$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa File: a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa (raw, json) Hash identifier: yM71VaBxUuohACQ7877yi/oN4K5Ab5dolfrluWTa9ps= Subject key identifier: F2:F1:44:6E:51:6C:52:6C:10:D2:2F:70:CA:7D:71:82:06:33:91:42 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818B96EA90E45224D07800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8b:96:ea:90:e4:52:24:d0:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1c102e38-86e0-4b37-b1c1-d05aac4e1505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b8:db:a6:88:2f:b5:3d:86:35:6f:c0:09:03: 7a:ad:9a:e9:27:4d:9f:37:f3:d4:86:da:74:31:b8: 97:1d:9b:b0:2d:8a:d7:49:45:fa:a8:69:a7:8c:99: f1:09:8d:e2:29:00:20:6f:ba:d1:12:0e:09:be:73: e7:7d:00:f2:6a:65:d6:4a:53:4b:bc:2f:e6:a0:f2: 92:43:c7:7a:7a:fa:63:e1:e1:b6:6b:c4:bc:00:93: 3f:45:5b:89:20:3d:f5:2e:0b:ea:91:c5:57:64:03: 57:1e:d3:28:31:8b:27:d7:1a:94:01:92:e7:9c:f6: 84:1a:81:18:da:84:16:fc:e5:5f:17:cb:08:49:4a: b4:bb:40:97:eb:79:eb:1e:fe:52:18:46:71:44:95: c6:d9:3a:92:6f:ec:29:8d:94:33:07:d3:58:8c:71: 35:4e:e0:17:39:84:16:54:b5:d3:3a:bb:17:d9:e1: ea:42:41:fa:77:e4:68:3b:fb:7d:80:ae:c1:be:ea: 93:8e:ca:59:41:fa:51:d0:97:78:5b:2a:e1:bc:41: 87:82:e7:8b:52:57:cd:1e:d2:9e:98:d9:90:44:86: 80:21:d9:32:a3:53:8d:c4:58:86:b1:66:f1:99:2e: 06:b0:1e:45:c4:a0:a2:f7:d1:c2:36:85:4a:26:95: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F1:44:6E:51:6C:52:6C:10:D2:2F:70:CA:7D:71:82:06:33:91:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d5:82:c1:be:b2:c9:ba:44:54:02:43:71:c0:00:ea:4e:6a: 4e:41:ab:e5:dc:92:42:dd:a1:a5:80:72:c5:98:61:dd:27:ec: 12:f6:f3:91:30:cd:85:25:df:c9:64:20:8f:6b:c3:ee:e0:a6: 05:9b:a1:7f:fe:7e:81:32:ab:81:62:bb:f0:d3:3b:42:f6:bd: 4f:63:5c:21:1d:95:cd:3f:c8:b9:26:b0:e1:d7:fe:b4:f4:f1: e2:01:74:a9:26:e2:5a:ac:1a:2f:c8:67:1a:cd:e2:fe:58:63: b9:4b:d4:eb:a0:19:52:ba:26:6e:c5:06:ed:be:e2:c8:4d:04: 1d:9f:79:e9:bf:a0:93:53:62:b1:8a:6f:78:98:c0:11:63:28: a1:c9:58:66:67:27:5a:b4:5d:e0:2d:1a:6e:d2:af:fc:4c:b6: 8c:ba:8f:5d:68:64:6e:45:eb:97:a7:b4:81:4b:90:11:18:50: ea:52:b3:19:d2:b7:16:02:67:e8:ba:2d:09:59:ac:10:cb:b0: aa:97:7f:f6:87:05:d3:8d:90:70:27:b0:23:75:38:71:4f:09: 77:dd:e7:93:e0:e3:fe:8a:29:35:51:b5:52:72:a5:af:3d:2c: 12:2a:03:28:d2:81:73:ac:0f:06:7c:d5:ed:b8:57:25:a2:07: 5f:e2:8f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYuW6pDkUiTQeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWMxMDJlMzgtODZlMC00YjM3LWIxYzEtZDA1YWFjNGUxNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77jbpogvtT2GNW/ACQN6rZrpJ02fN/PUhtp0 MbiXHZuwLYrXSUX6qGmnjJnxCY3iKQAgb7rREg4JvnPnfQDyamXWSlNLvC/moPKS Q8d6evpj4eG2a8S8AJM/RVuJID31LgvqkcVXZANXHtMoMYsn1xqUAZLnnPaEGoEY 2oQW/OVfF8sISUq0u0CX63nrHv5SGEZxRJXG2TqSb+wpjZQzB9NYjHE1TuAXOYQW VLXTOrsX2eHqQkH6d+RoO/t9gK7BvuqTjspZQfpR0Jd4WyrhvEGHgueLUlfNHtKe mNmQRIaAIdkyo1ONxFiGsWbxmS4GsB5FxKCi99HCNoVKJpVyWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLxRG5RbFJsENIvcMp9cYIGM5FCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTU0ZjNmN2ItMzVjYy0z NTkyLTliOGItZjc5NjNiYTcwOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHVgsG+ssm6RFQCQ3HAAOpOak5Bq+XckkLdoaWAcsWYYd0n7BL285Ew zYUl38lkII9rw+7gpgWboX/+foEyq4Fiu/DTO0L2vU9jXCEdlc0/yLkmsOHX/rT0 8eIBdKkm4lqsGi/IZxrN4v5YY7lL1OugGVK6Jm7FBu2+4shNBB2feem/oJNTYrGK b3iYwBFjKKHJWGZnJ1q0XeAtGm7Sr/xMtoy6j11oZG5F65entIFLkBEYUOpSsxnS txYCZ+i6LQlZrBDLsKqXf/aHBdONkHAnsCN1OHFPCXfd55Pg4/6KKTVRtVJypa89 LBIqAyjSgXOsDwZ81e24VyWiB1/ij8o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:30 2025 by rpki-client