$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa File: a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa (raw, json) Hash identifier: yVPlAA6vFxryINJsNjotrLJW66FdAWHkqqPTqzRGmTk= Subject key identifier: E7:16:97:5F:70:77:27:C1:74:7E:4D:7C:56:82:97:E0:7A:06:96:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58225244AFB5B2A67D50780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:25:24:4a:fb:5b:2a:67:d5:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=29296817-b427-4189-a11a-c067681722ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:8e:dc:63:2c:ae:4c:c6:88:b7:fa:39:14: 46:72:a8:f5:2e:3d:cf:49:72:4c:e0:a3:d7:dd:c4: 96:c7:ff:4c:4e:5a:67:d9:75:f6:46:92:ce:a4:f6: 6e:26:d5:ff:7b:59:97:b6:7a:4e:14:cc:2b:0b:66: 7c:50:ca:36:10:2e:5a:4e:14:91:cf:50:ec:23:66: 3d:b7:dd:c4:2b:ae:bf:57:cf:1a:5b:42:73:66:aa: b8:65:f6:ae:30:9c:dc:2f:21:03:a9:bd:08:22:e3: e8:72:ac:c8:3a:ef:80:79:4c:4a:23:3c:07:56:07: f6:91:30:99:b4:d1:4c:63:f6:10:25:46:15:67:6c: 87:af:0e:21:fb:24:f3:92:f3:63:c9:6a:db:6b:da: 99:e8:da:9d:23:bb:37:75:c6:a9:6b:e6:15:3b:23: 83:ff:1e:bb:6e:75:87:f2:ab:5c:cf:48:d2:bd:9d: e3:5d:2b:0f:6d:94:f3:04:b3:d1:13:41:58:33:83: e9:98:21:d5:62:bd:0c:bf:ea:da:66:15:5a:9d:ca: 80:c2:c7:dd:8b:84:b9:93:74:93:fc:8a:06:4e:0b: 66:2a:d7:b2:f5:dc:8b:b6:d9:b9:dc:05:33:8f:09: fc:65:d6:54:94:c1:b4:44:c3:38:44:ea:58:cc:9b: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:16:97:5F:70:77:27:C1:74:7E:4D:7C:56:82:97:E0:7A:06:96:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:6c:2b:a0:25:62:f7:71:7e:7c:bc:c0:9d:da:3c:26:08:99: da:df:2a:56:80:2f:c1:80:01:86:f3:a2:e0:fd:27:52:9d:42: 6b:3a:54:8f:ee:34:e2:63:e9:1a:9f:9f:1c:10:4b:17:c7:70: 9d:f2:b1:1b:a4:de:0c:ea:2a:78:99:f6:ca:44:45:54:64:68: 5a:f6:c1:7d:77:ca:e7:4a:b5:40:ad:37:14:e0:ae:a5:09:50: 54:b7:0c:d1:38:5f:93:07:f2:1e:85:8d:97:af:17:15:7d:b8: 2f:e3:03:7b:a3:a2:65:68:38:64:08:43:a1:af:6e:63:84:d7: 76:8d:1b:54:8d:73:10:ee:df:5e:d0:fd:d8:64:42:23:4d:67: a9:6c:2e:da:7f:72:31:c4:55:df:c1:ca:3f:1f:47:a1:fd:41: 11:6e:d0:18:43:c0:da:24:5e:b6:91:1b:ce:99:1b:0c:79:ff: 72:6e:8d:5d:a0:13:a2:8e:8f:44:fa:02:1a:ad:ff:f1:05:a0: b4:cf:45:f4:4d:1c:3b:24:1e:6c:a8:ce:3e:8c:b0:f7:e6:85: b5:ba:6d:80:2c:a1:14:07:e1:b7:3c:8e:46:4b:d2:cb:f4:b4: 91:df:84:29:a1:a8:da:db:b9:0b:42:6d:35:8a:b2:94:d5:67: c4:a5:8c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiUkSvtbKmfVB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjkyOTY4MTctYjQyNy00MTg5LWExMWEtYzA2NzY4MTcyMmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9KO3GMsrkzGiLf6ORRGcqj1Lj3PSXJM4KPX 3cSWx/9MTlpn2XX2RpLOpPZuJtX/e1mXtnpOFMwrC2Z8UMo2EC5aThSRz1DsI2Y9 t93EK66/V88aW0JzZqq4ZfauMJzcLyEDqb0IIuPocqzIOu+AeUxKIzwHVgf2kTCZ tNFMY/YQJUYVZ2yHrw4h+yTzkvNjyWrba9qZ6NqdI7s3dcapa+YVOyOD/x67bnWH 8qtcz0jSvZ3jXSsPbZTzBLPRE0FYM4PpmCHVYr0Mv+raZhVancqAwsfdi4S5k3ST /IoGTgtmKtey9dyLttm53AUzjwn8ZdZUlMG0RMM4ROpYzJtyEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcWl19wdyfBdH5NfFaCl+B6BpYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA5ZTRkYjQtN2QyYi0z YmQ4LWEzNjktMTFiNGQxNzE0YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdsK6AlYvdxfny8wJ3aPCYImdrfKlaAL8GAAYbzouD9J1KdQms6VI/u NOJj6RqfnxwQSxfHcJ3ysRuk3gzqKniZ9spERVRkaFr2wX13yudKtUCtNxTgrqUJ UFS3DNE4X5MH8h6FjZevFxV9uC/jA3ujomVoOGQIQ6GvbmOE13aNG1SNcxDu317Q /dhkQiNNZ6lsLtp/cjHEVd/Byj8fR6H9QRFu0BhDwNokXraRG86ZGwx5/3JujV2g E6KOj0T6Ahqt//EFoLTPRfRNHDskHmyozj6MsPfmhbW6bYAsoRQH4bc8jkZL0sv0 tJHfhCmhqNrbuQtCbTWKspTVZ8SljEM= -----END CERTIFICATE-----Generated at Fri Apr 4 08:27:17 2025 by rpki-client