$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa File: ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa (raw, json) Hash identifier: gTAu9p9uaINExn12rZ+R7PhzIGIUMyNHPl7GXjSbBYg= Subject key identifier: DF:DC:1C:F0:FD:0E:6B:CB:60:E3:6C:FC:D5:14:CD:84:52:69:A6:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582265AE93DC9DF0C28CF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:26:5a:e9:3d:c9:df:0c:28:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f927d140-8789-4a60-8765-2067165bb74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:f8:5c:86:18:b5:1e:b7:71:2b:6b:66:96: 53:f1:22:37:c2:b1:db:56:1e:15:b5:da:56:a8:dc: 90:d3:07:91:ec:ef:a1:12:7e:d1:96:dd:39:7a:4d: f3:60:31:c3:37:42:b7:98:ef:32:9f:33:f7:48:75: 94:4e:8d:f2:e5:8c:87:c6:85:f1:a5:7b:15:87:a4: ae:67:ea:69:03:39:f3:e5:cc:4f:c5:a9:9d:bd:3f: be:cf:38:93:62:5b:69:61:31:6e:2b:94:12:5c:2c: 4f:d7:6f:49:c5:ab:2a:49:a9:7f:9d:0e:46:08:67: c0:52:ea:c4:2c:44:f0:30:44:47:c9:05:0a:3d:21: 6a:c4:28:ce:27:41:05:45:c4:ff:0e:72:ba:b2:cc: e0:f8:8e:3e:ab:a2:87:f2:45:78:44:00:8c:2a:6b: 99:be:d9:e6:ec:b3:82:a9:f4:a4:98:8f:7e:d0:97: ca:7a:52:d8:eb:7d:e2:1d:90:cf:82:89:21:e4:41: 2e:ac:89:17:25:35:f3:4e:8b:17:28:36:51:57:4a: dd:ba:91:3a:34:48:46:11:25:f8:2c:a3:da:2c:69: c6:5c:e7:44:3d:34:ef:ec:81:be:9a:0d:14:c2:1d: 83:94:e5:d1:3e:5c:6a:44:a3:3f:55:e6:e3:6c:c2: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DC:1C:F0:FD:0E:6B:CB:60:E3:6C:FC:D5:14:CD:84:52:69:A6:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ac:e6:a8:91:e5:f4:24:1f:02:37:b5:c9:dc:a4:63:5c:52: 9e:77:c4:8b:b1:68:da:38:bb:2d:ec:50:43:25:34:22:03:c3: 6c:6e:40:1c:74:01:55:f1:b9:b7:04:6e:f9:4b:30:4d:e3:d2: 00:9e:91:ee:6b:7f:1e:18:e2:4d:d2:b2:63:8b:37:2d:85:57: a6:77:19:a7:3d:e6:a0:a7:a0:cd:47:7e:dc:8f:7f:28:61:5e: 55:d2:62:2b:52:99:a7:03:a4:78:2b:f4:c3:1b:96:9f:f0:d9: 4f:c1:e3:9f:7d:6c:b1:21:c4:b7:b3:88:cd:2b:e1:6a:ea:ef: 14:f2:a4:b3:fe:29:b3:cf:c3:74:11:54:e0:01:6f:0f:64:ec: 21:13:63:35:b1:af:eb:15:69:03:e6:38:9e:86:1b:06:1f:da: 86:4c:c6:78:69:d6:ca:7b:3b:e6:5b:e0:56:30:db:f0:b6:85: c1:92:58:a6:a2:21:72:15:2e:57:ba:1b:42:17:0e:70:35:60: 5e:42:b6:2d:17:c4:69:ec:b4:43:dd:fc:9d:77:05:e6:07:03: 33:89:12:7c:5c:7f:e9:0c:62:3c:5b:8f:d3:d3:63:3b:e4:22: 01:bf:ba:97:dd:23:9f:42:22:16:4d:4b:fb:5b:71:c1:59:ae: 45:bd:8a:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiZa6T3J3wwozwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjkyN2QxNDAtODc4OS00YTYwLTg3NjUtMjA2NzE2NWJiNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHb4XIYYtR63cStrZpZT8SI3wrHbVh4VtdpW qNyQ0weR7O+hEn7Rlt05ek3zYDHDN0K3mO8ynzP3SHWUTo3y5YyHxoXxpXsVh6Su Z+ppAznz5cxPxamdvT++zziTYltpYTFuK5QSXCxP129JxasqSal/nQ5GCGfAUurE LETwMERHyQUKPSFqxCjOJ0EFRcT/DnK6sszg+I4+q6KH8kV4RACMKmuZvtnm7LOC qfSkmI9+0JfKelLY633iHZDPgokh5EEurIkXJTXzTosXKDZRV0rdupE6NEhGESX4 LKPaLGnGXOdEPTTv7IG+mg0Uwh2DlOXRPlxqRKM/VebjbMKp1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/cHPD9DmvLYONs/NUUzYRSaab9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2U0ODI4N2YtZTVhYS0z NDNhLWFkOWQtODQ0NWE4ZjY0N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWs5qiR5fQkHwI3tcncpGNcUp53xIuxaNo4uy3sUEMlNCIDw2xuQBx0 AVXxubcEbvlLME3j0gCeke5rfx4Y4k3SsmOLNy2FV6Z3Gac95qCnoM1HftyPfyhh XlXSYitSmacDpHgr9MMblp/w2U/B4599bLEhxLeziM0r4Wrq7xTypLP+KbPPw3QR VOABbw9k7CETYzWxr+sVaQPmOJ6GGwYf2oZMxnhp1sp7O+Zb4FYw2/C2hcGSWKai IXIVLle6G0IXDnA1YF5Cti0XxGnstEPd/J13BeYHAzOJEnxcf+kMYjxbj9PTYzvk IgG/upfdI59CIhZNS/tbccFZrkW9iuA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:34 2025 by rpki-client