$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa File: 98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa (raw, json) Hash identifier: kyaYqdQn2Xc07P5LVX7JbyAHUv5e/PQYIarxvjZpdK0= Subject key identifier: F8:69:DE:DD:D8:A0:CC:49:3D:82:54:58:59:36:BC:CF:87:D2:CF:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58183EADB40634811101240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:83:ea:db:40:63:48:11:10:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0fba1b1d-1d72-42f6-a4ed-b64fd6034585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e2:73:3f:09:20:dc:95:6b:a8:2d:4c:f0:60: 98:0a:b1:3c:b4:04:a4:45:88:a6:72:54:83:1e:aa: ef:1a:25:3d:4d:00:82:96:6d:04:2c:d8:fd:ac:3c: cb:48:b2:16:37:38:7a:73:a8:d5:7e:ec:9a:fb:65: df:b7:17:a5:15:56:d3:aa:6f:6d:a4:90:4f:ae:47: 46:17:a9:0a:92:9e:9e:08:4d:41:45:09:90:b2:9a: 39:12:97:52:38:8c:a3:e0:e5:9f:e2:fc:77:6d:4c: d7:3a:60:18:e1:f1:86:51:83:f3:c3:d1:04:0f:5d: e1:a2:ba:b3:c6:ea:16:cc:2a:63:d0:af:da:01:34: e3:0c:f6:6b:64:0d:33:87:f6:91:d8:83:04:49:5a: ef:cd:81:96:c4:48:ef:a9:57:08:64:76:66:8d:d9: a5:7a:ff:85:e5:af:d5:d7:5f:92:e3:63:31:d9:a4: d4:1c:1e:d3:94:08:73:2c:3a:16:51:66:cd:4e:0a: ec:de:f0:d7:bc:21:06:ce:37:ad:ac:cb:6a:87:c7: ae:86:06:ee:f9:11:37:8c:68:f6:34:af:50:46:12: d8:da:0c:de:90:11:5e:d8:82:6b:54:d9:4f:b2:7f: 06:49:96:0d:17:f9:eb:db:de:59:0e:30:56:ad:c3: 94:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:69:DE:DD:D8:A0:CC:49:3D:82:54:58:59:36:BC:CF:87:D2:CF:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6c:7f:ab:55:8c:71:f8:ae:8d:08:87:a1:09:c6:9a:bc:36: 3f:bf:c9:33:12:6b:c2:50:fe:34:f5:2f:84:83:43:72:09:fa: 77:ac:ec:fb:35:47:1b:cb:cb:22:65:86:23:f9:11:83:d8:26: 44:70:2a:7c:cb:c0:54:7f:77:e7:99:9a:58:38:cb:ff:1a:ca: 91:b7:55:74:71:dd:50:4c:51:71:b4:28:f2:c2:a7:e3:1e:b0: 89:c4:2a:95:c5:f5:73:f6:c8:5b:30:b4:93:64:91:12:64:a6: e5:73:a8:24:02:82:ec:a0:50:f7:16:4a:87:44:9e:6a:67:89: 74:c7:d6:1f:4d:55:82:fb:fd:b0:b2:b3:02:fc:1e:66:84:91: 11:99:99:80:4e:e7:10:b7:8f:5a:9f:82:04:b3:f8:43:bf:f3: 87:e6:d2:bd:a9:d6:9b:6c:48:a8:76:2e:7d:bb:7e:ec:38:c4: 98:91:c6:9f:e6:be:f1:c3:08:82:df:e9:e3:79:3e:45:70:a8: ad:f2:5f:bf:6d:51:8d:08:e6:f0:88:df:77:65:04:3c:92:46: b0:c0:a2:46:7e:61:f4:b2:bc:67:c0:f3:8b:80:3d:e2:24:51: fa:91:8e:e4:2c:ba:3c:96:64:29:30:30:3c:8a:bc:c5:c6:54: a5:3b:9d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYPq20BjSBEQEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGZiYTFiMWQtMWQ3Mi00MmY2LWE0ZWQtYjY0ZmQ2MDM0NTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuJzPwkg3JVrqC1M8GCYCrE8tASkRYimclSD HqrvGiU9TQCClm0ELNj9rDzLSLIWNzh6c6jVfuya+2XftxelFVbTqm9tpJBPrkdG F6kKkp6eCE1BRQmQspo5EpdSOIyj4OWf4vx3bUzXOmAY4fGGUYPzw9EED13horqz xuoWzCpj0K/aATTjDPZrZA0zh/aR2IMESVrvzYGWxEjvqVcIZHZmjdmlev+F5a/V 11+S42Mx2aTUHB7TlAhzLDoWUWbNTgrs3vDXvCEGzjetrMtqh8euhgbu+RE3jGj2 NK9QRhLY2gzekBFe2IJrVNlPsn8GSZYNF/nr295ZDjBWrcOUowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhp3t3YoMxJPYJUWFk2vM+H0s/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOThkZTA3YWYtZThiYS0z Y2RlLWI2ZWMtOGMwMTYyZWE2MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBsf6tVjHH4ro0Ih6EJxpq8Nj+/yTMSa8JQ/jT1L4SDQ3IJ+nes7Ps1 RxvLyyJlhiP5EYPYJkRwKnzLwFR/d+eZmlg4y/8aypG3VXRx3VBMUXG0KPLCp+Me sInEKpXF9XP2yFswtJNkkRJkpuVzqCQCguygUPcWSodEnmpniXTH1h9NVYL7/bCy swL8HmaEkRGZmYBO5xC3j1qfggSz+EO/84fm0r2p1ptsSKh2Ln27fuw4xJiRxp/m vvHDCILf6eN5PkVwqK3yX79tUY0I5vCI33dlBDySRrDAokZ+YfSyvGfA84uAPeIk UfqRjuQsujyWZCkwMDyKvMXGVKU7nX8= -----END CERTIFICATE-----Generated at Fri Apr 4 08:42:11 2025 by rpki-client