$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa File: bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa (raw, json) Hash identifier: VSR5ASdtsvfBQChdrNuJv9mzDE0T4zS40LvwgCIdyDw= Subject key identifier: 98:04:25:08:02:B9:14:9B:25:B4:44:82:2F:02:F9:B7:DC:77:F9:F9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817E83735092B24B644500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7e:83:73:50:92:b2:4b:64:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e964de26-8e06-4345-9d46-542e715c3f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:40:d0:68:92:e8:2f:32:83:1e:62:53:0d: 46:10:d7:5e:d5:e7:d3:f5:6b:21:57:e0:33:71:c2: 1b:ac:04:03:39:7e:b8:af:d3:bc:3a:8e:a9:ba:72: cb:cc:ff:be:28:46:ef:04:49:1c:83:a9:cf:50:14: c5:a9:47:2a:51:aa:9c:b2:20:27:4f:3c:90:63:1d: 76:e1:02:be:17:34:6c:94:a5:b4:66:5c:ab:c2:2f: 2e:fe:d7:bc:c3:db:08:14:64:f9:c9:ea:7e:5f:a9: 64:26:6a:89:6b:52:29:a3:4d:b9:5f:5e:ef:d3:99: a9:c5:12:0d:16:66:56:99:9d:ab:3c:4e:a9:c8:f3: 28:43:fb:56:32:f5:70:6d:1c:74:57:a1:89:ea:7a: e8:8a:58:15:e5:39:bf:aa:4a:49:4a:6d:5f:c7:30: 8c:c0:4e:95:4c:28:3b:00:d0:a7:b3:be:f9:ea:8d: a8:21:0a:38:46:96:be:44:4a:1c:1b:26:ad:31:65: 89:d6:1c:bd:6d:99:99:02:02:01:8e:16:41:37:73: 14:fc:5a:f4:55:a7:00:5e:05:29:97:c9:e0:fe:89: c8:e0:ad:c3:6d:57:ef:37:bf:6b:40:90:3b:b8:52: 6b:30:cd:d7:e0:07:c8:48:7c:6e:03:65:5f:6a:97: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:04:25:08:02:B9:14:9B:25:B4:44:82:2F:02:F9:B7:DC:77:F9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e6:8e:80:5e:52:5e:37:2f:01:70:45:84:1e:27:d5:f2:17: ae:fc:13:13:f7:5c:28:b8:72:d8:9d:f0:2a:4c:cd:29:12:0a: 21:32:19:d4:4e:5a:0a:9b:d7:90:45:c3:d8:94:51:ac:e8:68: 03:0d:b7:88:bb:bc:f6:b3:9b:b3:bb:92:88:08:f6:3e:fd:74: 67:3a:16:40:75:32:c9:24:c6:65:0d:c5:a7:8f:42:b5:d9:62: 7b:dc:83:63:20:86:69:e0:be:3d:7e:10:c0:2e:46:59:c5:7d: 78:8b:d0:0b:42:1a:c9:71:05:7d:2a:d5:51:b1:d0:4f:fd:52: cd:c3:64:dd:8f:69:1c:59:67:5d:d1:66:3a:8c:8c:dc:df:8c: 39:0f:8f:a7:94:5e:27:b9:ad:b8:50:29:b0:ec:a6:cc:d9:be: e7:92:80:fd:ce:fa:c2:74:74:a2:1d:36:09:a5:ea:93:fd:b1: 04:f2:29:c9:0f:37:d7:b4:00:25:a9:7e:81:e3:f6:c1:3a:ab: 15:c3:8a:d4:dc:03:26:80:91:f9:c6:24:8b:ab:25:24:f2:81: 54:0b:1b:99:54:9c:06:aa:4b:84:67:f6:aa:f1:5a:9d:28:ce: f3:a8:a0:98:90:b2:62:4b:0a:57:c7:52:19:30:6f:0d:a3:03: 9c:07:a2:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX6Dc1CSsktkRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTk2NGRlMjYtOGUwNi00MzQ1LTlkNDYtNTQyZTcxNWMzZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ9A0GiS6C8ygx5iUw1GENde1efT9WshV+Az ccIbrAQDOX64r9O8Oo6punLLzP++KEbvBEkcg6nPUBTFqUcqUaqcsiAnTzyQYx12 4QK+FzRslKW0Zlyrwi8u/te8w9sIFGT5yep+X6lkJmqJa1Ipo025X17v05mpxRIN FmZWmZ2rPE6pyPMoQ/tWMvVwbRx0V6GJ6nroilgV5Tm/qkpJSm1fxzCMwE6VTCg7 ANCns7756o2oIQo4Rpa+REocGyatMWWJ1hy9bZmZAgIBjhZBN3MU/Fr0VacAXgUp l8ng/onI4K3DbVfvN79rQJA7uFJrMM3X4AfISHxuA2Vfapeq6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgEJQgCuRSbJbREgi8C+bfcd/n5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmY0ZjQ2ZDEtYWQ2YS0z MDdjLWFkYmItZWQ4ZmJhZTliZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXmjoBeUl43LwFwRYQeJ9XyF678ExP3XCi4ctid8CpMzSkSCiEyGdRO Wgqb15BFw9iUUazoaAMNt4i7vPazm7O7kogI9j79dGc6FkB1MskkxmUNxaePQrXZ Ynvcg2Mghmngvj1+EMAuRlnFfXiL0AtCGslxBX0q1VGx0E/9Us3DZN2PaRxZZ13R ZjqMjNzfjDkPj6eUXie5rbhQKbDspszZvueSgP3O+sJ0dKIdNgml6pP9sQTyKckP N9e0ACWpfoHj9sE6qxXDitTcAyaAkfnGJIurJSTygVQLG5lUnAaqS4Rn9qrxWp0o zvOooJiQsmJLClfHUhkwbw2jA5wHon4= -----END CERTIFICATE-----Generated at Fri Apr 4 08:25:05 2025 by rpki-client