$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa File: 8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa (raw, json) Hash identifier: lJjCjRIIXoNjZzckOkZ9tEtQ8uNThpmnfp3c8WJKX5Y= Subject key identifier: D6:E1:B9:AB:F4:33:E9:81:36:60:32:B9:70:78:35:B9:11:FB:37:1C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817E5C6561DEF17CE95FC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7e:5c:65:61:de:f1:7c:e9:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=120b12cc-036e-442f-a448-20cdebb0661e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:38:1c:26:b5:6e:5c:21:2d:70:bf:5a:d2: 5d:57:40:da:8f:d1:5a:af:48:90:fb:06:41:f9:b8: c0:5c:e2:6e:b9:09:62:1b:3d:7b:46:13:04:fc:f1: ed:37:33:15:9f:78:4c:83:3f:e0:02:de:a5:c9:09: ed:ad:af:db:2e:77:24:43:20:f1:e0:57:9e:f0:cb: 23:f7:20:e1:c4:16:29:2b:1a:30:51:74:e5:f8:22: 34:d0:10:c8:6e:b0:dd:d5:4a:62:83:26:87:a6:ae: 66:a2:f6:f3:83:48:67:06:bd:18:bd:72:e3:bf:2b: 03:73:aa:3a:b2:4a:48:ed:61:ba:2f:49:cf:39:16: 0d:0b:c7:09:5c:aa:3f:00:bf:94:54:d6:17:c8:a8: c0:70:f3:90:bf:14:18:57:c3:86:f3:b9:34:a3:b7: 5a:99:61:71:11:23:7e:d6:26:e8:bb:2c:fd:e0:a1: b2:b9:43:57:bf:b8:7f:1a:14:ea:b6:74:16:c9:24: 54:94:cd:47:1e:29:bb:7c:a4:06:fe:aa:c8:90:a4: 83:00:5b:ea:25:b3:ea:67:1b:7e:55:8b:59:a8:f9: 71:d7:16:10:d0:1f:03:bb:10:91:f3:bc:a2:ea:fc: 27:6f:68:77:c6:36:ca:db:9e:dc:af:84:2e:8f:8b: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E1:B9:AB:F4:33:E9:81:36:60:32:B9:70:78:35:B9:11:FB:37:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:3d:fa:00:47:74:32:74:a5:89:83:07:bd:56:1c:de:69:b7: ea:7e:5f:35:03:a1:35:4a:57:40:77:21:b4:d7:1e:7b:17:68: 79:d0:3a:6e:e1:99:94:24:cd:0c:39:a7:b6:f7:77:ac:2f:e2: a1:c0:ad:7e:8c:76:fe:b3:1b:68:c9:48:59:9a:96:98:6b:22: 5e:12:75:43:a6:02:cc:8b:14:90:14:8a:e1:c7:f8:d5:f0:20: 04:96:18:01:13:77:ef:28:e3:6a:ed:12:50:a9:55:b8:01:fb: 60:03:66:25:d8:e8:1a:67:e5:44:0a:75:d3:49:d8:39:47:c8: 95:3d:05:75:d2:df:05:5f:26:ea:55:2c:0c:64:d7:25:ea:a6: 6f:b5:7e:a8:6a:df:73:0c:33:5a:53:fe:0b:a8:51:6d:52:4e: 01:68:f6:98:44:31:0f:9d:c5:ad:72:44:8d:83:1d:2b:07:4e: 59:17:c0:6e:3e:50:5f:39:d1:85:80:41:07:9a:7f:a4:dd:da: 83:ac:76:b9:9f:96:15:26:6c:4f:55:38:6c:3c:c6:4d:9b:02: c6:ca:37:8d:a7:a8:53:0d:9e:28:69:fb:b0:78:54:8b:6f:3f: 40:44:cb:27:86:e2:05:c6:17:4d:04:3b:37:52:4c:7c:a5:ed: 8a:b7:61:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX5cZWHe8XzpX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTIwYjEyY2MtMDM2ZS00NDJmLWE0NDgtMjBjZGViYjA2NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8A4HCa1blwhLXC/WtJdV0Daj9Far0iQ+wZB +bjAXOJuuQliGz17RhME/PHtNzMVn3hMgz/gAt6lyQntra/bLnckQyDx4Fee8Msj 9yDhxBYpKxowUXTl+CI00BDIbrDd1UpigyaHpq5movbzg0hnBr0YvXLjvysDc6o6 skpI7WG6L0nPORYNC8cJXKo/AL+UVNYXyKjAcPOQvxQYV8OG87k0o7damWFxESN+ 1ibouyz94KGyuUNXv7h/GhTqtnQWySRUlM1HHim7fKQG/qrIkKSDAFvqJbPqZxt+ VYtZqPlx1xYQ0B8DuxCR87yi6vwnb2h3xjbK257cr4Quj4vP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbhuav0M+mBNmAyuXB4NbkR+zccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGFmNGFiZjYtMmJiYy0z YzE2LWE5YzYtYzhlMjM4ZDA2NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKs9+gBHdDJ0pYmDB71WHN5pt+p+XzUDoTVKV0B3IbTXHnsXaHnQOm7h mZQkzQw5p7b3d6wv4qHArX6Mdv6zG2jJSFmalphrIl4SdUOmAsyLFJAUiuHH+NXw IASWGAETd+8o42rtElCpVbgB+2ADZiXY6Bpn5UQKddNJ2DlHyJU9BXXS3wVfJupV LAxk1yXqpm+1fqhq33MMM1pT/guoUW1STgFo9phEMQ+dxa1yRI2DHSsHTlkXwG4+ UF850YWAQQeaf6Td2oOsdrmflhUmbE9VOGw8xk2bAsbKN42nqFMNnihp+7B4VItv P0BEyyeG4gXGF00EOzdSTHyl7Yq3YXw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:30 2025 by rpki-client