$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b71ba4ca-d2d8-3416-a045-386b341764bf.roa File: b71ba4ca-d2d8-3416-a045-386b341764bf.roa (raw, json) Hash identifier: ZQnBSyVA4U6W85ufXqsXzWunHGanCxIQIhickm8Zsa4= Subject key identifier: 07:8E:81:56:EF:FD:16:6A:C4:26:2E:58:29:FB:05:19:45:69:27:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58228376C45E63A82108700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b71ba4ca-d2d8-3416-a045-386b341764bf.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:28:37:6c:45:e6:3a:82:10:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=fec64669-34d3-44c2-80c7-e8193f7d6495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e3:85:96:b9:9f:e4:9a:ff:f1:bd:98:29:40: 33:5a:06:2a:85:3d:ee:c8:96:e6:98:e8:35:14:9c: 8c:3f:91:5a:62:ed:8f:99:a3:24:c1:dd:bf:11:7a: 8f:66:da:fd:76:50:9a:e2:a4:b9:a9:0a:f1:bb:47: b0:29:e9:46:f7:79:24:6b:9a:e7:e5:5b:50:ae:1d: 73:19:11:61:97:51:2d:97:5d:d5:cc:ea:1a:72:3b: a6:bd:1e:af:e8:2f:26:52:9d:91:13:53:23:f3:1d: de:2a:28:41:57:bc:6f:40:67:f9:bc:ed:ab:f2:96: 75:e3:5a:4a:5c:e9:b7:01:7a:2e:78:b9:b7:a6:49: 7b:f3:fa:2e:c5:bf:60:4b:cb:34:ad:9e:df:da:24: df:77:3c:ad:a7:b8:1e:88:a0:ea:7d:87:be:e2:13: 54:e5:eb:67:aa:55:a0:eb:d3:ff:12:e3:fa:3b:02: 29:ad:db:e1:02:81:b6:f9:45:1f:07:33:dd:22:54: 21:ca:e2:dc:c7:b7:66:80:62:74:62:57:90:7d:8f: 38:28:14:c4:d1:d8:28:81:67:73:25:c3:43:30:9d: b5:4d:c2:8e:77:9d:42:7f:a7:30:4e:04:64:49:d6: c8:bc:d5:fd:a2:47:b7:d1:67:fa:56:16:14:31:07: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8E:81:56:EF:FD:16:6A:C4:26:2E:58:29:FB:05:19:45:69:27:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b71ba4ca-d2d8-3416-a045-386b341764bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f0:a2:42:1d:d0:8b:55:54:da:26:e0:68:04:b7:bc:8a:a7: 4f:b9:38:21:cf:50:72:54:a5:e8:de:e9:8f:a9:b8:d0:4d:60: a2:65:61:ac:f6:25:c5:12:7b:3a:c3:f8:49:3f:f8:01:bb:3e: 25:93:0e:0a:b5:03:e3:39:9b:76:9b:ad:fd:9c:a4:72:c3:fc: d9:2a:b0:4e:7c:e7:76:86:be:d8:d4:45:87:5d:2c:21:19:95: 4e:94:96:00:6f:d3:17:9a:68:7c:8a:d5:a3:a3:ed:62:e3:5e: 5b:d6:e2:b9:d2:6a:b1:46:f6:97:2b:97:b9:e1:13:9f:83:c3: 4d:d7:0d:fe:6c:1e:77:24:49:f1:7f:42:61:e3:ef:b9:73:af: 86:20:3f:3c:d4:6d:8f:e0:07:d6:76:c2:9c:f4:18:db:e0:4b: 57:c3:41:5d:08:78:72:22:80:66:cf:b4:f0:f7:13:b8:00:4d: b5:4c:ba:93:75:67:15:4d:91:a5:96:16:14:b7:c7:b5:2e:97: 46:97:e0:a0:38:86:85:f6:e2:d3:44:3a:2a:27:25:ca:44:dd: d5:55:5e:fa:fe:05:a3:35:31:55:89:c5:74:fa:68:25:f3:24: a3:ee:97:b1:e8:b6:ea:32:b2:e5:11:d7:54:79:ea:76:c4:f1: cb:4f:68:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgig3bEXmOoIQhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmVjNjQ2NjktMzRkMy00NGMyLTgwYzctZTgxOTNmN2Q2NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOOFlrmf5Jr/8b2YKUAzWgYqhT3uyJbmmOg1 FJyMP5FaYu2PmaMkwd2/EXqPZtr9dlCa4qS5qQrxu0ewKelG93kka5rn5VtQrh1z GRFhl1Etl13VzOoacjumvR6v6C8mUp2RE1Mj8x3eKihBV7xvQGf5vO2r8pZ141pK XOm3AXoueLm3pkl78/ouxb9gS8s0rZ7f2iTfdzytp7geiKDqfYe+4hNU5etnqlWg 69P/EuP6OwIprdvhAoG2+UUfBzPdIlQhyuLcx7dmgGJ0YleQfY84KBTE0dgogWdz JcNDMJ21TcKOd51Cf6cwTgRkSdbIvNX9oke30Wf6VhYUMQdVxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeOgVbv/RZqxCYuWCn7BRlFaSc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjcxYmE0Y2EtZDJkOC0z NDE2LWEwNDUtMzg2YjM0MTc2NGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnwokId0ItVVNom4GgEt7yKp0+5OCHPUHJUpeje6Y+puNBNYKJlYaz2 JcUSezrD+Ek/+AG7PiWTDgq1A+M5m3abrf2cpHLD/NkqsE5853aGvtjURYddLCEZ lU6UlgBv0xeaaHyK1aOj7WLjXlvW4rnSarFG9pcrl7nhE5+Dw03XDf5sHnckSfF/ QmHj77lzr4YgPzzUbY/gB9Z2wpz0GNvgS1fDQV0IeHIigGbPtPD3E7gATbVMupN1 ZxVNkaWWFhS3x7Uul0aX4KA4hoX24tNEOionJcpE3dVVXvr+BaM1MVWJxXT6aCXz JKPul7HotuoysuUR11R56nbE8ctPaO8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:44 2025 by rpki-client