$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d295118f-b684-3470-ba2a-8cb115fab04a.roa File: d295118f-b684-3470-ba2a-8cb115fab04a.roa (raw, json) Hash identifier: m80o4nAqo/STi6j3gHondHsXtnYJ1yqQ5LxKYEuJEJs= Subject key identifier: 0B:A3:3D:2C:15:1C:18:F4:E1:F3:21:08:0A:05:51:F9:1D:06:24:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12CA52545A92853A01FA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d295118f-b684-3470-ba2a-8cb115fab04a.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.251.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2c:a5:25:45:a9:28:53:a0:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=d86aa785-23cb-4163-a0a6-605265851cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:88:00:d4:19:f8:4f:56:28:34:9b:a5:8f:f2: 8b:39:de:83:7b:1b:57:eb:89:26:20:f5:23:95:a3: 67:68:e8:c5:a1:0e:8e:32:a5:ac:69:64:80:db:c1: 11:e6:18:bc:46:b9:5b:96:ba:c9:cb:fe:88:08:49: c4:34:f6:7e:fe:85:8e:46:ba:ad:9b:46:fc:1b:1a: 82:fd:9b:82:9a:44:16:53:16:79:a7:0b:84:f8:47: 43:7f:86:05:13:8d:00:df:29:b4:84:dd:f3:53:9e: c6:8b:be:de:e0:87:4e:19:80:66:cd:36:a5:70:93: 3c:ce:01:db:4d:1d:dd:c0:1a:e8:a3:48:ea:c5:82: a0:8d:6f:76:e9:8b:ae:b0:25:4f:3f:ba:51:c5:66: d3:74:91:b5:e7:a2:ad:8f:98:e5:95:04:73:d7:f8: c1:ed:3b:33:1e:d0:17:26:9e:0d:56:31:96:49:3a: 25:f2:3d:66:2e:25:58:3b:f8:f3:f5:1e:e5:06:4b: 8d:33:8d:1c:0d:be:74:04:26:d9:46:b9:35:25:d4: ec:6f:67:b5:42:2c:22:80:71:96:6b:c4:a4:06:17: b5:44:f7:a8:4c:89:69:72:39:97:51:6d:97:f8:bc: 70:a4:62:8e:06:71:a5:f2:95:25:e6:db:98:36:c7: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A3:3D:2C:15:1C:18:F4:E1:F3:21:08:0A:05:51:F9:1D:06:24:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d295118f-b684-3470-ba2a-8cb115fab04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:bb:54:76:e9:86:3b:f3:f1:c8:3b:94:c1:6d:8e:fb:f5:e9: ce:e4:6e:bf:19:a2:11:3b:6e:3b:3e:b4:ec:68:b4:db:a8:11: 97:20:e9:59:03:32:e0:e3:79:a0:45:1a:b5:16:38:c0:d5:d5: fb:31:9b:79:93:78:4d:20:fe:04:2a:36:fb:1b:84:75:a2:ec: 50:c8:51:ca:a7:19:f2:dc:b2:01:dd:b6:2a:5e:11:f7:dc:f7: ea:e6:1c:7f:44:a1:9d:70:5a:bd:77:22:03:c1:72:a1:8c:28: 4f:33:76:fc:e5:96:87:84:9c:7d:c9:34:f0:55:d1:8c:a5:3d: 34:9f:17:c3:18:f2:71:b5:68:e0:e5:ce:82:6a:a2:07:07:4d: c5:2f:ae:7d:a6:b7:df:0a:2b:ff:81:72:47:55:60:c6:9b:f0: 55:3d:5a:d6:f2:38:98:86:99:87:2f:b6:99:bd:b4:8e:6d:88: e8:89:e7:19:4e:d6:e8:b0:68:ce:8b:31:06:55:94:e5:55:6a: de:31:c1:d4:6c:87:f8:0b:e5:26:91:ab:a5:ae:4c:34:05:f5: 49:94:b7:14:c5:41:ba:f1:84:02:c9:33:a4:d8:f0:f6:d8:d6: 7e:14:fc:c6:9d:81:ae:27:b3:41:fd:22:59:0f:5e:10:43:aa: f4:22:a2:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSylJUWpKFOgH6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZDg2YWE3ODUtMjNjYi00MTYzLWEwYTYtNjA1MjY1ODUxY2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIgA1Bn4T1YoNJulj/KLOd6DextX64kmIPUj laNnaOjFoQ6OMqWsaWSA28ER5hi8RrlblrrJy/6ICEnENPZ+/oWORrqtm0b8GxqC /ZuCmkQWUxZ5pwuE+EdDf4YFE40A3ym0hN3zU57Gi77e4IdOGYBmzTalcJM8zgHb TR3dwBroo0jqxYKgjW926YuusCVPP7pRxWbTdJG156Ktj5jllQRz1/jB7TszHtAX Jp4NVjGWSTol8j1mLiVYO/jz9R7lBkuNM40cDb50BCbZRrk1JdTsb2e1QiwigHGW a8SkBhe1RPeoTIlpcjmXUW2X+LxwpGKOBnGl8pUl5tuYNsdf8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAujPSwVHBj04fMhCAoFUfkdBiT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDI5NTExOGYtYjY4NC0z NDcwLWJhMmEtOGNiMTE1ZmFiMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO7VHbphjvz8cg7lMFtjvv16c7kbr8ZohE7bjs+tOxotNuoEZcg6VkD MuDjeaBFGrUWOMDV1fsxm3mTeE0g/gQqNvsbhHWi7FDIUcqnGfLcsgHdtipeEffc 9+rmHH9EoZ1wWr13IgPBcqGMKE8zdvzlloeEnH3JNPBV0YylPTSfF8MY8nG1aODl zoJqogcHTcUvrn2mt98KK/+BckdVYMab8FU9WtbyOJiGmYcvtpm9tI5tiOiJ5xlO 1uiwaM6LMQZVlOVVat4xwdRsh/gL5SaRq6WuTDQF9UmUtxTFQbrxhALJM6TY8PbY 1n4U/Madga4ns0H9IlkPXhBDqvQiohA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:50 2025 by rpki-client