$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dc6e4e1e-7e93-30d3-8a04-68b62e397da0.roa File: dc6e4e1e-7e93-30d3-8a04-68b62e397da0.roa (raw, json) Hash identifier: Z+XaKI4o2z2JQZx9j+A1iixvRkhS+5tET69Q6yoIiXs= Subject key identifier: 7F:C5:A4:A2:94:0C:53:65:4E:DF:C8:66:08:F3:63:87:22:10:EC:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58173E91AFEEB9CBFCE1B40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dc6e4e1e-7e93-30d3-8a04-68b62e397da0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:73:e9:1a:fe:eb:9c:bf:ce:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=463c99d4-d0bd-467b-b204-cc5f720dc1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:65:1f:c6:17:0c:b7:d4:27:b3:bf:b4:e8:bc: de:54:38:eb:f8:a9:db:83:64:8a:87:c6:ca:20:d6: d5:f7:62:42:4e:b7:97:66:51:d9:a2:5f:6d:e6:6c: 24:d2:db:4b:7f:0e:73:70:0c:f2:a3:3b:00:71:b5: e7:a8:ee:32:11:7d:8a:62:d4:66:46:69:c5:27:26: de:3f:c0:a1:60:78:af:28:57:3e:96:a1:14:94:3d: ed:02:6f:36:29:e5:38:5f:d7:81:8d:83:2e:fa:df: ce:9b:f8:3f:6b:97:a8:44:eb:82:36:60:d6:4f:47: b3:2a:7d:ca:3a:33:8b:a8:d2:5b:53:db:54:25:59: e5:18:41:d8:1b:b7:c6:3b:54:ee:d2:f0:7e:f9:38: 5c:c3:99:2a:91:b9:49:a6:38:42:1d:fa:c7:e2:ca: a1:62:47:b2:df:0b:a4:98:ed:f6:b8:70:32:1e:1e: 6a:65:76:98:0f:19:af:66:ff:ce:ec:d8:cb:55:2c: 09:f6:42:1e:ac:62:42:62:9a:35:f9:ad:65:19:47: 48:eb:14:c4:a7:a3:a2:0c:e9:93:6b:51:b1:81:20: 77:8c:d7:6f:92:41:ff:a3:c0:20:65:7d:9b:78:9f: aa:94:c6:ca:17:c4:5f:dc:64:2b:2b:5e:fa:a4:75: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C5:A4:A2:94:0C:53:65:4E:DF:C8:66:08:F3:63:87:22:10:EC:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dc6e4e1e-7e93-30d3-8a04-68b62e397da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:72:fd:3f:d0:99:00:76:de:77:e6:53:24:b9:2e:38:1c:40: 2a:2f:7b:18:50:84:47:d2:be:75:5a:07:25:7a:3f:3d:f5:8a: 19:56:b0:3e:ea:62:89:d2:0d:45:8a:89:c1:29:82:c4:a3:f4: e9:4c:88:b6:5c:c8:c2:64:3a:4e:fe:6e:9e:61:09:c8:db:39: cf:7c:86:15:0a:a9:a3:28:1d:73:57:a9:25:9f:b2:b2:b5:5d: db:aa:64:89:0a:03:f0:73:c0:91:00:13:29:40:6d:10:f2:f3: fb:6e:34:f2:e1:15:43:24:0a:cf:b9:67:15:ff:97:8b:73:f7: 86:7e:83:ee:00:da:6c:be:3a:28:49:cb:ad:0a:4b:aa:63:b4: 70:60:dd:c9:c9:1a:be:26:d3:8c:6d:92:39:9a:ac:02:a4:f0: 30:67:da:2e:0c:c0:16:74:66:02:62:a5:14:08:59:67:e7:ea: 87:67:0a:c7:52:62:1c:33:64:f3:46:96:ee:b9:c5:06:e4:f3: 64:e9:15:62:71:58:83:a4:8e:a9:a7:f7:29:e4:0d:44:08:4a: cf:02:84:a6:4e:f6:ee:20:dd:3d:03:c0:21:f4:1d:79:53:4c: 63:9a:ee:08:98:d2:5a:b3:75:59:50:64:c1:ab:b2:33:7e:74: 4f:27:fb:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXPpGv7rnL/OG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDYzYzk5ZDQtZDBiZC00NjdiLWIyMDQtY2M1ZjcyMGRjMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2UfxhcMt9Qns7+06LzeVDjr+Knbg2SKh8bK INbV92JCTreXZlHZol9t5mwk0ttLfw5zcAzyozsAcbXnqO4yEX2KYtRmRmnFJybe P8ChYHivKFc+lqEUlD3tAm82KeU4X9eBjYMu+t/Om/g/a5eoROuCNmDWT0ezKn3K OjOLqNJbU9tUJVnlGEHYG7fGO1Tu0vB++Thcw5kqkblJpjhCHfrH4sqhYkey3wuk mO32uHAyHh5qZXaYDxmvZv/O7NjLVSwJ9kIerGJCYpo1+a1lGUdI6xTEp6OiDOmT a1GxgSB3jNdvkkH/o8AgZX2beJ+qlMbKF8Rf3GQrK176pHW6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/FpKKUDFNlTt/IZgjzY4ciEOxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGM2ZTRlMWUtN2U5My0z MGQzLThhMDQtNjhiNjJlMzk3ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvukMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENy/T/QmQB23nfmUyS5LjgcQCovexhQhEfSvnVaByV6Pz31ihlWsD7q YonSDUWKicEpgsSj9OlMiLZcyMJkOk7+bp5hCcjbOc98hhUKqaMoHXNXqSWfsrK1 XduqZIkKA/BzwJEAEylAbRDy8/tuNPLhFUMkCs+5ZxX/l4tz94Z+g+4A2my+OihJ y60KS6pjtHBg3cnJGr4m04xtkjmarAKk8DBn2i4MwBZ0ZgJipRQIWWfn6odnCsdS YhwzZPNGlu65xQbk82TpFWJxWIOkjqmn9ynkDUQISs8ChKZO9u4g3T0DwCH0HXlT TGOa7giY0lqzdVlQZMGrsjN+dE8n+3A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:43 2025 by rpki-client