$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8244af56-18bb-37a6-9da1-e875d58bc4bb.roa File: 8244af56-18bb-37a6-9da1-e875d58bc4bb.roa (raw, json) Hash identifier: YA43YnsgEJS7yThkTXErEVxnQjS0ATiUcOna7YB52e8= Subject key identifier: EA:46:CD:20:BC:7C:53:A3:31:09:D3:0A:81:CD:44:ED:AC:28:32:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820A5770702604FDED5A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8244af56-18bb-37a6-9da1-e875d58bc4bb.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0a:57:70:70:26:04:fd:ed:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f7bc0fa6-1ca4-44de-805b-6f114edef911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:cc:8c:43:8d:21:af:b8:40:0a:72:8d:bc: cb:3d:c3:18:7c:3f:98:94:1e:2e:27:42:27:24:e9: d2:83:34:be:a0:19:55:2a:d1:81:f1:6e:45:44:30: f0:48:6f:39:9c:a1:af:3c:ba:4d:16:4c:40:9e:3a: e3:49:57:10:14:10:e5:c2:c7:cf:84:55:c1:c0:ac: 34:1c:27:8a:fc:94:ad:dc:6a:41:88:5e:c0:e5:9f: 9d:ee:e7:e0:3d:de:b1:d3:de:4f:c5:08:cc:b1:61: 05:c2:ec:19:e0:d3:b0:be:51:b5:24:a4:d7:4e:58: 74:a8:94:a4:68:d0:60:e6:31:3b:c2:3f:76:4b:d2: 24:f7:0d:20:c4:b2:ec:df:e0:82:52:09:34:94:21: 36:ce:32:90:a2:b8:98:ec:f7:67:20:34:90:63:51: b5:76:c9:64:ab:57:40:7b:b9:12:ab:f2:1b:5f:c9: af:af:39:1d:29:6c:3b:b3:44:c1:2b:b4:ad:c4:46: bd:38:82:ff:11:d7:1c:b1:b4:46:b4:4f:62:8b:19: dc:9e:6f:4b:6e:4e:d6:52:27:b9:7e:56:00:1e:1b: 0a:cd:7c:ce:34:1e:d3:0b:64:16:55:77:a6:82:54: da:48:9e:d8:96:0e:2e:af:f4:72:82:a2:58:1c:df: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:46:CD:20:BC:7C:53:A3:31:09:D3:0A:81:CD:44:ED:AC:28:32:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8244af56-18bb-37a6-9da1-e875d58bc4bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:49:2d:38:77:d3:5f:75:90:07:34:fd:57:6d:e3:c8:16:0b: 91:84:d7:d7:d9:ae:da:c8:f5:c3:df:c7:9b:a2:68:40:a6:4b: b4:0a:f4:63:f6:e6:fa:74:22:72:05:d8:29:a3:70:9d:4c:d1: cb:6a:54:7a:dd:f0:70:9a:5d:0c:a6:bb:7f:e1:f5:4e:d9:d4: 34:f4:ec:ad:14:0d:cd:f8:da:e9:cb:9d:69:ba:bb:c4:83:85: 34:9c:74:0e:32:00:04:ed:a4:1a:c0:82:e1:05:2f:d4:a4:ea: 24:0f:b6:00:58:d9:21:9d:a1:52:9d:58:b0:aa:fb:0e:81:a2: df:76:4b:c8:8b:bd:ed:de:11:62:2d:c3:48:8f:8b:d5:c7:09: b1:13:20:5a:10:85:00:3e:8a:d9:de:ae:50:49:13:8a:6e:82: 81:b5:20:3d:93:b1:fd:20:fe:03:81:22:84:3b:b1:cd:27:b5: a7:41:81:6d:2c:27:82:69:b8:ca:f5:dc:b1:70:91:ab:71:d6: ed:ed:15:43:ef:16:3f:e9:4c:77:cf:46:c5:32:f9:da:2d:bd: b4:2f:e8:36:be:1d:43:ae:b8:b2:51:b7:f2:09:7f:60:db:41: 2b:ff:21:01:63:a0:21:35:3a:a5:06:9a:69:17:b9:4a:d7:e0: fa:87:e9:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggpXcHAmBP3tWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjdiYzBmYTYtMWNhNC00NGRlLTgwNWItNmYxMTRlZGVmOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCPMjEONIa+4QApyjbzLPcMYfD+YlB4uJ0In JOnSgzS+oBlVKtGB8W5FRDDwSG85nKGvPLpNFkxAnjrjSVcQFBDlwsfPhFXBwKw0 HCeK/JSt3GpBiF7A5Z+d7ufgPd6x095PxQjMsWEFwuwZ4NOwvlG1JKTXTlh0qJSk aNBg5jE7wj92S9Ik9w0gxLLs3+CCUgk0lCE2zjKQoriY7PdnIDSQY1G1dslkq1dA e7kSq/IbX8mvrzkdKWw7s0TBK7StxEa9OIL/EdccsbRGtE9iixncnm9Lbk7WUie5 flYAHhsKzXzONB7TC2QWVXemglTaSJ7Ylg4ur/RygqJYHN/aRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpGzSC8fFOjMQnTCoHNRO2sKDJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODI0NGFmNTYtMThiYi0z N2E2LTlkYTEtZTg3NWQ1OGJjNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtJLTh30191kAc0/Vdt48gWC5GE19fZrtrI9cPfx5uiaECmS7QK9GP2 5vp0InIF2CmjcJ1M0ctqVHrd8HCaXQymu3/h9U7Z1DT07K0UDc342unLnWm6u8SD hTScdA4yAATtpBrAguEFL9Sk6iQPtgBY2SGdoVKdWLCq+w6Bot92S8iLve3eEWIt w0iPi9XHCbETIFoQhQA+itnerlBJE4pugoG1ID2Tsf0g/gOBIoQ7sc0ntadBgW0s J4JpuMr13LFwkatx1u3tFUPvFj/pTHfPRsUy+dotvbQv6Da+HUOuuLJRt/IJf2Db QSv/IQFjoCE1OqUGmmkXuUrX4PqH6RU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:33 2025 by rpki-client