$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa File: b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa (raw, json) Hash identifier: k942sy3DC1O9KNmadWWnhvhqbUWfvdFZ/hmVw7IdNBA= Subject key identifier: A5:00:97:A8:FB:B0:E6:37:3D:42:D4:77:18:2A:E3:9E:13:20:CA:96 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818124322B6CB0F8E0D780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:81:24:32:2b:6c:b0:f8:e0:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5ff3587e-8bbb-45bc-b0ce-ba50061a58a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d7:12:3e:0e:b0:62:ca:cb:41:83:67:af:86: 46:7d:17:ad:8a:ba:15:b0:c2:c3:4e:5a:8c:24:a9: f9:21:b7:69:2d:8e:55:60:32:e2:e7:ce:b9:44:9a: 71:3b:b6:c6:51:eb:59:17:9a:9e:be:ff:a8:e7:68: 80:30:36:c6:69:9d:b4:f9:7d:dd:df:f6:cf:99:72: 01:3b:9d:02:56:de:80:57:06:03:84:6d:bd:81:2c: 03:1e:7a:f9:a1:d8:52:28:01:ba:28:e4:d1:b6:a9: 67:c5:b6:79:25:3c:43:9c:a6:18:9f:32:04:ee:cd: 57:7b:5b:05:90:d0:ac:f7:46:9d:ed:97:be:32:93: f9:aa:e5:a8:9e:34:d3:d8:f3:fb:5d:d9:91:58:5b: 53:45:0d:1e:16:50:b4:62:08:de:68:4b:43:4a:7d: d4:16:00:77:5d:88:08:74:a7:d3:5c:97:6f:0c:17: 19:cc:73:24:09:6b:e2:11:e8:9f:24:27:1d:73:3a: e6:64:9c:ba:0d:21:12:d9:1c:17:8f:40:a1:a5:81: be:e1:56:ac:dd:a6:c7:55:f8:1c:3e:ff:f1:ff:d2: 6e:04:0e:2b:e7:d1:6f:59:3d:ee:3a:cc:8b:8c:f7: c4:c0:e5:dc:37:ae:48:aa:9c:f1:a8:20:41:bb:29: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:00:97:A8:FB:B0:E6:37:3D:42:D4:77:18:2A:E3:9E:13:20:CA:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:bf:4e:22:b9:a2:12:6f:00:1a:fa:e9:3a:10:69:aa:63:c7: d2:17:72:db:c8:2a:19:e0:43:68:71:85:67:4c:ae:8f:27:c1: 50:4d:92:fa:41:e7:4a:0d:5d:d1:d6:1d:99:7e:d3:9f:99:2c: 43:08:15:bb:7b:df:35:f1:2d:56:d9:e3:15:b1:d2:1a:5d:47: 6f:af:76:b7:b8:9a:22:aa:23:0e:fb:a4:af:88:bd:1b:9a:2d: 63:29:5b:98:91:ee:e9:91:c8:3d:c9:12:14:b6:d2:53:7c:25: 07:f8:23:58:7b:57:02:5f:2a:95:73:98:64:9f:51:9b:63:40: a3:41:70:8c:cc:e2:ba:7c:a8:04:e4:fd:11:cc:7e:52:7c:22: ed:c4:fd:c2:6b:f6:21:71:56:56:ea:31:05:68:04:c8:8a:5b: b8:5b:0d:09:3b:15:74:84:6b:de:60:85:69:56:1e:ec:b5:5d: e1:41:1c:70:1c:a7:90:e1:65:e0:03:b4:7b:4c:cc:1f:e9:d3: a3:03:c3:f4:34:45:41:80:a6:10:c2:d5:69:06:ee:6d:50:1e: 8d:39:53:01:a2:18:84:43:d4:31:89:d2:70:0a:18:d1:3f:a6: d0:3b:76:7f:b6:b5:5a:d8:30:c5:49:45:c8:36:37:63:75:db: b6:0f:c7:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYEkMitssPjg14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWZmMzU4N2UtOGJiYi00NWJjLWIwY2UtYmE1MDA2MWE1OGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdcSPg6wYsrLQYNnr4ZGfRetiroVsMLDTlqM JKn5IbdpLY5VYDLi5865RJpxO7bGUetZF5qevv+o52iAMDbGaZ20+X3d3/bPmXIB O50CVt6AVwYDhG29gSwDHnr5odhSKAG6KOTRtqlnxbZ5JTxDnKYYnzIE7s1Xe1sF kNCs90ad7Ze+MpP5quWonjTT2PP7XdmRWFtTRQ0eFlC0YgjeaEtDSn3UFgB3XYgI dKfTXJdvDBcZzHMkCWviEeifJCcdczrmZJy6DSES2RwXj0ChpYG+4Vas3abHVfgc Pv/x/9JuBA4r59FvWT3uOsyLjPfEwOXcN65IqpzxqCBBuymLsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUAl6j7sOY3PULUdxgq454TIMqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjk4NDhlOTMtNTAxOS0z ZTgwLWJjOTktYmE2YzFlMzlmMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi/TiK5ohJvABr66ToQaapjx9IXctvIKhngQ2hxhWdMro8nwVBNkvpB 50oNXdHWHZl+05+ZLEMIFbt73zXxLVbZ4xWx0hpdR2+vdre4miKqIw77pK+IvRua LWMpW5iR7umRyD3JEhS20lN8JQf4I1h7VwJfKpVzmGSfUZtjQKNBcIzM4rp8qATk /RHMflJ8Iu3E/cJr9iFxVlbqMQVoBMiKW7hbDQk7FXSEa95ghWlWHuy1XeFBHHAc p5DhZeADtHtMzB/p06MDw/Q0RUGAphDC1WkG7m1QHo05UwGiGIRD1DGJ0nAKGNE/ ptA7dn+2tVrYMMVJRcg2N2N127YPx1A= -----END CERTIFICATE-----Generated at Fri Apr 4 08:28:30 2025 by rpki-client