$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1137ac0-f60c-390f-a788-13187a9aecb6.roa File: c1137ac0-f60c-390f-a788-13187a9aecb6.roa (raw, json) Hash identifier: 4uHWMfSy2sJyDeFr9/wo3UuTr5yxxfYITAOcvtXAE2A= Subject key identifier: 30:2A:0D:55:6C:72:E6:D7:D7:4A:2B:EA:17:3E:CA:72:DB:D7:17:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582264F8944F2FBBA1CE700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1137ac0-f60c-390f-a788-13187a9aecb6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:26:4f:89:44:f2:fb:ba:1c:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=81fa0b8d-96ae-4ed5-85c2-dd865d242f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:85:8c:d1:07:2c:b5:00:08:04:a3:14:80:75: 61:13:4e:3b:ff:61:b3:af:07:71:42:de:53:52:9c: 08:65:fd:84:64:14:77:a1:92:bc:55:0f:c9:aa:1f: f4:3e:4f:1a:44:20:d1:ca:7b:0b:43:11:49:db:c6: 02:13:de:2d:e0:3c:03:46:95:f4:a0:16:a0:9b:69: 8a:8a:f5:2c:b3:74:7c:02:07:a6:53:bf:3b:6c:94: 99:9b:2d:97:6d:60:f4:cf:69:6b:ff:8d:d2:7b:54: e1:b1:5e:c9:10:3e:5b:d8:d0:fb:04:af:74:76:e3: 26:6d:33:b1:c8:2d:fa:df:ec:32:36:cc:2a:ca:67: 2a:7a:12:df:73:10:28:65:d3:47:0e:c2:44:8f:4f: f7:27:1e:80:40:3e:ec:3c:ce:95:78:50:e9:15:51: 6f:38:f3:62:4a:14:1b:7d:a6:76:6a:df:3d:1e:84: c0:df:f6:4f:e3:c0:52:9b:42:de:79:c2:fa:20:9e: 70:85:11:c2:cb:2e:03:80:47:67:a9:f7:01:6f:4a: 22:e4:e0:d1:d4:e4:c6:13:f7:3c:67:f3:ce:40:49: 8d:d3:81:7e:7e:1a:d3:b9:ac:e2:d7:d8:a2:4b:70: e5:6c:c6:6e:11:51:47:92:5f:29:8c:8f:7d:83:31: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2A:0D:55:6C:72:E6:D7:D7:4A:2B:EA:17:3E:CA:72:DB:D7:17:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1137ac0-f60c-390f-a788-13187a9aecb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:05:81:24:e8:ec:9b:a9:96:08:db:62:95:d5:b6:9b:ec:65: 51:9a:9f:dd:2b:1e:67:9d:dd:50:61:1d:95:c2:ce:10:9a:52: 53:75:11:f5:b3:27:0f:f5:c6:a9:99:b9:22:42:15:bb:b9:c8: 4d:dc:b0:a3:ff:b5:dc:65:b7:53:58:00:b3:86:bd:22:fe:54: 17:e4:bc:c6:d0:70:b6:67:3f:5c:38:75:80:c3:6e:d7:56:79: 55:f1:88:da:49:a8:97:e9:52:aa:93:52:8d:64:c5:a3:4a:5b: 76:01:ce:2f:f4:62:1c:7c:c9:85:ff:bf:18:92:d0:bb:34:07: c3:ac:9d:d4:ab:a9:c6:cd:82:61:cf:3d:3f:a4:1a:f1:5e:da: 0f:e5:33:67:99:86:d9:94:d5:3b:be:ba:1f:55:52:1e:0d:7f: 38:12:96:21:d0:7c:77:fc:bd:f8:4e:2a:1c:23:79:24:20:03: f0:6c:90:89:d9:a5:bf:bd:5d:bb:67:c1:c8:23:a0:69:56:08: 61:d8:e9:06:88:00:14:ce:73:fd:65:26:8e:eb:03:d1:6e:d4: e1:aa:6c:a6:7b:cd:09:d9:59:c0:fa:51:3f:0a:1b:95:00:07: 7b:e0:ab:65:07:1a:6f:39:05:00:f0:19:d3:0c:5a:05:ce:29: a3:f1:8b:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiZPiUTy+7oc5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODFmYTBiOGQtOTZhZS00ZWQ1LTg1YzItZGQ4NjVkMjQyZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYWM0QcstQAIBKMUgHVhE047/2GzrwdxQt5T UpwIZf2EZBR3oZK8VQ/Jqh/0Pk8aRCDRynsLQxFJ28YCE94t4DwDRpX0oBagm2mK ivUss3R8AgemU787bJSZmy2XbWD0z2lr/43Se1ThsV7JED5b2ND7BK90duMmbTOx yC363+wyNswqymcqehLfcxAoZdNHDsJEj0/3Jx6AQD7sPM6VeFDpFVFvOPNiShQb faZ2at89HoTA3/ZP48BSm0LeecL6IJ5whRHCyy4DgEdnqfcBb0oi5ODR1OTGE/c8 Z/POQEmN04F+fhrTuazi19iiS3DlbMZuEVFHkl8pjI99gzGLmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAqDVVscubX10or6hc+ynLb1xcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzExMzdhYzAtZjYwYy0z OTBmLWE3ODgtMTMxODdhOWFlY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwFgSTo7JuplgjbYpXVtpvsZVGan90rHmed3VBhHZXCzhCaUlN1EfWz Jw/1xqmZuSJCFbu5yE3csKP/tdxlt1NYALOGvSL+VBfkvMbQcLZnP1w4dYDDbtdW eVXxiNpJqJfpUqqTUo1kxaNKW3YBzi/0Yhx8yYX/vxiS0Ls0B8OsndSrqcbNgmHP PT+kGvFe2g/lM2eZhtmU1Tu+uh9VUh4NfzgSliHQfHf8vfhOKhwjeSQgA/BskInZ pb+9XbtnwcgjoGlWCGHY6QaIABTOc/1lJo7rA9Fu1OGqbKZ7zQnZWcD6UT8KG5UA B3vgq2UHGm85BQDwGdMMWgXOKaPxi08= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:15 2025 by rpki-client