$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa File: 9dbeb59f-5757-3035-b091-70de9d1fb12f.roa (raw, json) Hash identifier: qvxzh2JJqDs3uZhXVzhyL2K0Q4uAjvqSDDWkVgZNV0A= Subject key identifier: F8:3C:A6:04:4D:82:F3:90:27:21:48:34:0A:32:B4:CF:72:92:F8:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820AB6499F6CEA05239200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0a:b6:49:9f:6c:ea:05:23:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9d18f564-0823-4d2d-875b-a7f6f0c0d28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:0e:d9:d6:da:41:78:80:6e:0a:65:ca:ce: 86:dc:f5:a9:aa:f2:bd:b8:76:0a:d1:dc:52:41:42: 38:91:4d:b8:bc:b3:61:cc:bf:ec:d1:fc:db:2c:43: de:5e:86:c0:e0:fd:61:10:db:e1:eb:cb:f1:e7:c8: 1e:5d:f6:cf:e7:2c:21:28:32:d8:14:b4:f0:d1:6c: 5d:04:37:3d:ee:7b:5a:c1:84:bc:16:f9:4a:93:6b: 52:08:29:b8:4b:cc:a3:91:6b:73:9f:a1:8e:54:36: c0:ba:32:75:e1:9c:23:8e:d7:28:44:67:63:14:ac: a6:d8:53:52:8b:b8:05:eb:81:40:28:1e:d0:b5:be: d9:bb:c6:6e:e9:d3:2e:b7:2d:33:66:12:5c:0b:70: 63:ef:cf:9e:fe:10:25:fb:ed:5c:6f:7f:5c:29:11: fd:dc:ca:9e:c9:b0:07:3e:26:c4:ae:c0:bf:c4:dd: 6c:7c:e1:e2:e4:ff:e7:d4:58:7b:1d:5d:e3:41:4b: a3:aa:5c:e8:0e:3f:7f:ff:f7:b9:aa:9e:2e:5b:ba: 6e:5c:04:3c:a5:28:c9:15:48:fa:52:9b:07:b6:a8: 32:7a:d9:cd:fb:22:c0:e4:28:7b:54:88:bc:fc:f9: a6:a7:c6:90:a2:f7:2e:3f:16:c3:28:61:9a:2f:2f: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3C:A6:04:4D:82:F3:90:27:21:48:34:0A:32:B4:CF:72:92:F8:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:9a:c5:f2:9d:53:02:5e:e7:73:53:43:7b:42:89:6e:de:a1: 40:f0:09:bc:84:2b:0a:c4:dc:56:aa:55:22:78:c3:9e:cd:8b: 45:d4:65:2e:df:90:6c:b8:32:b1:1c:59:5c:ce:4e:89:79:74: a6:16:0e:fa:89:70:49:4c:5f:be:c7:5d:71:c2:be:18:40:4e: 96:f0:ac:b7:03:eb:18:e7:31:e3:6a:74:11:66:f1:3f:1c:d0: ac:c8:86:ba:e9:fc:7c:aa:70:58:33:46:6b:52:6d:ae:da:87: 5c:7f:1f:38:70:c2:a3:3d:2b:b2:0a:ba:2c:a4:87:42:45:2f: f1:39:6c:61:51:5c:68:f0:d9:74:a2:2a:77:7e:45:8a:85:88: f6:5b:76:38:68:75:b7:5f:c7:d5:d8:3f:29:87:ea:0e:4f:c6: 84:01:90:21:22:9b:f0:52:6d:17:ef:6d:ca:df:aa:8a:a5:e4: e7:89:68:f5:c6:dd:86:24:0e:8b:7c:2d:dc:95:97:a4:86:dd: 55:41:00:c6:b2:d7:b7:e3:a6:82:de:fe:68:3d:17:ae:0e:bd: 65:36:04:96:da:9c:91:ef:b6:77:e2:18:bf:20:ca:35:95:73: 3b:6a:a4:7a:90:b0:ad:08:58:29:4e:1c:66:92:43:99:5a:87: d8:82:40:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggq2SZ9s6gUjkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OWQxOGY1NjQtMDgyMy00ZDJkLTg3NWItYTdmNmYwYzBkMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSIO2dbaQXiAbgplys6G3PWpqvK9uHYK0dxS QUI4kU24vLNhzL/s0fzbLEPeXobA4P1hENvh68vx58geXfbP5ywhKDLYFLTw0Wxd BDc97ntawYS8FvlKk2tSCCm4S8yjkWtzn6GOVDbAujJ14ZwjjtcoRGdjFKym2FNS i7gF64FAKB7Qtb7Zu8Zu6dMuty0zZhJcC3Bj78+e/hAl++1cb39cKRH93MqeybAH PibErsC/xN1sfOHi5P/n1Fh7HV3jQUujqlzoDj9///e5qp4uW7puXAQ8pSjJFUj6 UpsHtqgyetnN+yLA5Ch7VIi8/Pmmp8aQovcuPxbDKGGaLy9XiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg8pgRNgvOQJyFINAoytM9ykvicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWRiZWI1OWYtNTc1Ny0z MDM1LWIwOTEtNzBkZTlkMWZiMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCaxfKdUwJe53NTQ3tCiW7eoUDwCbyEKwrE3FaqVSJ4w57Ni0XUZS7f kGy4MrEcWVzOTol5dKYWDvqJcElMX77HXXHCvhhATpbwrLcD6xjnMeNqdBFm8T8c 0KzIhrrp/HyqcFgzRmtSba7ah1x/HzhwwqM9K7IKuiykh0JFL/E5bGFRXGjw2XSi Knd+RYqFiPZbdjhodbdfx9XYPymH6g5PxoQBkCEim/BSbRfvbcrfqoql5OeJaPXG 3YYkDot8LdyVl6SG3VVBAMay17fjpoLe/mg9F64OvWU2BJbanJHvtnfiGL8gyjWV cztqpHqQsK0IWClOHGaSQ5lah9iCQBM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:42 2025 by rpki-client