$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa File: 95de198e-9bc7-3f62-8579-2e33c1164c71.roa (raw, json) Hash identifier: P7ctt5EozD7vfh4a/O/Fi98wfJ0gWw0PISgjjveR2/w= Subject key identifier: A0:7C:BF:68:AE:7D:BE:2A:AD:E8:E1:23:EC:C0:47:B6:93:E4:10:CF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12FBA79DE64518E103100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2f:ba:79:de:64:51:8e:10:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=f5c6ad75-f54e-4512-b40c-93c88a1dc928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b6:8d:8e:e9:bc:8d:50:97:8a:b4:0e:b3:db: d9:98:32:c0:aa:3d:74:30:96:dd:c6:77:61:d2:de: be:bb:fa:d4:c5:60:24:f9:0d:11:1b:b4:1e:bb:62: bd:61:16:6a:9b:d8:19:16:de:9e:07:0e:f4:18:b7: 2c:5d:2b:42:ab:b1:f7:18:51:a5:04:b5:de:8f:00: f3:92:07:f6:f4:b9:f4:df:bc:a1:8f:ab:cd:d3:3f: 38:ee:e5:24:20:a2:c5:48:47:be:c9:79:06:0c:22: 37:81:15:f7:7d:ac:91:22:10:c5:6e:bd:cc:9f:ca: a5:03:4d:8a:75:fa:41:52:9d:ec:6c:7c:dc:84:38: 93:75:2b:02:7a:eb:6f:5e:21:1b:44:a7:3d:ce:07: a0:10:33:4a:57:2e:ff:e8:33:8b:48:07:ad:c6:c6: f8:b1:bd:8e:a4:2d:7c:12:95:71:48:5a:b2:dd:2f: 30:ea:71:ab:8a:3b:a6:60:27:0b:7b:38:f2:67:5c: 08:7e:8d:ef:fd:4b:82:57:17:50:de:f3:49:66:23: 82:08:a7:fe:82:31:47:f8:23:c0:fa:06:fc:27:5d: 95:33:f5:74:d3:97:df:3d:9c:8e:d6:c2:5a:65:f7: 14:bd:c1:c7:0a:22:b4:6e:dd:f7:5a:be:6d:de:53: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7C:BF:68:AE:7D:BE:2A:AD:E8:E1:23:EC:C0:47:B6:93:E4:10:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cf:33:40:6d:0d:fb:50:76:0b:a2:92:ee:38:6e:17:1b:1f: ea:54:26:db:f7:60:db:e7:e0:09:9f:6c:f3:80:22:52:0d:5d: 59:41:7b:c2:ee:75:67:bc:d9:1f:41:ce:e3:2d:5d:44:53:98: 16:df:c8:27:01:90:9d:cb:db:74:1a:91:12:61:eb:54:c4:77: 3c:95:72:fe:56:d8:57:00:51:f9:97:ee:57:d2:79:e1:19:49: ad:6e:ae:f2:7c:05:8c:3c:b9:2f:b5:cf:12:10:11:6f:57:06: 94:39:b1:4b:e0:94:42:35:a5:dd:37:a4:54:72:ac:31:9c:de: 19:ce:f6:b9:d4:3c:87:73:79:62:b9:57:3a:7d:3c:1d:3c:44: db:88:d0:79:c3:c6:45:91:fe:c2:50:98:53:4c:64:d2:7e:59: 76:09:3a:bf:56:ba:9b:83:75:3d:2e:f2:1f:6b:63:17:b8:7f: 37:d4:28:94:44:cf:b6:84:90:f4:48:14:1a:7d:fc:fe:98:da: fe:50:50:c5:23:b8:65:cd:38:b3:d0:ff:31:f5:5b:6a:f8:b6: 72:fe:66:ff:5c:24:e2:c6:1b:25:49:c3:1f:61:42:45:6b:67: e0:27:c6:c5:25:7f:75:e7:a3:c7:61:07:8f:6b:55:62:f1:b1: de:55:a6:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS+6ed5kUY4QMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZjVjNmFkNzUtZjU0ZS00NTEyLWI0MGMtOTNjODhhMWRjOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7aNjum8jVCXirQOs9vZmDLAqj10MJbdxndh 0t6+u/rUxWAk+Q0RG7Qeu2K9YRZqm9gZFt6eBw70GLcsXStCq7H3GFGlBLXejwDz kgf29Ln037yhj6vN0z847uUkIKLFSEe+yXkGDCI3gRX3fayRIhDFbr3Mn8qlA02K dfpBUp3sbHzchDiTdSsCeutvXiEbRKc9zgegEDNKVy7/6DOLSAetxsb4sb2OpC18 EpVxSFqy3S8w6nGrijumYCcLezjyZ1wIfo3v/UuCVxdQ3vNJZiOCCKf+gjFH+CPA +gb8J12VM/V005ffPZyO1sJaZfcUvcHHCiK0bt33Wr5t3lOsZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB8v2iufb4qrejhI+zAR7aT5BDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTVkZTE5OGUtOWJjNy0z ZjYyLTg1NzktMmUzM2MxMTY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHPM0BtDftQdguiku44bhcbH+pUJtv3YNvn4AmfbPOAIlINXVlBe8Lu dWe82R9BzuMtXURTmBbfyCcBkJ3L23QakRJh61TEdzyVcv5W2FcAUfmX7lfSeeEZ Sa1urvJ8BYw8uS+1zxIQEW9XBpQ5sUvglEI1pd03pFRyrDGc3hnO9rnUPIdzeWK5 Vzp9PB08RNuI0HnDxkWR/sJQmFNMZNJ+WXYJOr9WupuDdT0u8h9rYxe4fzfUKJRE z7aEkPRIFBp9/P6Y2v5QUMUjuGXNOLPQ/zH1W2r4tnL+Zv9cJOLGGyVJwx9hQkVr Z+AnxsUlf3Xno8dhB49rVWLxsd5VpiI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:36 2025 by rpki-client