$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa File: ccdc89e1-94e2-3966-988e-15606f6e1e06.roa (raw, json) Hash identifier: PP5WTg8zG+z7lv9sXaJbwo/KQhAcmLMDEj5HAJUtTfw= Subject key identifier: C7:A4:CE:F6:37:61:83:D4:E5:25:4E:5A:61:C8:34:73:78:34:CA:E2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58228EBF3A2C95672630A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:28:eb:f3:a2:c9:56:72:63:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5548e8b0-12e7-4351-92c2-6428f5a3b61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c6:c9:28:db:86:68:f9:7f:82:5e:96:c4:76: 21:48:a7:c4:11:7b:b4:bb:2b:25:67:7d:bb:41:12: 0f:42:37:14:6b:ac:35:71:44:08:ec:3e:29:f1:d3: 80:2d:a5:48:d7:d7:b7:b4:08:e3:de:65:4d:03:82: b0:48:b4:e4:4a:31:c8:62:7a:33:fc:50:4d:35:89: 99:83:22:7a:40:d1:77:61:5d:44:c8:ef:92:b0:c9: 6c:d4:21:d5:f5:1b:24:67:5a:64:bc:6d:65:65:37: d6:f0:62:91:99:da:32:73:f6:96:89:af:7f:03:39: 38:52:36:9b:95:64:c0:07:26:5e:12:37:c9:07:cd: 71:ef:48:dd:2d:5f:70:ac:5f:98:8b:7d:97:a7:84: d9:96:e1:3c:2d:7c:a0:b6:30:ca:ce:a1:dc:da:10: c3:d0:21:f7:1c:77:3a:5d:d5:13:72:8f:65:dc:ca: 44:25:6a:ef:29:3b:25:fb:ff:16:dd:65:58:5b:40: 44:8e:a0:51:62:1d:22:77:ae:9b:06:9a:6b:c3:34: ee:08:16:7f:6e:e6:44:b7:b4:a3:79:d5:02:eb:43: 7a:be:f3:d5:16:23:4b:6f:fd:1f:b2:af:4c:9c:0b: a9:b6:fc:0a:0a:83:ab:fd:45:f6:82:e6:86:10:32: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A4:CE:F6:37:61:83:D4:E5:25:4E:5A:61:C8:34:73:78:34:CA:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:81:b3:5a:ef:f9:b4:a8:49:7d:f5:88:db:cb:99:ee:dd:e8: d5:b5:ef:41:a1:58:a9:93:11:96:e7:26:4e:49:7b:36:92:ea: 61:cb:af:1c:64:3b:42:80:42:1c:b6:d8:e2:f7:ef:97:39:2c: f6:56:f0:0a:8b:09:19:73:c9:c8:f7:51:8a:98:5c:21:4f:55: e6:b1:8b:49:a4:39:07:26:87:02:dd:06:7a:a9:e1:91:3c:57: a4:fb:a2:2e:a3:0f:1f:30:0a:eb:f7:94:29:9b:1b:f5:b7:a0: 0b:81:9b:1a:d7:3a:6f:ff:7e:6c:ed:4f:0a:eb:87:5f:51:b0: a1:35:c0:77:d4:ed:03:b6:5b:6e:e7:36:16:d4:c1:1e:25:56: b4:61:86:55:27:35:ec:86:54:83:5a:77:2d:89:c0:67:2d:15: f9:96:60:03:bf:5b:13:2f:96:8e:fe:f5:8d:5a:ae:2f:39:22: a8:a0:9b:29:98:b8:6f:af:c5:b1:56:2c:3f:0f:80:a7:84:2d: bf:11:8b:30:06:00:4a:c8:bd:7a:26:b6:09:94:0c:b8:fb:fb: 51:23:75:e8:64:99:e8:a2:e2:40:7c:e6:00:ff:23:12:44:c8: a8:b4:e4:d2:d8:ee:5a:b5:bb:21:7b:50:7c:e4:b6:5f:e8:db: af:72:5b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgijr86LJVnJjCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTU0OGU4YjAtMTJlNy00MzUxLTkyYzItNjQyOGY1YTNiNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcbJKNuGaPl/gl6WxHYhSKfEEXu0uyslZ327 QRIPQjcUa6w1cUQI7D4p8dOALaVI19e3tAjj3mVNA4KwSLTkSjHIYnoz/FBNNYmZ gyJ6QNF3YV1EyO+SsMls1CHV9RskZ1pkvG1lZTfW8GKRmdoyc/aWia9/Azk4Ujab lWTAByZeEjfJB81x70jdLV9wrF+Yi32Xp4TZluE8LXygtjDKzqHc2hDD0CH3HHc6 XdUTco9l3MpEJWrvKTsl+/8W3WVYW0BEjqBRYh0id66bBpprwzTuCBZ/buZEt7Sj edUC60N6vvPVFiNLb/0fsq9MnAuptvwKCoOr/UX2guaGEDL0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMekzvY3YYPU5SVOWmHINHN4NMriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2NkYzg5ZTEtOTRlMi0z OTY2LTk4OGUtMTU2MDZmNmUxZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCBs1rv+bSoSX31iNvLme7d6NW170GhWKmTEZbnJk5JezaS6mHLrxxk O0KAQhy22OL375c5LPZW8AqLCRlzycj3UYqYXCFPVeaxi0mkOQcmhwLdBnqp4ZE8 V6T7oi6jDx8wCuv3lCmbG/W3oAuBmxrXOm//fmztTwrrh19RsKE1wHfU7QO2W27n NhbUwR4lVrRhhlUnNeyGVINady2JwGctFfmWYAO/WxMvlo7+9Y1ari85IqigmymY uG+vxbFWLD8PgKeELb8RizAGAErIvXomtgmUDLj7+1Ejdehkmeii4kB85gD/IxJE yKi05NLY7lq1uyF7UHzktl/o269yW+Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:33 2025 by rpki-client