$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bbfd14e-6444-36a8-9b11-53696090cee0.roa File: 8bbfd14e-6444-36a8-9b11-53696090cee0.roa (raw, json) Hash identifier: miDtHQPAPik4NRta9cO2ZRz6gxGgN8TmgFccoQMsN9E= Subject key identifier: 5E:9F:2F:B3:A9:AC:6B:18:01:D5:13:92:9C:99:2E:72:C9:43:29:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58200087D1420FDE28B85C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bbfd14e-6444-36a8-9b11-53696090cee0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:00:08:7d:14:20:fd:e2:8b:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f426c2b6-0fe0-47cd-9a1b-5b64cbe51cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:04:cc:52:93:51:51:8a:da:14:3a:bc:f6: 22:35:60:bd:92:be:10:6f:9d:b6:58:9f:d4:69:8e: c4:24:be:66:79:c2:ca:e3:3e:03:a6:0d:50:82:5b: 46:8a:b1:c9:b3:77:e8:7b:50:63:19:d6:6f:27:74: e8:31:cc:26:7f:3a:90:fb:c8:cf:1e:53:04:6a:ad: 75:8a:1c:20:25:26:a7:79:81:ac:cd:fb:3a:d3:be: 3f:51:03:56:3c:e2:b4:5e:39:c7:00:11:38:92:da: 76:e4:60:76:b8:c4:99:ef:56:2e:60:1b:09:c6:cb: 99:7c:fa:73:c2:29:9d:12:90:4a:46:9b:4c:f0:81: d4:b6:cf:9d:b5:61:79:f0:cb:2b:87:4d:04:1c:de: 5c:63:d7:df:3b:d6:70:3a:4c:be:a3:d0:ec:62:05: 0c:55:37:37:e5:6e:ea:54:16:f9:b4:91:21:43:24: 60:d9:b7:68:bf:b1:38:d0:bb:06:8c:cc:38:33:df: 54:f2:48:17:f4:ee:78:48:7f:f1:cf:83:12:4f:23: a0:d8:34:eb:d5:a6:9a:a8:2f:9f:25:6e:f2:f6:47: 2a:3f:49:ed:2b:a2:22:b1:24:a8:42:d4:7e:f9:70: 20:91:60:dc:2f:9a:9d:fe:e7:67:d7:2d:46:36:f4: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9F:2F:B3:A9:AC:6B:18:01:D5:13:92:9C:99:2E:72:C9:43:29:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bbfd14e-6444-36a8-9b11-53696090cee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:49:18:eb:3b:12:92:10:34:c3:1a:06:db:eb:10:52:81:77: 0b:1c:d3:26:cf:8d:c2:f8:da:6e:b2:b1:a1:c4:0c:31:1c:03: 94:08:28:71:15:42:34:cb:3a:c1:bc:be:03:9b:f5:ac:75:33: 68:6c:1c:29:8c:4d:14:8c:ec:8e:87:d0:a9:06:17:b4:99:4f: 64:03:ee:fe:30:aa:0b:35:53:84:9b:6a:fb:56:44:9d:79:54: 6f:23:7d:0b:23:32:49:53:05:69:f6:90:61:47:63:7d:e2:b2: 29:75:08:97:d7:04:bd:dd:70:68:b4:20:9a:0d:b3:08:79:ac: 08:9a:cf:d0:72:f7:15:d3:a3:5b:d2:eb:24:7c:37:2b:7f:ef: db:23:f5:2e:98:fc:ef:a1:f6:60:5f:cb:96:df:85:fb:5f:90: 71:05:70:31:3d:12:11:f4:4d:7a:ea:b6:5b:d5:10:64:9a:bd: 09:e9:c8:3f:69:53:3d:55:1f:22:46:d0:08:4c:59:c5:d7:35: 43:b8:80:50:3f:fe:0d:2d:47:a7:d4:f1:38:68:ab:6e:d5:b7: a4:1c:32:de:b2:60:97:c2:c4:ca:35:52:84:12:42:c6:57:59: 40:49:3d:5a:47:58:65:ab:38:05:f2:89:b9:95:2c:98:8c:a9: 20:e2:2a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggAIfRQg/eKLhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjQyNmMyYjYtMGZlMC00N2NkLTlhMWItNWI2NGNiZTUxY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlooEzFKTUVGK2hQ6vPYiNWC9kr4Qb522WJ/U aY7EJL5mecLK4z4Dpg1QgltGirHJs3foe1BjGdZvJ3ToMcwmfzqQ+8jPHlMEaq11 ihwgJSaneYGszfs6074/UQNWPOK0XjnHABE4ktp25GB2uMSZ71YuYBsJxsuZfPpz wimdEpBKRptM8IHUts+dtWF58Msrh00EHN5cY9ffO9ZwOky+o9DsYgUMVTc35W7q VBb5tJEhQyRg2bdov7E40LsGjMw4M99U8kgX9O54SH/xz4MSTyOg2DTr1aaaqC+f JW7y9kcqP0ntK6IisSSoQtR++XAgkWDcL5qd/udn1y1GNvT5bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6fL7OprGsYAdUTkpyZLnLJQymcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGJiZmQxNGUtNjQ0NC0z NmE4LTliMTEtNTM2OTYwOTBjZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvs+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5JGOs7EpIQNMMaBtvrEFKBdwsc0ybPjcL42m6ysaHEDDEcA5QIKHEV QjTLOsG8vgOb9ax1M2hsHCmMTRSM7I6H0KkGF7SZT2QD7v4wqgs1U4SbavtWRJ15 VG8jfQsjMklTBWn2kGFHY33isil1CJfXBL3dcGi0IJoNswh5rAiaz9By9xXTo1vS 6yR8Nyt/79sj9S6Y/O+h9mBfy5bfhftfkHEFcDE9EhH0TXrqtlvVEGSavQnpyD9p Uz1VHyJG0AhMWcXXNUO4gFA//g0tR6fU8Thoq27Vt6QcMt6yYJfCxMo1UoQSQsZX WUBJPVpHWGWrOAXyibmVLJiMqSDiKr0= -----END CERTIFICATE-----Generated at Fri Apr 4 08:48:33 2025 by rpki-client