$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa File: a437d84b-eb8c-3132-8b30-68325fa0f33d.roa (raw, json) Hash identifier: dFxDakILXjL8crWQmc6bz6UmISM6Ib6/b6TIdHPlRss= Subject key identifier: 0F:BC:4F:E4:8E:28:22:13:DA:A2:AE:4E:66:97:C5:00:DF:B5:7C:4C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA125D909A4A78C5DB2FC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:25:d9:09:a4:a7:8c:5d:b2:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=6bdde51b-0d81-4321-aa85-83a2d82c1797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:28:27:13:7b:4c:5f:43:19:e4:a3:b6:d0: 01:81:cb:91:38:cd:2f:40:34:42:5b:67:90:9a:44: a3:fd:00:86:54:e2:ec:60:58:90:80:3c:ad:41:e9: 11:06:a9:60:2d:54:fe:72:c1:7f:89:91:14:43:27: 30:48:1a:f4:0a:60:cf:ef:06:c1:3c:5a:6a:83:16: b9:c1:03:fd:6f:64:86:c5:06:28:a6:26:d6:58:bb: a1:90:22:4a:79:1f:95:c8:0d:c3:4f:33:5f:d4:83: bb:28:6f:a4:71:62:e8:9c:d9:bb:ca:c8:44:9b:93: cb:2b:52:3a:72:a0:5f:05:32:2a:e8:5c:25:ed:81: cf:75:89:1d:41:6a:87:84:ed:c0:fc:e6:26:3c:12: 55:9c:46:c4:09:cd:a3:40:36:33:45:e2:e1:8b:39: c0:0c:4f:4a:e6:d8:5c:11:00:fb:fe:c2:c8:03:7d: 9d:3f:22:7b:06:99:99:4d:b5:47:e6:15:7e:6d:f1: db:df:83:43:c6:9f:5e:68:2e:6c:59:98:d8:23:22: c9:8d:fe:50:a0:35:65:63:41:54:6f:62:7c:b0:a7: 51:24:af:ac:b0:ff:ca:da:3c:82:4b:57:13:dc:90: c2:eb:63:ef:10:f0:2f:95:a5:cd:6b:30:a1:1f:70: b3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BC:4F:E4:8E:28:22:13:DA:A2:AE:4E:66:97:C5:00:DF:B5:7C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ed:ea:0c:13:e3:f7:06:2e:90:64:92:f1:cc:9a:20:73:8b: 53:69:24:88:87:f5:78:64:c2:7c:69:93:95:5b:59:e3:95:a6: 11:66:99:5a:12:ec:f7:31:9e:8c:8f:06:8b:97:b1:0b:33:64: e6:74:a7:7c:2b:0c:68:6a:47:34:01:57:79:ec:3d:93:1b:91: 9c:db:98:5c:80:83:aa:ae:ba:fa:4b:af:ed:85:c1:8c:93:f4: 66:c2:8c:b2:61:2d:3a:4e:5a:39:e7:7b:b6:7e:1a:00:ab:e0: cb:e8:d8:b4:2e:c7:a7:37:74:70:6b:43:13:5f:99:fe:85:27: 1e:d9:dd:c6:e3:20:8d:4b:6b:de:5c:77:0c:60:bd:3e:98:c3: c3:d0:4a:38:d4:58:bb:fe:c5:61:58:f6:99:53:0f:2c:46:52: 60:5f:d2:34:b2:3f:59:74:d3:77:1b:8a:1c:b8:e9:c9:74:64: 3c:06:2d:e1:cf:97:a9:a6:ab:d1:04:ea:79:3b:fe:75:87:9b: fc:d6:fa:b2:e2:73:e8:92:81:fe:35:cf:76:b0:1a:22:6a:dd: 88:66:86:2f:36:ac:bd:8d:e8:c2:10:ca:dc:0d:65:e2:ec:cc: 06:68:d4:00:a6:7d:a7:da:03:5e:fd:e0:a4:6a:ce:46:c2:db: c7:98:c4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSXZCaSnjF2y/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NmJkZGU1MWItMGQ4MS00MzIxLWFhODUtODNhMmQ4MmMxNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiosoJxN7TF9DGeSjttABgcuROM0vQDRCW2eQ mkSj/QCGVOLsYFiQgDytQekRBqlgLVT+csF/iZEUQycwSBr0CmDP7wbBPFpqgxa5 wQP9b2SGxQYopibWWLuhkCJKeR+VyA3DTzNf1IO7KG+kcWLonNm7yshEm5PLK1I6 cqBfBTIq6Fwl7YHPdYkdQWqHhO3A/OYmPBJVnEbECc2jQDYzReLhiznADE9K5thc EQD7/sLIA32dPyJ7BpmZTbVH5hV+bfHb34NDxp9eaC5sWZjYIyLJjf5QoDVlY0FU b2J8sKdRJK+ssP/K2jyCS1cT3JDC62PvEPAvlaXNazChH3CzPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+8T+SOKCIT2qKuTmaXxQDftXxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzN2Q4NGItZWI4Yy0z MTMyLThiMzAtNjgzMjVmYTBmMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHt6gwT4/cGLpBkkvHMmiBzi1NpJIiH9Xhkwnxpk5VbWeOVphFmmVoS 7PcxnoyPBouXsQszZOZ0p3wrDGhqRzQBV3nsPZMbkZzbmFyAg6quuvpLr+2FwYyT 9GbCjLJhLTpOWjnne7Z+GgCr4Mvo2LQux6c3dHBrQxNfmf6FJx7Z3cbjII1La95c dwxgvT6Yw8PQSjjUWLv+xWFY9plTDyxGUmBf0jSyP1l003cbihy46cl0ZDwGLeHP l6mmq9EE6nk7/nWHm/zW+rLic+iSgf41z3awGiJq3Yhmhi82rL2N6MIQytwNZeLs zAZo1ACmfafaA1794KRqzkbC28eYxO8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:19 2025 by rpki-client