$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86f2d1aa-58c5-35d3-b8b3-1759aba019d9.roa File: 86f2d1aa-58c5-35d3-b8b3-1759aba019d9.roa (raw, json) Hash identifier: Ee7nFqxpKArBZVwlQe7RzlwtLp0hzi1E9pRjvUCqmTM= Subject key identifier: F5:48:3D:EA:76:F8:06:0E:54:C0:B5:77:70:2F:5B:BB:08:7A:64:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5822D6A42478CF88502B700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86f2d1aa-58c5-35d3-b8b3-1759aba019d9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2d:6a:42:47:8c:f8:85:02:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f89988ae-2c8b-44a4-8922-b11d85233222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:e8:b2:9e:f5:37:8c:10:61:5a:d0:0b:ff: 02:92:c2:7b:be:ed:1d:02:e0:52:a3:f0:8e:92:26: 16:51:6c:35:1e:17:82:6a:55:13:20:dd:fb:3f:c4: 80:ac:82:89:d2:6d:bd:8c:74:4b:7a:eb:92:7c:31: 07:80:33:1f:cf:2b:45:17:0a:35:ba:81:96:ec:a4: 6a:4e:dd:63:59:60:9f:0e:54:3f:ee:c8:95:e1:cb: f5:f8:29:45:94:51:57:47:81:a9:ce:27:a2:d4:e1: 16:3a:e5:a8:8a:3a:ab:0a:0a:c7:6c:12:01:5a:b2: b2:eb:46:26:d0:dd:c4:d2:f0:b8:68:b3:76:9b:d9: 24:2e:39:a6:8a:f9:ac:27:6f:e1:0e:4d:f8:1c:21: 18:19:b2:8a:16:1b:4d:fe:3c:05:a4:8d:7b:26:2d: 18:d3:45:11:26:27:32:6a:54:8b:bc:1b:f9:b0:d3: 93:04:3b:28:a8:0b:e2:fd:7e:0a:3a:4e:5e:cc:5e: 50:64:ed:c7:49:ed:7f:15:49:26:99:56:85:ab:bb: b2:f8:7b:43:aa:6e:70:a9:4c:fc:57:fb:e6:ad:b7: 3d:59:43:67:33:29:ac:7f:32:ea:c3:d1:89:7a:5f: 73:76:81:7b:3c:31:c1:09:cf:8d:ff:25:a5:b2:37: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:48:3D:EA:76:F8:06:0E:54:C0:B5:77:70:2F:5B:BB:08:7A:64:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86f2d1aa-58c5-35d3-b8b3-1759aba019d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:00:e4:fb:c2:8c:5b:b5:08:d7:69:f6:ae:ba:6b:85:b2:80: 09:52:7e:f8:0b:99:d6:3b:4e:83:25:49:95:ee:75:89:f4:4d: 6f:cf:72:0e:7d:ac:46:07:f9:e8:7c:47:6a:ff:61:46:ca:8d: e1:4b:26:65:5f:ed:c6:fb:97:b1:ec:35:db:b8:9e:b8:6f:33: f9:c9:8d:44:51:76:47:69:b4:d6:28:5e:37:e9:d2:ee:aa:a6: d1:1c:dd:76:5c:77:b4:c7:bf:ef:2b:ff:14:23:62:f0:fc:37: 2a:32:d4:c8:d6:06:53:54:0c:f5:e5:1a:f2:45:40:0c:d2:1d: f9:5e:05:ae:64:ae:dd:75:92:2d:4f:7b:28:f0:49:34:f9:b1: 68:fc:53:75:34:6d:2f:bc:12:9d:aa:b9:7c:dc:e9:4f:ef:1e: 4d:29:e4:32:89:8a:8f:97:cc:08:31:8e:25:28:63:c1:a3:76: d7:59:0e:a3:81:2f:12:eb:6c:1c:59:68:c6:57:a5:7a:be:52: 7c:ed:79:18:d7:f9:8b:b2:0d:7c:1e:0d:ab:af:1c:9a:f1:42: 0a:d6:a1:27:22:7f:e0:7d:17:cb:cf:38:37:26:9e:e9:03:38: d9:33:41:ba:25:cf:9c:7c:da:e8:8d:46:da:37:68:6f:24:e0: 01:d6:1d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgi1qQkeM+IUCtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Zjg5OTg4YWUtMmM4Yi00NGE0LTg5MjItYjExZDg1MjMzMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDzosp71N4wQYVrQC/8CksJ7vu0dAuBSo/CO kiYWUWw1HheCalUTIN37P8SArIKJ0m29jHRLeuuSfDEHgDMfzytFFwo1uoGW7KRq Tt1jWWCfDlQ/7siV4cv1+ClFlFFXR4Gpziei1OEWOuWoijqrCgrHbBIBWrKy60Ym 0N3E0vC4aLN2m9kkLjmmivmsJ2/hDk34HCEYGbKKFhtN/jwFpI17Ji0Y00URJicy alSLvBv5sNOTBDsoqAvi/X4KOk5ezF5QZO3HSe1/FUkmmVaFq7uy+HtDqm5wqUz8 V/vmrbc9WUNnMymsfzLqw9GJel9zdoF7PDHBCc+N/yWlsjdZRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVIPep2+AYOVMC1d3AvW7sIemRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODZmMmQxYWEtNThjNS0z NWQzLWI4YjMtMTc1OWFiYTAxOWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvu0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoA5PvCjFu1CNdp9q66a4WygAlSfvgLmdY7ToMlSZXudYn0TW/Pcg59 rEYH+eh8R2r/YUbKjeFLJmVf7cb7l7HsNdu4nrhvM/nJjURRdkdptNYoXjfp0u6q ptEc3XZcd7THv+8r/xQjYvD8Nyoy1MjWBlNUDPXlGvJFQAzSHfleBa5krt11ki1P eyjwSTT5sWj8U3U0bS+8Ep2quXzc6U/vHk0p5DKJio+XzAgxjiUoY8GjdtdZDqOB LxLrbBxZaMZXpXq+UnzteRjX+YuyDXweDauvHJrxQgrWoScif+B9F8vPODcmnukD ONkzQbolz5x82uiNRto3aG8k4AHWHTo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:57 2025 by rpki-client