$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fa8e365-47c8-3ddb-8d37-54b9d5aeba25.roa File: 7fa8e365-47c8-3ddb-8d37-54b9d5aeba25.roa (raw, json) Hash identifier: TjSfL6mf3DuZwzBeHFwn2pSxv7oq1OI+/ePtN2GGct4= Subject key identifier: E4:AF:AB:A0:2C:E5:4C:97:FF:AB:DA:F9:E6:5C:CD:6E:F2:33:F0:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817EE5871EEDA309E7A020 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fa8e365-47c8-3ddb-8d37-54b9d5aeba25.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7e:e5:87:1e:ed:a3:09:e7:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=35c0cccd-ac8b-43d4-99df-5bcef3fc3b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c8:39:d9:54:20:c7:89:34:2c:d7:eb:f6:db: ba:34:70:53:d4:50:65:8f:cc:4b:dc:45:12:c4:f3: 99:8f:9e:fa:0e:f4:70:cf:c8:50:62:05:28:87:74: 55:83:d6:f1:7d:39:2d:e4:c6:60:48:5a:98:87:62: 5d:6a:68:6c:99:90:29:10:e9:52:eb:bb:86:b6:79: 53:c9:99:ec:fb:be:22:73:97:93:41:23:f0:a7:38: 3b:f9:4f:5a:75:9f:f2:b3:a6:64:5c:85:2c:23:4a: ed:84:15:b5:5d:80:93:d3:5a:7f:99:86:3b:19:2b: 07:4d:a4:d7:c0:8f:a7:cd:45:fb:cd:bf:f9:f8:04: b4:da:54:c7:56:f5:77:c7:6c:e6:37:88:e3:f9:51: b7:52:95:6f:95:32:7a:c2:4e:b5:5f:8c:df:b8:78: 32:11:0d:4b:a0:24:1e:c5:ea:48:6e:79:f0:7d:3b: 7a:2a:1c:cf:23:49:27:6d:98:c5:0a:0c:74:f0:1e: 1a:c2:c6:c0:78:3f:86:33:6d:d2:84:42:10:76:53: 34:3e:13:c2:1e:b6:bd:dd:5b:86:e5:86:1e:bd:98: 5e:90:df:71:9e:22:6b:4e:79:25:00:9f:43:08:27: 65:96:e1:47:51:b5:ab:9f:a2:9b:2c:29:4a:75:f7: 33:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AF:AB:A0:2C:E5:4C:97:FF:AB:DA:F9:E6:5C:CD:6E:F2:33:F0:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fa8e365-47c8-3ddb-8d37-54b9d5aeba25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f7:20:eb:ce:1a:35:ce:90:73:00:af:b8:7f:9f:1c:35:1e: 65:0e:3a:ee:f6:99:0d:96:9f:bb:1f:80:db:bd:96:07:76:a0: b2:57:4e:5e:a4:a9:8d:c0:97:8e:9a:87:f7:d5:47:8c:b1:15: 85:63:9d:b2:b6:07:a7:40:9c:2d:26:31:2b:4e:f1:81:83:e4: 09:9a:13:9c:6c:57:9e:bd:bb:4e:ce:9f:f6:04:59:1d:28:80: 42:9b:39:7b:7c:d2:cc:41:1a:01:50:63:6e:f4:7f:d5:27:6d: 72:01:e4:4a:a8:9f:ad:e3:ce:d2:13:7d:2d:39:99:7a:0f:e2: 38:1b:68:da:6a:96:37:be:0b:e0:8d:da:a1:f0:fe:b1:f3:17: 73:66:3c:80:ba:60:b3:0e:f5:d3:e6:68:a1:23:bb:58:c8:03: e8:c8:8d:4a:52:75:b9:b5:3e:3d:88:75:dd:13:ba:28:03:05: d7:94:bb:16:a9:3b:ef:1c:6d:35:5e:5b:04:0e:07:49:56:65: 36:d4:60:12:8c:9f:fd:f9:35:3f:6d:ac:79:32:d4:b9:aa:d9: 39:aa:e3:c0:e8:7a:30:f4:95:57:3d:e2:c4:e0:67:b1:70:fa: 62:33:84:10:9b:6a:fb:07:ca:49:db:f7:f1:46:e9:02:6a:f9: 86:29:0b:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX7lhx7townnoCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzVjMGNjY2QtYWM4Yi00M2Q0LTk5ZGYtNWJjZWYzZmMzYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicg52VQgx4k0LNfr9tu6NHBT1FBlj8xL3EUS xPOZj576DvRwz8hQYgUoh3RVg9bxfTkt5MZgSFqYh2JdamhsmZApEOlS67uGtnlT yZns+74ic5eTQSPwpzg7+U9adZ/ys6ZkXIUsI0rthBW1XYCT01p/mYY7GSsHTaTX wI+nzUX7zb/5+AS02lTHVvV3x2zmN4jj+VG3UpVvlTJ6wk61X4zfuHgyEQ1LoCQe xepIbnnwfTt6KhzPI0knbZjFCgx08B4awsbAeD+GM23ShEIQdlM0PhPCHra93VuG 5YYevZhekN9xniJrTnklAJ9DCCdlluFHUbWrn6KbLClKdfcziwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSvq6As5UyX/6va+eZczW7yM/AoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2ZhOGUzNjUtNDdjOC0z ZGRiLThkMzctNTRiOWQ1YWViYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb3IOvOGjXOkHMAr7h/nxw1HmUOOu72mQ2Wn7sfgNu9lgd2oLJXTl6k qY3Al46ah/fVR4yxFYVjnbK2B6dAnC0mMStO8YGD5AmaE5xsV569u07On/YEWR0o gEKbOXt80sxBGgFQY270f9UnbXIB5Eqon63jztITfS05mXoP4jgbaNpqlje+C+CN 2qHw/rHzF3NmPIC6YLMO9dPmaKEju1jIA+jIjUpSdbm1Pj2Idd0TuigDBdeUuxap O+8cbTVeWwQOB0lWZTbUYBKMn/35NT9trHky1Lmq2Tmq48DoejD0lVc94sTgZ7Fw +mIzhBCbavsHyknb9/FG6QJq+YYpC9Q= -----END CERTIFICATE-----Generated at Fri Apr 4 08:40:38 2025 by rpki-client