:cb:6a:ce: b3:09:5f:10:ec:df:1d:e7:0f:12:0e:0b:27:99:90:5a:3f:d6: ca:d5:35:fa:99:8a:a1:21:a3:d6:10:ef:39:9d:2f:34:f3:d1: 88:1e:ac:d5:c0:2f:1f:94:7b:2b:1a:d9:93:ee:51:f3:37:8a: 2c:30:df:b7:93:89:f7:5a:dd:bd:4a:b6:0c:44:bc:af:e5:72: 94:d3:93:1a:c1:03:47:47:53:ad:38:bd:85:ee:a3:19:e3:57: 65:f1:1f:f5:67:a8:e6:e0:f1:14:8d:46:30:f1:58:42:d5:00: 18:a3:06:6e:74:e0:ce:96:44:cf:46:e2:da:67:87:91:ba:03: 3c:3d:44:5c:97:16:f0:9d:98:12:3e:2d:ef:6f:27:79:55:ac: 1d:22:0e:36:a5:e2:9f:83:c7:dd:a2:30:8d:59:d0:6e:8e:9f: 4c:33:33:96:35:b1:3b:d8:ac:77:19:68:44:c5:9e:41:54:c2: 89:05:46:25:97:b3:7a:c0:2f:c1:fc:80:54:9e:d3:4d:91:b2: 4d:43:a8:3d:40:c8:8e:01:88:b5:c1:f1:f6:29:b5:ae:d5:00: 9b:95:ff:e2:ef:35:87:77:55:cb:28:fc:19:ee:24:e1:a4:df: 9f:51:ce:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSZ5fA2DDI1ztgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MTMyNTJmMWQtNDgzMS00Y2Y5LThhMTMtMmQyOThiODhiNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcZmI+PTREcfP9TdLuYPCqUxZFJZrzGN7wn4 uJ+rQMKiHbdLHS+dEShPZR8QYctloiv64VBXy/qgbK5UzOhEfxYyWGmbTzocbwhP Muy58slK86LWj0YztzR0Apqv7Q3DSPORosDBWWLODZV8KY7RNRX30NDLXylZa5mJ CnktwvK+o5GQW3RSapC8PHCBS1StqxP8udxfD31U6rV7IfsoEgEEbjlzRddZLwts xrVbdBq9ZOuWL+yP2baQ1RcHsQXw3XlxMEoYceDwHCUR2CSsthlcXgVtf/5zOUXC Wm8jRsI7GHbFIASiuwoQieklPB0pFXW5n1U+O2TL1cMFEFgMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJS31PRRE+Xb15254yPnw5w0CeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2M4Y2RhMzItNDUxNy0z YzEwLTg4YzMtMTE5NjY4YjljMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLuul8J5TMQ3bdBmCPZ0stqzrMJXxDs3x3nDxIOCyeZkFo/1srVNfqZ iqEho9YQ7zmdLzTz0YgerNXALx+Ueysa2ZPuUfM3iiww37eTifda3b1KtgxEvK/l cpTTkxrBA0dHU604vYXuoxnjV2XxH/VnqObg8RSNRjDxWELVABijBm504M6WRM9G 4tpnh5G6Azw9RFyXFvCdmBI+Le9vJ3lVrB0iDjal4p+Dx92iMI1Z0G6On0wzM5Y1 sTvYrHcZaETFnkFUwokFRiWXs3rAL8H8gFSe002Rsk1DqD1AyI4BiLXB8fYpta7V AJuV/+LvNYd3Vcso/BnuJOGk359RzlQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:43 2025 by rpki-client