$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac78b85f-2533-39cc-a4c6-0e6e59274549.roa File: ac78b85f-2533-39cc-a4c6-0e6e59274549.roa (raw, json) Hash identifier: sW5Cy8fVW+5a5BGZ4+uEVeM58zRJX0Gd+xRbChToL4g= Subject key identifier: D1:93:53:6B:07:7A:A5:D0:A1:55:00:5F:DA:28:D2:8F:2D:A1:12:27 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817A580B44CC1163D59580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac78b85f-2533-39cc-a4c6-0e6e59274549.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7a:58:0b:44:cc:11:63:d5:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ba90bfc9-d8d6-4324-baa1-95c97cbc2c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ae:be:2d:c6:71:bd:05:70:01:98:1c:68:80: 97:47:a2:ec:28:77:7c:4f:90:6a:91:bb:5d:ce:2d: cf:4b:3b:e4:2b:62:1c:a7:83:5e:66:29:46:bd:62: fe:62:c2:52:4c:30:4c:61:dd:18:b3:4a:6a:28:9f: 7c:e2:79:e0:b0:34:6c:85:ae:e5:29:5c:2c:88:2c: f1:ec:11:c8:43:da:bc:f2:76:3f:c5:ad:ce:c2:cf: a4:68:60:5c:8b:a3:39:fb:4a:1e:50:24:dc:1c:bc: 49:4a:bb:a1:f4:1a:48:23:86:aa:81:ef:d3:87:b4: d0:e3:d8:9b:68:38:16:a7:73:6f:c9:43:cc:44:98: cc:06:39:4c:24:27:7f:50:02:93:3d:a0:76:5d:b8: 1a:f4:80:16:f2:a8:7b:b4:c6:0c:e1:fe:50:52:44: 74:bc:d6:67:56:8a:87:0b:f9:59:48:ba:67:0a:bb: b9:63:e5:5e:ba:df:d5:18:e2:66:91:3d:4c:cb:ed: 76:10:52:93:5c:21:69:6b:57:32:3b:7d:c5:fd:e5: c8:87:9f:2f:15:39:88:9b:ea:d1:9e:a1:92:d9:2f: 04:29:b5:44:47:2b:b4:b1:e1:cc:ce:90:d8:6a:e4: f3:87:5f:dd:5f:07:10:96:ab:cd:eb:50:d4:69:b5: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:93:53:6B:07:7A:A5:D0:A1:55:00:5F:DA:28:D2:8F:2D:A1:12:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ac78b85f-2533-39cc-a4c6-0e6e59274549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:38:06:2b:16:6b:09:ce:7b:75:27:ee:17:f3:a5:35:a4:5b: 9b:66:32:1c:79:bf:44:7e:ef:6e:25:9c:37:89:23:c7:bb:6c: 82:58:09:34:e9:e3:ea:72:15:d0:25:c6:a8:f5:a4:aa:9a:c0: fc:42:e9:7f:4f:96:fb:dc:1e:4c:4c:bd:5f:77:bb:0a:45:28: d3:e6:de:cd:08:c6:49:3f:9b:1d:b4:16:ce:a1:8d:9a:8e:19: 3c:1f:df:91:63:68:47:e4:ee:5a:47:bb:ff:fc:23:4d:cd:37: d6:36:16:1e:11:aa:08:a0:7d:71:50:1f:bd:9d:2f:14:f2:e6: 76:5e:48:9e:84:79:74:c9:47:39:e9:ef:62:d8:fa:ae:0c:a4: 9b:7d:8b:07:e9:b3:b3:c1:49:86:50:b1:87:dd:09:48:b0:7a: 38:5c:85:29:4a:31:b2:06:c1:5e:a1:3b:8f:29:76:76:c0:67: 67:55:6a:53:fa:4b:5c:48:c9:53:46:16:10:3d:e8:a1:60:e7: 80:54:06:44:0b:df:7b:51:c3:a5:86:9a:70:8d:dc:f4:a0:55: fe:14:f9:33:54:54:70:8b:58:ae:09:1f:53:5e:f3:57:4f:15: e3:e8:c6:e8:dd:99:1a:54:4b:f7:d2:ca:a8:be:f2:a0:0f:16: 16:42:9d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXpYC0TMEWPVlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmE5MGJmYzktZDhkNi00MzI0LWJhYTEtOTVjOTdjYmMyYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq6+LcZxvQVwAZgcaICXR6LsKHd8T5Bqkbtd zi3PSzvkK2Icp4NeZilGvWL+YsJSTDBMYd0Ys0pqKJ984nngsDRsha7lKVwsiCzx 7BHIQ9q88nY/xa3Ows+kaGBci6M5+0oeUCTcHLxJSruh9BpII4aqge/Th7TQ49ib aDgWp3NvyUPMRJjMBjlMJCd/UAKTPaB2Xbga9IAW8qh7tMYM4f5QUkR0vNZnVoqH C/lZSLpnCru5Y+Veut/VGOJmkT1My+12EFKTXCFpa1cyO33F/eXIh58vFTmIm+rR nqGS2S8EKbVERyu0seHMzpDYauTzh1/dXwcQlqvN61DUabUG9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGTU2sHeqXQoVUAX9oo0o8toRInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWM3OGI4NWYtMjUzMy0z OWNjLWE0YzYtMGU2ZTU5Mjc0NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvutMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw4BisWawnOe3Un7hfzpTWkW5tmMhx5v0R+724lnDeJI8e7bIJYCTTp 4+pyFdAlxqj1pKqawPxC6X9PlvvcHkxMvV93uwpFKNPm3s0Ixkk/mx20Fs6hjZqO GTwf35FjaEfk7lpHu//8I03NN9Y2Fh4RqgigfXFQH72dLxTy5nZeSJ6EeXTJRznp 72LY+q4MpJt9iwfps7PBSYZQsYfdCUiwejhchSlKMbIGwV6hO48pdnbAZ2dValP6 S1xIyVNGFhA96KFg54BUBkQL33tRw6WGmnCN3PSgVf4U+TNUVHCLWK4JH1Ne81dP FePoxujdmRpUS/fSyqi+8qAPFhZCnXw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:11 2025 by rpki-client