$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa File: cfb3d42c-ef81-39ea-8662-b711a5af348b.roa (raw, json) Hash identifier: 3F/uv6TSeik4GEtRNzMNWN7R6RS0JEPjittlg3mOXV0= Subject key identifier: F0:FE:67:CB:47:ED:55:A9:D3:47:FF:B3:6F:EF:09:11:65:7B:A4:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA13165A6A6E96EFE715500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:31:65:a6:a6:e9:6e:fe:71:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=5848bdfe-3156-4526-83b9-d31397e4ca2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0f:b9:28:88:7f:41:35:f4:70:49:b4:4c:13: 6f:68:33:e7:f0:9d:54:8a:c3:be:54:da:34:14:9e: be:2e:a2:d2:08:76:ee:3a:5e:1f:ea:81:ce:5c:d7: 7c:ab:f4:45:36:8a:20:56:4e:e1:e5:c2:da:b3:c3: a1:b5:b6:79:f7:30:8f:a3:5e:ed:8b:ad:3b:b4:e1: 28:1a:62:fe:4a:75:21:22:07:09:59:90:c3:2b:cb: 0c:1c:c2:d9:cc:14:98:e4:59:8b:f1:a8:af:dd:34: eb:4b:a8:85:ba:9b:87:4b:41:84:a1:40:c7:48:a3: 95:af:60:4d:dd:f0:bc:c8:ae:e4:61:df:cd:68:fa: d2:0f:05:f3:57:74:47:cc:df:c5:3f:43:b7:42:0e: 25:08:90:28:38:1d:70:c5:35:ca:ac:6a:74:e2:74: 8f:85:1f:b7:87:d0:7b:f1:0b:a2:87:87:91:4e:07: da:9e:1d:b0:aa:93:9a:9a:71:cd:13:7c:57:b4:ec: c1:b9:fc:45:cc:00:2d:69:4d:bb:4a:4e:41:a1:1a: 47:a9:d5:35:0b:dc:84:b2:09:0d:7b:14:fd:66:95: 5c:01:dc:32:e7:1b:95:62:2c:ce:9d:87:64:18:3c: a2:c3:28:80:ae:c4:83:ed:15:ab:a5:89:ba:d2:bf: 61:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FE:67:CB:47:ED:55:A9:D3:47:FF:B3:6F:EF:09:11:65:7B:A4:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:12:3e:ad:ca:8a:6c:98:6e:f7:1d:92:74:3d:94:88:c6:f9: 64:e8:42:8d:22:b3:ab:80:f6:65:04:89:56:6e:e4:65:a7:47: 67:c6:11:d3:10:54:e2:8c:f8:da:fc:ba:3f:d2:e9:d4:99:45: 02:51:43:9a:1d:48:ba:02:02:52:8d:f1:b5:ee:9a:a6:e2:09: 12:a9:07:21:8f:a1:f5:8f:d9:46:0c:84:37:2a:82:80:48:a1: 19:9b:a5:c6:19:ff:5a:24:90:fc:de:dc:e6:f2:2a:6f:7c:88: e8:a8:07:ba:2a:59:bd:29:1e:37:89:88:70:e6:82:9f:5f:d7: 2f:5e:82:cc:00:76:9c:1f:6b:01:41:7b:55:ba:4b:22:f5:38: aa:52:ec:7b:e8:46:97:91:49:90:84:5f:32:d0:9a:df:aa:b5: e6:ef:f6:5c:5d:97:e2:86:7d:ca:ec:6d:89:29:1c:71:61:00: 0a:29:69:57:76:23:15:45:f1:cc:86:d5:ec:62:70:80:a6:03: ca:62:81:09:c6:71:65:1b:ce:bd:f8:08:65:2e:4d:18:0a:4c: 59:c3:88:3c:0d:09:02:d3:a4:f5:0f:13:30:57:9c:19:68:10: 58:02:78:aa:4a:1c:ac:2f:80:c6:ff:1f:0d:54:ad:8c:e9:d2: 41:0c:b1:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoTFlpqbpbv5xVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NTg0OGJkZmUtMzE1Ni00NTI2LTgzYjktZDMxMzk3ZTRjYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ+5KIh/QTX0cEm0TBNvaDPn8J1UisO+VNo0 FJ6+LqLSCHbuOl4f6oHOXNd8q/RFNoogVk7h5cLas8OhtbZ59zCPo17ti607tOEo GmL+SnUhIgcJWZDDK8sMHMLZzBSY5FmL8aiv3TTrS6iFupuHS0GEoUDHSKOVr2BN 3fC8yK7kYd/NaPrSDwXzV3RHzN/FP0O3Qg4lCJAoOB1wxTXKrGp04nSPhR+3h9B7 8Quih4eRTgfanh2wqpOamnHNE3xXtOzBufxFzAAtaU27Sk5BoRpHqdU1C9yEsgkN exT9ZpVcAdwy5xuVYizOnYdkGDyiwyiArsSD7RWrpYm60r9hAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPD+Z8tH7VWp00f/s2/vCRFle6SGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2ZiM2Q0MmMtZWY4MS0z OWVhLTg2NjItYjcxMWE1YWYzNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYSPq3KimyYbvcdknQ9lIjG+WToQo0is6uA9mUEiVZu5GWnR2fGEdMQ VOKM+Nr8uj/S6dSZRQJRQ5odSLoCAlKN8bXumqbiCRKpByGPofWP2UYMhDcqgoBI oRmbpcYZ/1okkPze3ObyKm98iOioB7oqWb0pHjeJiHDmgp9f1y9egswAdpwfawFB e1W6SyL1OKpS7HvoRpeRSZCEXzLQmt+qtebv9lxdl+KGfcrsbYkpHHFhAAopaVd2 IxVF8cyG1exicICmA8pigQnGcWUbzr34CGUuTRgKTFnDiDwNCQLTpPUPEzBXnBlo EFgCeKpKHKwvgMb/Hw1UrYzp0kEMsc8= -----END CERTIFICATE-----Generated at Fri Apr 4 08:37:34 2025 by rpki-client