$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aec89b47-8637-3533-b1bf-91f85f158c32.roa File: aec89b47-8637-3533-b1bf-91f85f158c32.roa (raw, json) Hash identifier: nzcG0zfaWrdmOFWTcnzgYKziEBJbUZuP6GBD2SYDFK0= Subject key identifier: 2C:93:68:F4:06:6B:C5:4A:EC:27:65:2D:6B:BA:AD:1F:AB:11:37:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58177B263C39DB0D812F900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aec89b47-8637-3533-b1bf-91f85f158c32.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:77:b2:63:c3:9d:b0:d8:12:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=629719f6-9696-4239-9500-2bdbf183252d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:05:1e:38:26:8f:c1:9a:3b:58:7f:d6:bf: ca:59:10:64:8b:24:10:83:dc:1a:54:eb:d8:bc:67: d9:45:ce:a9:ca:c3:14:ee:59:39:f3:23:12:c4:46: 6f:86:6b:b5:a4:8f:0d:80:e7:a3:d4:7c:65:45:15: 2a:56:1d:68:96:eb:d3:04:89:1b:80:7a:9a:af:db: 1e:58:0a:22:f5:18:81:58:f1:53:39:c6:55:c4:ee: 61:2c:3e:5d:40:b8:c8:dd:ba:bd:9b:6d:2d:74:b8: b8:b1:3a:74:2d:9f:12:d2:a0:68:8e:07:2c:fc:e1: e6:1c:b2:7e:e3:b7:33:a3:f6:29:56:b5:b1:9e:ac: 1e:db:31:c1:25:5f:d9:f6:b2:76:a9:85:4f:f3:42: 5f:e5:8a:41:bc:96:b2:78:a8:b5:d8:67:0b:37:e3: 8d:4a:e4:d0:ec:43:72:f7:41:fc:c2:c8:ce:b5:10: 18:98:b7:08:11:9f:0e:63:d5:17:1f:20:91:69:3e: 68:c4:c6:0c:fd:46:66:f6:06:a5:42:95:ea:86:aa: 85:db:11:ee:d8:3d:3a:3a:c5:91:ae:d1:47:1e:a8: 44:f2:0b:1b:1f:2d:4c:06:58:85:91:0e:24:cb:aa: 02:4b:63:ce:a8:3c:8b:7d:34:fd:35:fa:73:38:b9: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:93:68:F4:06:6B:C5:4A:EC:27:65:2D:6B:BA:AD:1F:AB:11:37:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aec89b47-8637-3533-b1bf-91f85f158c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:54:a6:39:3b:a7:29:0a:d2:1a:d6:2f:95:10:7f:b9:e3:51: 6b:41:48:9e:77:af:6e:09:b4:a3:6b:9b:df:cb:3a:36:4d:1c: ee:07:cf:c5:3b:bc:4a:f2:de:51:73:0c:8c:51:f7:40:98:98: 35:ac:09:95:7a:da:6e:43:e0:45:d3:2f:6d:82:bc:63:6d:c7: 0a:6d:da:01:44:38:23:0b:63:31:dd:1e:62:94:c6:2e:b1:cd: 34:fa:f3:26:35:55:08:10:22:93:e3:99:cd:a9:c6:89:ef:3a: 1e:c0:c3:89:d5:f7:00:b5:d7:e8:35:01:63:47:bb:4c:67:b9: cb:dc:2b:f1:e9:ba:6c:e6:fd:5c:27:41:1a:c2:d6:d7:07:6c: cb:24:04:b1:da:d3:cb:06:5c:95:f3:aa:56:4b:18:42:af:da: ed:7b:7f:a6:a4:6f:ae:0f:c8:a6:2a:23:aa:51:80:bd:fb:16: 32:b6:11:c3:34:56:98:bd:c3:a9:31:d6:ab:c6:1d:a2:a6:83: 60:44:db:88:28:be:c4:94:be:a1:dd:cf:15:c4:d8:5b:7d:c0: ec:cb:e9:e8:cc:0f:1d:9d:5f:c0:31:50:62:50:64:0c:f9:84: 70:9f:e2:1a:07:1c:59:f3:9e:4c:bc:27:3d:87:ff:12:98:f2: a0:a3:cd:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXeyY8OdsNgS+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjI5NzE5ZjYtOTY5Ni00MjM5LTk1MDAtMmJkYmYxODMyNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLkFHjgmj8GaO1h/1r/KWRBkiyQQg9waVOvY vGfZRc6pysMU7lk58yMSxEZvhmu1pI8NgOej1HxlRRUqVh1oluvTBIkbgHqar9se WAoi9RiBWPFTOcZVxO5hLD5dQLjI3bq9m20tdLi4sTp0LZ8S0qBojgcs/OHmHLJ+ 47czo/YpVrWxnqwe2zHBJV/Z9rJ2qYVP80Jf5YpBvJayeKi12GcLN+ONSuTQ7ENy 90H8wsjOtRAYmLcIEZ8OY9UXHyCRaT5oxMYM/UZm9galQpXqhqqF2xHu2D06OsWR rtFHHqhE8gsbHy1MBliFkQ4ky6oCS2POqDyLfTT9NfpzOLnH1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyTaPQGa8VK7CdlLWu6rR+rETfkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWVjODliNDctODYzNy0z NTMzLWIxYmYtOTFmODVmMTU4YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExUpjk7pykK0hrWL5UQf7njUWtBSJ53r24JtKNrm9/LOjZNHO4Hz8U7 vEry3lFzDIxR90CYmDWsCZV62m5D4EXTL22CvGNtxwpt2gFEOCMLYzHdHmKUxi6x zTT68yY1VQgQIpPjmc2pxonvOh7Aw4nV9wC11+g1AWNHu0xnucvcK/Hpumzm/Vwn QRrC1tcHbMskBLHa08sGXJXzqlZLGEKv2u17f6akb64PyKYqI6pRgL37FjK2EcM0 Vpi9w6kx1qvGHaKmg2BE24govsSUvqHdzxXE2Ft9wOzL6ejMDx2dX8AxUGJQZAz5 hHCf4hoHHFnznky8Jz2H/xKY8qCjzVM= -----END CERTIFICATE-----Generated at Fri Apr 4 08:51:35 2025 by rpki-client