$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa File: 8e3f565f-19fb-3655-be31-21a3ad990702.roa (raw, json) Hash identifier: ZIrn548221ZvEpgcx+nRIwLuVCVnlp4L2XI/+M2ZzpI= Subject key identifier: 57:08:EC:E1:A4:59:FB:36:61:15:60:57:E4:EB:1E:4B:17:E6:DD:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820B4CFE771CCC30920C50 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0b:4c:fe:77:1c:cc:30:92:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cc349143-2e9e-4a80-bc35-5fdecf50a1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:de:7a:60:e4:21:8e:4f:90:45:23:93:8a: 0e:71:bc:c5:33:b5:8f:cc:8d:5a:6d:5c:53:b5:76: e0:47:50:82:cb:65:a7:62:93:8c:16:98:d4:d9:c8: 4a:2e:d9:62:e5:2d:45:68:a4:a6:3b:7d:37:52:21: 6b:09:b6:90:7d:9e:cd:bc:39:86:49:a0:33:b4:ee: 7f:54:89:ea:b5:be:4c:02:ae:3e:0f:b7:66:f8:4d: 6b:0d:ee:c7:58:62:90:8e:99:61:9b:e3:e5:0a:3c: 70:27:52:b0:6f:6f:5b:84:3d:97:2a:52:7c:b7:68: 98:0e:15:e6:99:8d:52:24:39:53:91:24:6a:51:e7: b7:0b:14:bd:69:3f:be:9e:83:f4:6c:01:40:60:a8: 29:03:03:38:fd:e4:b0:bc:43:f5:82:1f:bb:74:ee: 0e:c6:97:13:45:a9:c7:a1:2f:b0:45:00:37:c4:01: b5:48:18:67:df:ec:1d:6c:bd:ec:2e:69:cd:68:d0: 15:4d:6e:d5:4a:14:10:9e:31:05:b3:80:c9:d0:d1: dd:ff:25:79:7d:0c:3b:7a:1f:f1:01:b1:5c:86:b5: 6d:13:8a:7c:16:f0:b9:da:5f:64:f7:9d:57:b7:95: 50:8b:1f:9d:0a:b0:33:a3:99:f3:77:19:70:da:f2: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:08:EC:E1:A4:59:FB:36:61:15:60:57:E4:EB:1E:4B:17:E6:DD:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:05:4b:fd:20:e5:96:06:67:14:aa:71:9e:b2:e0:4d:0f:f9: 0f:3f:ca:1c:84:b4:90:50:cd:77:17:a6:3d:b8:ea:86:18:cc: 77:69:1b:5f:1a:2f:38:23:e9:73:ce:cd:15:cc:8e:12:ef:ce: 3a:79:a7:50:c9:8f:3d:a2:28:5f:df:d2:11:82:99:64:8e:73: 36:1f:1e:9d:44:8e:84:5e:82:23:ac:e6:ce:c5:5e:99:12:5e: e4:1d:f4:7f:23:70:0a:ce:37:0b:1a:06:0b:39:74:11:7c:e7: 13:8e:b2:c1:f9:f4:9c:58:99:ea:df:9c:52:47:8c:54:ed:c3: a2:e2:a8:16:fc:4b:a8:92:54:a6:69:13:d8:f8:98:28:2a:80: 14:7a:3a:b1:df:95:2c:5e:19:00:0c:53:46:16:3e:4b:9f:35: b7:2f:f3:42:0a:e8:92:2d:5c:44:dd:f4:30:cc:30:23:91:7b: 94:06:57:77:5e:a3:1d:21:14:f1:49:11:c4:21:e1:7a:d5:1e: 3f:87:e2:28:d7:2b:21:59:f5:92:dd:ee:97:8f:2c:9e:df:02: b4:3b:e9:c4:9e:bb:94:39:a4:ae:0b:97:84:a3:1b:84:c3:44: 26:3b:9d:38:d1:05:cf:96:3c:44:1a:2b:29:b4:eb:03:d6:87: 54:86:53:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggtM/ncczDCSDFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2MzNDkxNDMtMmU5ZS00YTgwLWJjMzUtNWZkZWNmNTBhMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSveemDkIY5PkEUjk4oOcbzFM7WPzI1abVxT tXbgR1CCy2WnYpOMFpjU2chKLtli5S1FaKSmO303UiFrCbaQfZ7NvDmGSaAztO5/ VInqtb5MAq4+D7dm+E1rDe7HWGKQjplhm+PlCjxwJ1Kwb29bhD2XKlJ8t2iYDhXm mY1SJDlTkSRqUee3CxS9aT++noP0bAFAYKgpAwM4/eSwvEP1gh+7dO4OxpcTRanH oS+wRQA3xAG1SBhn3+wdbL3sLmnNaNAVTW7VShQQnjEFs4DJ0NHd/yV5fQw7eh/x AbFchrVtE4p8FvC52l9k951Xt5VQix+dCrAzo5nzdxlw2vL8oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcI7OGkWfs2YRVgV+TrHksX5t1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGUzZjU2NWYtMTlmYi0z NjU1LWJlMzEtMjFhM2FkOTkwNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoFS/0g5ZYGZxSqcZ6y4E0P+Q8/yhyEtJBQzXcXpj246oYYzHdpG18a Lzgj6XPOzRXMjhLvzjp5p1DJjz2iKF/f0hGCmWSOczYfHp1EjoRegiOs5s7FXpkS XuQd9H8jcArONwsaBgs5dBF85xOOssH59JxYmerfnFJHjFTtw6LiqBb8S6iSVKZp E9j4mCgqgBR6OrHflSxeGQAMU0YWPkufNbcv80IK6JItXETd9DDMMCORe5QGV3de ox0hFPFJEcQh4XrVHj+H4ijXKyFZ9ZLd7pePLJ7fArQ76cSeu5Q5pK4Ll4SjG4TD RCY7nTjRBc+WPEQaKym06wPWh1SGUyY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:22 2025 by rpki-client