$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa File: db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa (raw, json) Hash identifier: S4iQG4z/sBAWOU1qRgWsAt21cK59R2VkTYv/vLo7Or8= Subject key identifier: 6B:49:EE:6C:3D:9B:65:8C:76:D6:1E:DD:0C:77:15:38:95:D9:FD:BD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA1236D6719753DA0511E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.251.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:23:6d:67:19:75:3d:a0:51:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=2c5965f7-95e1-494a-bee4-1094b31ccddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:c2:75:45:bb:21:e2:2a:5f:c5:04:b2:97: 62:ff:02:1a:52:95:8c:bc:59:42:59:ba:dd:6c:09: ee:dc:12:45:03:f9:32:ec:d1:d5:03:47:b5:61:8f: b9:e6:61:26:90:ba:13:82:4d:e4:80:de:42:f4:22: e7:a0:6f:d5:62:e9:03:34:fb:3c:43:04:66:af:6d: cb:fc:58:fa:5b:49:6f:e4:6d:d3:84:ca:f8:07:62: 05:11:63:eb:4c:95:cf:37:45:d6:a7:98:03:56:9f: 12:f9:ca:d5:d2:63:81:c8:90:0e:26:21:99:3f:3a: 12:3b:2b:3e:28:96:20:c2:91:71:a8:01:33:f8:44: a5:29:a6:f8:78:38:c2:8c:31:99:1d:55:e9:f9:2a: c2:e7:34:04:d3:4e:da:93:d7:bf:d2:fa:72:e6:84: c9:95:ff:cc:1f:f2:3f:4c:db:7a:6d:db:c7:7b:cc: a2:96:8f:fc:6e:2e:e2:36:b5:14:1e:f7:ab:9f:37: 00:da:42:1d:15:ad:7a:c2:03:f3:aa:03:cf:aa:27: 62:2c:2f:91:e9:a0:0b:12:fb:2f:fa:db:53:39:de: dd:dd:88:2c:87:bb:e9:13:05:c3:89:5e:55:68:e9: 4b:87:57:51:e0:5a:d2:48:ce:6e:34:4b:aa:eb:23: f4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:49:EE:6C:3D:9B:65:8C:76:D6:1E:DD:0C:77:15:38:95:D9:FD:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e2:44:6f:ce:cc:94:1d:c2:e8:93:43:58:58:7c:df:41:f4: c6:df:b0:b8:d9:53:92:33:c8:af:46:c9:60:80:55:13:81:54: 2a:f7:25:bf:92:52:4f:61:b9:8a:59:2a:73:9b:e5:63:11:20: d9:93:03:d1:f5:f6:da:24:d1:b0:9e:4f:10:d5:7b:2a:db:6e: 61:76:2a:83:a1:d1:1a:14:7f:db:45:a3:00:08:0c:59:a2:a4: 32:fb:b5:57:5d:ca:fb:cb:96:d9:a6:ee:41:c4:10:04:4f:74: de:7f:19:a7:15:24:c5:55:01:81:93:8f:be:04:85:30:cb:43: 3a:5c:ef:2b:25:3b:32:a5:9b:77:a5:75:95:26:e2:5f:1a:88: 36:ce:aa:b8:27:0a:69:59:1a:aa:80:c0:c6:75:71:42:5f:c5: 21:8a:c9:bf:6c:53:09:74:1c:32:3a:3d:5d:ce:e7:34:83:94: 1a:b3:d7:c1:76:69:2d:ef:f0:cd:7a:00:f5:cc:55:d8:cb:87: 27:70:b6:93:6c:ff:be:b4:5d:1a:b9:0f:99:1d:f4:68:04:b7: 30:96:8d:b5:05:a4:07:c7:04:59:b5:e5:be:14:1d:87:5c:f2: da:77:46:1d:c1:1a:5f:a1:3b:38:e8:b5:fb:b2:8f:63:ab:52: 95:75:64:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSNtZxl1PaBRHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MmM1OTY1ZjctOTVlMS00OTRhLWJlZTQtMTA5NGIzMWNjZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbHCdUW7IeIqX8UEspdi/wIaUpWMvFlCWbrd bAnu3BJFA/ky7NHVA0e1YY+55mEmkLoTgk3kgN5C9CLnoG/VYukDNPs8QwRmr23L /Fj6W0lv5G3ThMr4B2IFEWPrTJXPN0XWp5gDVp8S+crV0mOByJAOJiGZPzoSOys+ KJYgwpFxqAEz+ESlKab4eDjCjDGZHVXp+SrC5zQE007ak9e/0vpy5oTJlf/MH/I/ TNt6bdvHe8yilo/8bi7iNrUUHvernzcA2kIdFa16wgPzqgPPqidiLC+R6aALEvsv +ttTOd7d3Ygsh7vpEwXDiV5VaOlLh1dR4FrSSM5uNEuq6yP0LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtJ7mw9m2WMdtYe3Qx3FTiV2f29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI0YjNkNTctZWU1YS0z Yjg5LWE5NTYtZmY0YWEwY2EyNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLiRG/OzJQdwuiTQ1hYfN9B9MbfsLjZU5IzyK9GyWCAVROBVCr3Jb+S Uk9huYpZKnOb5WMRINmTA9H19tok0bCeTxDVeyrbbmF2KoOh0RoUf9tFowAIDFmi pDL7tVddyvvLltmm7kHEEARPdN5/GacVJMVVAYGTj74EhTDLQzpc7yslOzKlm3el dZUm4l8aiDbOqrgnCmlZGqqAwMZ1cUJfxSGKyb9sUwl0HDI6PV3O5zSDlBqz18F2 aS3v8M16APXMVdjLhydwtpNs/760XRq5D5kd9GgEtzCWjbUFpAfHBFm15b4UHYdc 8tp3Rh3BGl+hOzjotfuyj2OrUpV1ZFM= -----END CERTIFICATE-----Generated at Fri Apr 4 08:28:31 2025 by rpki-client