$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6fa0f-9f13-3da0-8662-5ea80f030e28.roa File: d9a6fa0f-9f13-3da0-8662-5ea80f030e28.roa (raw, json) Hash identifier: w/FSNNmQMV1515QPiyzWrezpa6uET7O1PmnQp7chzrk= Subject key identifier: 37:83:EE:D6:22:13:7D:78:9B:EA:97:20:70:11:28:86:EA:24:0E:B6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582314B6B9BBD85E44D3E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6fa0f-9f13-3da0-8662-5ea80f030e28.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:31:4b:6b:9b:bd:85:e4:4d:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=707b5a6f-dc0f-4a01-9b1f-10b9c59dfb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:49:80:22:fd:22:45:95:20:e8:da:e8:3a: bd:66:3d:6d:a6:02:53:2b:52:84:79:75:16:40:bd: ba:86:2e:0f:78:aa:34:c5:d9:5a:b4:8b:02:35:39: 6c:2b:9e:41:4a:43:e6:9c:24:ae:e7:13:1c:31:33: eb:96:f7:36:55:7b:ed:dc:ac:0d:ef:7a:37:3f:d0: e3:52:28:46:5e:cf:7e:8e:5f:52:4f:39:3f:b7:ef: ef:74:0f:70:b6:a2:0e:6c:da:e5:04:32:d9:7f:b6: 40:7f:a8:fb:ab:1a:39:d8:d7:eb:58:e3:0b:d8:2b: dc:a2:ec:0e:db:ba:d7:eb:4b:8a:5c:81:2e:24:f5: 29:46:20:1c:16:fe:98:bd:41:58:65:0f:2b:1d:19: 1b:eb:c3:cc:b4:d5:69:38:03:3f:bf:29:a3:8c:01: 0e:4b:7a:12:14:49:24:a0:6f:e4:ab:e7:65:81:23: 75:34:cf:07:25:fd:c8:75:49:6f:30:4a:8d:60:af: 07:fb:c0:fe:45:32:b6:70:92:af:ca:aa:00:b6:35: 61:e9:b3:3b:7a:5f:72:fd:85:ec:2c:34:90:60:17: 5d:d8:43:8e:2c:c7:f4:ae:19:30:f5:e8:d0:a9:a4: f0:da:67:a8:39:79:ba:1a:1e:b1:49:0c:d8:6d:fc: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:83:EE:D6:22:13:7D:78:9B:EA:97:20:70:11:28:86:EA:24:0E:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6fa0f-9f13-3da0-8662-5ea80f030e28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:df:9a:03:f6:42:80:d8:84:db:5e:2b:33:dc:d9:ec:32:9a: 15:61:d9:45:c1:54:6e:28:16:63:aa:ba:ee:e6:6c:a3:34:57: 16:97:2a:1a:b4:08:0f:fa:f1:3d:79:3b:0e:bf:cb:32:d7:ef: 66:4c:90:55:72:98:e0:99:5d:9f:b2:48:a9:2c:f4:9d:e7:37: ec:df:c0:9a:42:42:66:f4:c4:bd:4b:ce:90:e6:da:58:3c:b3: cd:c4:35:5d:d4:e5:9f:7a:de:8e:39:99:42:ac:ea:79:1d:c2: b9:fa:a8:8f:cb:31:fb:6b:c4:5e:9c:c3:ff:db:98:c0:87:26: 4c:7a:22:8c:df:3a:0c:88:73:4b:1f:57:e1:cc:5c:52:95:a8: d2:0c:dc:d8:f8:8c:f0:49:59:68:24:4a:de:8d:69:a0:08:cf: 3d:76:f1:d0:cd:e3:1b:c4:9e:af:b6:c7:53:1c:b9:91:ef:6a: d6:06:ae:6b:68:3f:96:ac:17:66:7f:3e:3f:14:8c:b9:38:70: 5b:66:5e:07:d9:62:cf:e1:c5:1e:68:64:e9:c5:60:0c:a9:98: ec:2f:4e:b5:c2:ce:c4:3b:7b:92:32:ca:ec:73:a1:b7:6d:9b: de:a5:87:44:c7:c5:37:25:42:86:15:2d:36:d3:68:e3:f4:8d: be:e1:94:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjFLa5u9heRNPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzA3YjVhNmYtZGMwZi00YTAxLTliMWYtMTBiOWM1OWRmYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgZJgCL9IkWVIOja6Dq9Zj1tpgJTK1KEeXUW QL26hi4PeKo0xdlatIsCNTlsK55BSkPmnCSu5xMcMTPrlvc2VXvt3KwN73o3P9Dj UihGXs9+jl9STzk/t+/vdA9wtqIObNrlBDLZf7ZAf6j7qxo52NfrWOML2CvcouwO 27rX60uKXIEuJPUpRiAcFv6YvUFYZQ8rHRkb68PMtNVpOAM/vymjjAEOS3oSFEkk oG/kq+dlgSN1NM8HJf3IdUlvMEqNYK8H+8D+RTK2cJKvyqoAtjVh6bM7el9y/YXs LDSQYBdd2EOOLMf0rhkw9ejQqaTw2meoOXm6Gh6xSQzYbfzXrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeD7tYiE314m+qXIHARKIbqJA62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDlhNmZhMGYtOWYxMy0z ZGEwLTg2NjItNWVhODBmMDMwZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPfmgP2QoDYhNteKzPc2ewymhVh2UXBVG4oFmOquu7mbKM0VxaXKhq0 CA/68T15Ow6/yzLX72ZMkFVymOCZXZ+ySKks9J3nN+zfwJpCQmb0xL1LzpDm2lg8 s83ENV3U5Z963o45mUKs6nkdwrn6qI/LMftrxF6cw//bmMCHJkx6IozfOgyIc0sf V+HMXFKVqNIM3Nj4jPBJWWgkSt6NaaAIzz128dDN4xvEnq+2x1McuZHvatYGrmto P5asF2Z/Pj8UjLk4cFtmXgfZYs/hxR5oZOnFYAypmOwvTrXCzsQ7e5Iyyuxzobdt m96lh0THxTclQoYVLTbTaOP0jb7hlCs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:57 2025 by rpki-client