$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a798f55-b66e-3b5b-b89b-736276961acc.roa File: 8a798f55-b66e-3b5b-b89b-736276961acc.roa (raw, json) Hash identifier: EBqNfJNl/7b5+iq9/iVP9LqJ2izbp2UGu6kgLeXT8Bo= Subject key identifier: 8E:7C:5B:31:DB:FF:3F:33:79:AE:84:6A:43:02:F2:14:4F:16:13:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581FF8DF592769127A23590 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a798f55-b66e-3b5b-b89b-736276961acc.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:ff:8d:f5:92:76:91:27:a2:35:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1072e1f6-51a5-4317-8b61-d4beb575d0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:de:02:0f:82:26:0f:fc:3d:7e:dd:ef:1b: 4a:66:db:7c:9e:85:7f:4f:b9:29:72:c8:c8:4d:2e: ec:4f:cd:d8:1d:b2:86:db:96:ee:66:b3:39:48:aa: 79:65:1b:94:37:95:bb:4c:98:3d:cb:92:7c:57:24: f5:90:0b:61:b5:fa:2e:27:19:ac:61:eb:da:55:d6: f2:9b:8a:69:d7:c7:b8:95:88:bd:7f:78:30:0f:90: 70:30:3c:de:b8:b2:87:b1:69:99:fa:d1:3e:4b:9f: ab:25:24:e6:37:3f:bf:d1:ee:9a:19:71:33:20:ed: 89:c8:f7:56:c8:94:3b:fe:71:0c:72:64:e1:22:72: 54:96:7a:93:b9:cb:42:2a:0d:e9:d4:03:97:6f:76: e8:48:ef:02:4f:aa:8b:90:08:96:3c:12:c7:19:14: 07:a1:97:1a:5f:2f:18:b0:ef:3b:5b:ca:09:07:44: d1:10:6a:7f:a2:38:14:ae:55:42:6d:51:7d:31:e1: f8:da:09:8d:bc:c8:cb:3d:3b:18:eb:7e:06:47:b5: 65:40:6c:ba:df:e5:69:64:c6:a7:ec:eb:e5:ff:ff: 0d:cd:a5:a0:15:27:29:b8:26:d2:b3:15:a9:d3:27: 82:f3:ee:16:e6:60:a8:05:ec:58:bb:43:bc:67:0c: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:5B:31:DB:FF:3F:33:79:AE:84:6A:43:02:F2:14:4F:16:13:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8a798f55-b66e-3b5b-b89b-736276961acc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:da:fd:db:d4:ec:eb:55:9a:fc:24:0f:ff:67:e9:5d:a2:71: 5e:3f:02:cf:17:df:ad:e7:af:fb:84:ac:86:d7:22:15:d5:00: 99:c3:d0:6a:1f:1f:7d:03:1a:d1:fd:a8:55:4a:a8:ac:00:5a: 23:ee:33:39:36:55:5c:2d:6e:3a:f6:3b:35:7c:bf:d9:f3:cd: 27:9f:92:34:77:24:43:6f:3c:41:02:15:a3:92:f9:fd:54:30: 07:d6:cf:a8:72:b2:d1:b0:f7:3d:44:9f:f9:9c:51:a0:fa:eb: fd:3f:6a:af:d1:37:14:07:95:c4:8d:33:a2:a4:35:6e:f3:60: f2:85:81:c3:20:6d:f5:c4:12:61:17:ee:4c:43:9e:e0:8b:ea: 76:c6:69:12:a3:6c:0e:99:85:62:3d:d8:94:8f:6a:3e:64:fe: 59:8c:0f:58:e5:42:a8:00:e6:f5:3e:ca:39:7e:3d:db:25:de: f8:03:60:7a:8c:dc:f1:ec:17:a4:73:40:95:6a:1e:71:ef:a6: 8a:7a:70:52:fa:2f:22:fd:4e:cd:0d:bc:63:e5:69:d7:b4:ad: 17:1a:1d:73:6d:1e:dd:39:1a:56:c4:d9:dc:cc:b3:9a:03:7e: f8:ed:f7:3e:5d:d7:05:fd:27:e5:38:30:b6:65:e9:ca:87:60: 77:c9:9c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgf+N9ZJ2kSeiNZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTA3MmUxZjYtNTFhNS00MzE3LThiNjEtZDRiZWI1NzVkMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3neAg+CJg/8PX7d7xtKZtt8noV/T7kpcsjI TS7sT83YHbKG25buZrM5SKp5ZRuUN5W7TJg9y5J8VyT1kAthtfouJxmsYevaVdby m4pp18e4lYi9f3gwD5BwMDzeuLKHsWmZ+tE+S5+rJSTmNz+/0e6aGXEzIO2JyPdW yJQ7/nEMcmThInJUlnqTuctCKg3p1AOXb3boSO8CT6qLkAiWPBLHGRQHoZcaXy8Y sO87W8oJB0TREGp/ojgUrlVCbVF9MeH42gmNvMjLPTsY634GR7VlQGy63+VpZMan 7Ovl//8NzaWgFScpuCbSsxWp0yeC8+4W5mCoBexYu0O8ZwzN3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI58WzHb/z8zea6EakMC8hRPFhOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGE3OThmNTUtYjY2ZS0z YjViLWI4OWItNzM2Mjc2OTYxYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfa/dvU7OtVmvwkD/9n6V2icV4/As8X363nr/uErIbXIhXVAJnD0Gof H30DGtH9qFVKqKwAWiPuMzk2VVwtbjr2OzV8v9nzzSefkjR3JENvPEECFaOS+f1U MAfWz6hystGw9z1En/mcUaD66/0/aq/RNxQHlcSNM6KkNW7zYPKFgcMgbfXEEmEX 7kxDnuCL6nbGaRKjbA6ZhWI92JSPaj5k/lmMD1jlQqgA5vU+yjl+Pdsl3vgDYHqM 3PHsF6RzQJVqHnHvpop6cFL6LyL9Ts0NvGPlade0rRcaHXNtHt05GlbE2dzMs5oD fvjt9z5d1wX9J+U4MLZl6cqHYHfJnAM= -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:55 2025 by rpki-client