$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7eea8cd1-10bb-31bc-83dd-3d913942dbc5.roa File: 7eea8cd1-10bb-31bc-83dd-3d913942dbc5.roa (raw, json) Hash identifier: D6MejBFuph0mFeHELt7y+EaumWgehewcf4Ru0VMzy8g= Subject key identifier: 91:0E:D9:28:FB:9B:16:8A:24:AD:91:CA:EE:7B:0D:4F:C8:4F:A5:42 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58206E9406491CB1EAE0500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7eea8cd1-10bb-31bc-83dd-3d913942dbc5.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:06:e9:40:64:91:cb:1e:ae:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cfa55715-02a1-464d-9b35-97ec4828571c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:bd:d6:bf:38:1d:7d:42:de:77:bb:21:4b: 01:1f:ac:49:b9:3a:9b:57:d8:54:b3:49:16:9b:df: 9d:7e:04:f1:fa:ed:98:fe:83:8d:c6:65:c7:cf:9f: 11:6b:77:46:ed:a8:5a:4d:61:2d:3a:66:d3:64:2d: f1:06:05:f6:fa:13:39:0a:7f:85:8e:44:60:08:b4: c3:c0:ad:50:a4:ef:db:b6:c5:67:a4:5d:85:ab:78: 1d:1d:30:81:76:73:b8:43:30:e0:c3:d4:4e:8b:71: a0:4e:ae:9b:05:02:6f:60:c1:ea:67:1b:1e:22:ea: 0b:9e:ea:02:5f:0b:36:d5:3c:94:58:a7:c9:9a:bc: d4:70:be:05:8b:46:f3:f4:df:25:18:0d:28:0d:46: ae:98:b6:b7:cc:1d:0a:3d:7e:0f:6f:4a:1c:c5:32: 9e:30:2d:41:6e:c5:e6:da:0a:a0:e4:a1:f4:b9:40: 86:19:a3:94:ad:13:99:8d:68:f6:5a:ee:06:0e:cb: 21:f1:ff:19:97:70:9c:0a:90:d3:6c:19:14:48:c0: 55:5f:8b:17:aa:41:5b:21:29:78:2e:ba:17:7a:87: 81:df:6c:c6:a5:1c:99:93:89:d9:25:d8:de:da:ce: cd:fa:26:20:56:20:e0:b8:c7:87:6d:ba:9e:6b:28: 0b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0E:D9:28:FB:9B:16:8A:24:AD:91:CA:EE:7B:0D:4F:C8:4F:A5:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7eea8cd1-10bb-31bc-83dd-3d913942dbc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5f:25:82:e0:35:cc:d7:d9:10:19:81:c1:b8:ec:5b:aa:2d: 79:3b:65:6f:69:df:eb:64:2b:f8:16:43:c8:87:89:d9:ae:a1: 6b:54:7e:ee:6e:af:23:0c:8d:87:82:27:5c:57:ca:63:87:4a: 50:8a:e2:6e:6b:79:b6:73:f9:63:87:5c:70:6b:cb:e5:c4:83: c9:36:74:e6:af:1f:14:93:db:51:be:92:1a:72:76:86:57:84: 4e:f3:7a:62:af:22:20:8f:dc:2e:86:7c:b8:d1:45:f0:99:4e: 79:40:8a:ef:44:41:e9:4b:39:11:9f:58:99:04:b9:46:f9:39: 1b:94:48:22:f2:c0:7d:44:ac:f8:a9:ed:f2:65:95:2e:9f:eb: 98:92:3f:93:0b:f7:ba:68:d4:bc:2f:6b:cc:1b:99:ff:3a:92: 0a:78:37:87:da:03:36:1b:38:0c:d9:f0:87:c6:2e:c3:62:53: 43:cf:a9:e6:46:c7:19:ef:28:8f:b4:5e:10:88:e4:09:74:0c: 2d:8e:50:1a:37:f8:78:e9:a7:a9:2c:a3:55:cc:f5:dd:38:3f: 78:01:a1:a7:37:2b:c4:34:e0:39:20:50:4f:a0:ca:7b:aa:bd: 08:a5:0a:fb:19:28:11:2f:8f:9f:86:a1:63:97:b3:0b:03:d0: 6d:b5:b4:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggbpQGSRyx6uBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2ZhNTU3MTUtMDJhMS00NjRkLTliMzUtOTdlYzQ4Mjg1NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoq91r84HX1C3ne7IUsBH6xJuTqbV9hUs0kW m9+dfgTx+u2Y/oONxmXHz58Ra3dG7ahaTWEtOmbTZC3xBgX2+hM5Cn+FjkRgCLTD wK1QpO/btsVnpF2Fq3gdHTCBdnO4QzDgw9ROi3GgTq6bBQJvYMHqZxseIuoLnuoC Xws21TyUWKfJmrzUcL4Fi0bz9N8lGA0oDUaumLa3zB0KPX4Pb0ocxTKeMC1BbsXm 2gqg5KH0uUCGGaOUrROZjWj2Wu4GDssh8f8Zl3CcCpDTbBkUSMBVX4sXqkFbISl4 LroXeoeB32zGpRyZk4nZJdje2s7N+iYgViDguMeHbbqeaygLnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEO2Sj7mxaKJK2Ryu57DU/IT6VCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2VlYThjZDEtMTBiYi0z MWJjLTgzZGQtM2Q5MTM5NDJkYmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5fJYLgNczX2RAZgcG47FuqLXk7ZW9p3+tkK/gWQ8iHidmuoWtUfu5u ryMMjYeCJ1xXymOHSlCK4m5rebZz+WOHXHBry+XEg8k2dOavHxST21G+khpydoZX hE7zemKvIiCP3C6GfLjRRfCZTnlAiu9EQelLORGfWJkEuUb5ORuUSCLywH1ErPip 7fJllS6f65iSP5ML97po1Lwva8wbmf86kgp4N4faAzYbOAzZ8IfGLsNiU0PPqeZG xxnvKI+0XhCI5Al0DC2OUBo3+Hjpp6kso1XM9d04P3gBoac3K8Q04DkgUE+gynuq vQilCvsZKBEvj5+GoWOXswsD0G21tEQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:33 2025 by rpki-client