$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa File: a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa (raw, json) Hash identifier: bE159bdV5kQqzrLIBa7b7txB0yw7TM91YWF8EIteXyM= Subject key identifier: 33:15:35:7B:19:1C:34:F8:33:0C:88:FE:81:40:47:3E:B4:8B:83:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12404A0516AFF7552FFA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.251.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:24:04:a0:51:6a:ff:75:52:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=e7e5880b-7105-4333-a555-335059717ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:19:fd:49:d2:08:54:f5:64:bf:90:c1:ba:8e: 87:85:9c:2c:11:dc:e9:0e:54:67:88:f0:ab:99:4b: e0:d2:ab:a6:0a:68:24:8d:eb:57:c2:5e:03:03:90: a9:12:c3:a2:dd:99:19:80:2d:6f:ae:7a:5c:e4:85: d2:7f:13:46:0b:aa:15:b1:f8:85:9c:c3:43:bd:d2: bb:1e:6b:9c:88:b8:d2:a9:32:26:51:2e:dd:4b:8e: 94:52:86:ce:c0:9b:12:0b:3b:b3:d9:2c:85:34:75: d9:06:19:46:dd:f6:44:8f:70:c3:aa:9e:f6:01:af: 80:9d:2a:80:74:35:02:40:fd:c7:ee:a5:79:ee:1a: 8b:f8:aa:c8:26:de:06:b4:77:cf:50:ce:31:02:3e: af:c4:ed:a9:fd:56:15:c5:56:e0:0a:b4:9d:b4:cc: 64:07:c4:d0:da:33:d8:05:2d:e3:05:81:5a:b3:ab: 06:df:fb:cb:54:0f:03:bb:16:a5:1e:c3:4e:cb:ca: 88:ab:63:05:c4:1d:12:93:50:99:19:36:45:8e:26: 00:83:c5:36:8b:ce:b3:3c:26:2b:ef:de:ef:9f:6d: bc:11:d8:88:80:8b:1b:1d:b9:c0:73:e9:f7:80:5e: 49:ac:cb:84:03:47:60:74:22:ad:01:8f:42:24:7c: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:15:35:7B:19:1C:34:F8:33:0C:88:FE:81:40:47:3E:B4:8B:83:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f2:b5:a2:b5:7b:c6:c7:d3:12:6b:11:07:f1:1c:fc:d4:2a: 2f:7c:0f:1a:de:30:5e:a3:c5:0f:f1:bb:f7:70:04:37:d2:d6: 5c:90:53:44:95:d8:59:0c:46:65:ab:81:21:1e:9e:0d:9d:b9: d9:df:ef:d5:5d:ff:e0:0e:83:cf:54:6b:93:2e:c4:9d:83:24: 60:f6:ca:32:89:b0:24:b8:9c:ea:65:3c:6c:67:f1:2c:aa:17: bb:90:e3:e9:2a:2b:2a:bd:50:07:8f:aa:09:2f:29:0b:57:ed: 6a:1d:c5:e8:ad:fe:9c:9e:98:3e:ce:5b:4b:64:d9:89:6d:9e: 84:73:2a:84:9c:66:71:30:a3:5f:f2:3c:ab:ff:36:8f:11:2d: f9:47:87:68:d7:49:6c:df:c6:a2:7c:f2:1d:8e:fa:b1:e8:74: 49:79:69:ba:e8:f6:0d:62:c7:b5:74:9c:f7:54:6e:70:43:4f: 5f:75:1d:0a:bd:3d:90:8a:5c:ec:9a:69:53:fa:05:2e:7c:b5: fb:8b:cb:f1:42:4b:15:10:f8:94:6c:b1:12:75:f6:b1:c9:9e: 5d:82:95:71:20:7c:9d:e9:bb:e4:e4:10:4e:ec:32:70:95:a6: a9:78:44:36:be:93:ca:a1:72:36:3f:6f:09:9c:28:bc:8f:5d: 08:e9:f9:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSQEoFFq/3VS/6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZTdlNTg4MGItNzEwNS00MzMzLWE1NTUtMzM1MDU5NzE3ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRn9SdIIVPVkv5DBuo6HhZwsEdzpDlRniPCr mUvg0qumCmgkjetXwl4DA5CpEsOi3ZkZgC1vrnpc5IXSfxNGC6oVsfiFnMNDvdK7 HmuciLjSqTImUS7dS46UUobOwJsSCzuz2SyFNHXZBhlG3fZEj3DDqp72Aa+AnSqA dDUCQP3H7qV57hqL+KrIJt4GtHfPUM4xAj6vxO2p/VYVxVbgCrSdtMxkB8TQ2jPY BS3jBYFas6sG3/vLVA8DuxalHsNOy8qIq2MFxB0Sk1CZGTZFjiYAg8U2i86zPCYr 797vn228EdiIgIsbHbnAc+n3gF5JrMuEA0dgdCKtAY9CJHwi7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMVNXsZHDT4MwyI/oFARz60i4PUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYThkNjVhZTEtODYyMi0z ZjlhLTk1ZTEtZDRiYTI2ZjJhYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHytaK1e8bH0xJrEQfxHPzUKi98DxreMF6jxQ/xu/dwBDfS1lyQU0SV 2FkMRmWrgSEeng2dudnf79Vd/+AOg89Ua5MuxJ2DJGD2yjKJsCS4nOplPGxn8Syq F7uQ4+kqKyq9UAePqgkvKQtX7Wodxeit/pyemD7OW0tk2YltnoRzKoScZnEwo1/y PKv/No8RLflHh2jXSWzfxqJ88h2O+rHodEl5abro9g1ix7V0nPdUbnBDT191HQq9 PZCKXOyaaVP6BS58tfuLy/FCSxUQ+JRssRJ19rHJnl2ClXEgfJ3pu+TkEE7sMnCV pql4RDa+k8qhcjY/bwmcKLyPXQjp+dw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:56 2025 by rpki-client