$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa File: b1faf120-6b01-3ca0-986e-d6804e54299b.roa (raw, json) Hash identifier: G6rJm+B5adQ3bTszove/wWAGTY6noY/wQFqqsWIBfLY= Subject key identifier: BC:CB:F3:15:05:0D:8E:F3:30:F2:18:4F:D4:A7:73:37:DD:9A:BB:A0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12C956FD65B818B20EE40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2c:95:6f:d6:5b:81:8b:20:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=1cdf00f3-dfa9-4df4-8aa1-66c04863738d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:33:7b:b2:a5:cc:38:82:5c:fd:55:d1:e6: d9:cd:db:1e:a2:cb:c6:40:58:4a:e7:68:47:a6:5f: 53:56:bc:2e:97:8e:20:f6:85:df:a9:e8:ca:a5:86: fd:51:8a:08:83:35:ea:3a:8d:1b:7c:50:f1:73:7a: 5a:20:26:5d:09:96:37:e0:55:c3:71:98:02:67:a9: b5:05:81:60:2c:4e:e9:d2:9e:b8:03:77:55:6c:be: 9a:79:4d:fa:27:b2:c9:7f:7c:82:53:ef:79:2b:97: 9c:b0:86:c0:19:a3:fa:15:16:be:2c:b9:62:29:d4: cb:05:4e:ea:65:0a:62:cb:60:4d:c6:c2:eb:40:f0: 56:4e:b9:d0:66:23:4f:4c:5e:05:61:25:1d:ef:e9: 52:07:76:1d:16:b5:61:81:a2:f5:f2:e2:5d:5d:33: 0a:32:d2:c5:61:42:2e:14:a3:8e:c9:a1:72:bb:58: 52:5b:8d:23:44:f7:e7:c4:fb:c7:48:a8:ab:51:4c: e1:46:2e:46:c9:de:3d:b2:cd:de:59:51:90:19:48: f8:f2:c0:9e:f5:4e:28:99:36:d3:9f:39:9e:36:3c: fa:04:a0:b1:ed:04:f1:13:71:e2:c2:ac:4d:07:51: ec:38:45:33:4b:af:69:c4:99:c9:3e:df:a5:ab:28: 5d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CB:F3:15:05:0D:8E:F3:30:F2:18:4F:D4:A7:73:37:DD:9A:BB:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:98:5e:ef:0b:35:bf:af:2c:5c:75:2a:3a:b0:06:16:36:59: b7:3e:32:31:ad:ed:2d:54:71:2b:2d:9c:ab:f2:87:89:c7:c6: 6a:f0:17:57:1f:f1:28:5b:27:e8:81:91:1b:d0:54:52:38:c7: 04:db:9c:53:15:e1:05:fe:56:c2:cb:21:ea:57:46:16:2c:e1: e5:0e:97:20:53:ee:ca:36:da:9c:cd:d9:d9:23:70:24:82:0b: 61:00:8f:c6:51:04:42:37:80:ce:23:61:57:df:55:1c:7d:26: 17:66:ed:eb:44:48:0f:20:32:8c:05:f0:87:2a:3a:0b:ae:d0: 19:43:8e:22:d7:03:6b:e4:a8:c3:97:fb:cd:71:42:1a:e2:ca: 6d:73:63:fe:25:c9:82:e1:c3:a4:52:6a:d2:2b:f6:c9:73:ec: 67:bf:fd:e0:be:40:be:c6:85:a2:25:12:0a:ed:f5:8c:88:85: ea:99:84:98:ee:8c:29:18:6a:67:f8:4d:3f:a9:e8:41:be:eb: d2:97:5e:a8:e6:5b:e9:56:ab:6c:08:db:b3:f3:92:29:0c:6d: 67:6d:d3:df:a0:d0:be:35:44:80:99:61:94:3a:99:9e:2a:ae: fa:43:ee:c4:3a:5f:94:49:21:63:23:f4:df:19:3b:1d:db:cc: 88:2e:8f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSyVb9ZbgYsg7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MWNkZjAwZjMtZGZhOS00ZGY0LThhYTEtNjZjMDQ4NjM3MzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi98ze7KlzDiCXP1V0ebZzdseosvGQFhK52hH pl9TVrwul44g9oXfqejKpYb9UYoIgzXqOo0bfFDxc3paICZdCZY34FXDcZgCZ6m1 BYFgLE7p0p64A3dVbL6aeU36J7LJf3yCU+95K5ecsIbAGaP6FRa+LLliKdTLBU7q ZQpiy2BNxsLrQPBWTrnQZiNPTF4FYSUd7+lSB3YdFrVhgaL18uJdXTMKMtLFYUIu FKOOyaFyu1hSW40jRPfnxPvHSKirUUzhRi5Gyd49ss3eWVGQGUj48sCe9U4omTbT nzmeNjz6BKCx7QTxE3HiwqxNB1HsOEUzS69pxJnJPt+lqyhdyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzL8xUFDY7zMPIYT9SnczfdmrugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFmYWYxMjAtNmIwMS0z Y2EwLTk4NmUtZDY4MDRlNTQyOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeYXu8LNb+vLFx1KjqwBhY2Wbc+MjGt7S1UcSstnKvyh4nHxmrwF1cf 8ShbJ+iBkRvQVFI4xwTbnFMV4QX+VsLLIepXRhYs4eUOlyBT7so22pzN2dkjcCSC C2EAj8ZRBEI3gM4jYVffVRx9Jhdm7etESA8gMowF8IcqOguu0BlDjiLXA2vkqMOX +81xQhriym1zY/4lyYLhw6RSatIr9slz7Ge//eC+QL7GhaIlEgrt9YyIheqZhJju jCkYamf4TT+p6EG+69KXXqjmW+lWq2wI27PzkikMbWdt09+g0L41RICZYZQ6mZ4q rvpD7sQ6X5RJIWMj9N8ZOx3bzIguj0g= -----END CERTIFICATE-----Generated at Fri Apr 4 08:46:52 2025 by rpki-client