$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa File: af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa (raw, json) Hash identifier: hYRoXWOoqVDICyNq1fl7m/DjfozdIaFetBZxD/5s2tA= Subject key identifier: EC:1D:6E:28:4B:63:3A:15:4D:AA:43:C4:44:D3:0E:F3:A7:72:CB:64 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58170FBF696154FF2A45A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:70:fb:f6:96:15:4f:f2:a4:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d063741e-b30c-4a08-b74b-a9570daf610c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:b3:02:6b:be:20:f9:75:38:75:f0:bc:76: d2:42:4e:8f:61:69:08:e9:8d:e8:32:a1:97:dd:44: 90:ea:59:a9:9e:84:da:b3:7e:ef:e0:1f:22:be:bc: d7:a0:8f:d7:f8:b4:97:f1:eb:6f:2f:8c:9c:42:29: 18:83:86:2d:4e:7e:a3:45:5b:48:cb:c7:9a:ec:82: 2a:44:83:1c:8f:ff:91:cb:ad:f5:ac:d2:1c:a8:24: ee:c2:8a:5e:b6:92:62:9e:af:68:12:40:eb:12:d2: ae:b8:28:72:4c:59:c7:d6:a7:ae:70:95:66:d1:d4: 80:57:f8:ce:85:28:13:5e:f0:b7:bc:fa:cf:a4:85: f0:fa:ae:d2:35:5e:59:b2:25:79:f8:ad:e7:76:c0: 4b:30:84:6f:9b:e3:d7:52:78:f4:57:15:2c:d0:74: 99:08:64:a1:60:be:80:57:06:ca:c6:9a:62:af:7d: d2:37:a6:10:c2:2a:40:19:73:1a:7a:db:48:23:f9: 81:9d:0c:9c:6f:a1:0d:83:f5:80:4c:02:37:72:f3: c9:a2:40:4a:a9:1e:c9:b0:af:e9:a2:b2:74:89:63: 61:ce:93:ba:27:d3:32:d4:c1:d3:32:52:8c:5e:d1: a3:16:d9:8f:59:87:30:2f:db:72:79:eb:9e:7e:80: cb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1D:6E:28:4B:63:3A:15:4D:AA:43:C4:44:D3:0E:F3:A7:72:CB:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:18:e4:2f:a5:8f:5e:e4:c6:45:18:91:b3:3c:25:10:48:2c: 12:3d:36:2b:b4:aa:4b:65:6f:2a:3b:24:bd:df:8d:c9:b8:1d: 12:06:40:f3:d1:6d:dc:c0:84:51:69:d2:64:da:74:4e:64:4d: 6b:aa:b4:24:d4:3c:6e:40:f7:1f:34:8b:7c:60:e0:cd:e6:5f: d9:cf:25:d2:18:2c:58:fb:0a:e6:e8:ab:2d:45:97:6d:66:8a: 4c:49:9b:5a:9b:4f:90:59:50:16:44:8e:a9:31:8d:53:f9:18: 2a:f8:67:8c:d9:ab:e4:3e:25:d2:ad:95:b1:f5:5a:31:cb:7a: 40:bb:bd:32:38:1f:dd:18:27:06:d5:26:7e:0b:9a:30:2b:37: e3:7b:d4:e2:51:cb:de:6e:e4:c8:b7:6e:5f:c2:06:15:e1:85: 27:dd:88:21:65:26:3e:4a:88:6f:59:37:a9:c0:eb:11:79:07: 5c:d2:40:ea:92:52:93:34:b6:73:0f:2c:39:fb:e5:91:36:62: 53:b2:aa:36:66:8d:1a:18:fe:25:b8:ad:a6:dc:69:91:7c:0a: 36:84:37:74:90:33:1a:1a:a2:60:d4:36:bc:5f:69:fa:26:c5: 24:dd:01:0b:fb:af:6f:cd:c3:1e:2b:97:49:60:1c:86:3f:ac: 76:cd:fa:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXD79pYVT/KkWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDA2Mzc0MWUtYjMwYy00YTA4LWI3NGItYTk1NzBkYWY2MTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPmzAmu+IPl1OHXwvHbSQk6PYWkI6Y3oMqGX 3USQ6lmpnoTas37v4B8ivrzXoI/X+LSX8etvL4ycQikYg4YtTn6jRVtIy8ea7IIq RIMcj/+Ry631rNIcqCTuwopetpJinq9oEkDrEtKuuChyTFnH1qeucJVm0dSAV/jO hSgTXvC3vPrPpIXw+q7SNV5ZsiV5+K3ndsBLMIRvm+PXUnj0VxUs0HSZCGShYL6A VwbKxppir33SN6YQwipAGXMaettII/mBnQycb6ENg/WATAI3cvPJokBKqR7JsK/p orJ0iWNhzpO6J9My1MHTMlKMXtGjFtmPWYcwL9tyeeuefoDLswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwdbihLYzoVTapDxETTDvOncstkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWYxNjY0YzEtZWU3Ni0z M2I3LTllMjctN2VmNTJiMzJkNmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkY5C+lj17kxkUYkbM8JRBILBI9Niu0qktlbyo7JL3fjcm4HRIGQPPR bdzAhFFp0mTadE5kTWuqtCTUPG5A9x80i3xg4M3mX9nPJdIYLFj7Cuboqy1Fl21m ikxJm1qbT5BZUBZEjqkxjVP5GCr4Z4zZq+Q+JdKtlbH1WjHLekC7vTI4H90YJwbV Jn4LmjArN+N71OJRy95u5Mi3bl/CBhXhhSfdiCFlJj5KiG9ZN6nA6xF5B1zSQOqS UpM0tnMPLDn75ZE2YlOyqjZmjRoY/iW4rabcaZF8CjaEN3SQMxoaomDUNrxfafom xSTdAQv7r2/Nwx4rl0lgHIY/rHbN+jM= -----END CERTIFICATE-----Generated at Fri Apr 4 08:34:35 2025 by rpki-client