$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa File: de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa (raw, json) Hash identifier: VGJWgWFKtTCyUxi98TQZQ7leDDCKQgPdpPU48TYqcI8= Subject key identifier: 2D:8B:B7:41:00:E9:17:58:E7:31:2B:80:2E:0E:3D:EA:80:F4:83:7C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12787FF8D4E87BB18EA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:27:87:ff:8d:4e:87:bb:18:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=6d190b7e-bb8c-4fcc-9fa1-8656518460eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:61:1e:f1:5c:41:5c:f7:ad:ab:8c:94:11: ee:e2:7d:71:ce:d6:48:cc:98:6b:9a:71:1e:58:2d: 89:3f:74:60:83:bc:8e:89:fc:c9:f8:da:74:32:ad: 53:d8:ec:44:90:6d:1f:d8:17:42:fd:d9:30:2f:1d: df:52:19:6c:e7:40:d1:ed:f9:f1:72:f5:22:54:00: ea:04:6b:a6:89:36:ef:ec:fc:f2:d1:54:bc:f7:62: 37:22:e8:d3:67:38:55:1e:22:bb:cd:34:79:84:05: c0:0b:f6:03:01:68:fa:5a:db:3b:99:79:4b:73:a3: 34:a1:67:65:d6:00:be:1f:fd:ee:cf:90:90:3b:54: 4f:6c:3f:be:82:7d:79:68:a8:62:75:29:34:0b:f3: 64:66:0e:6c:86:cb:18:5f:0a:aa:15:84:a7:53:bb: 91:7c:0d:5e:63:fc:5f:dc:a5:aa:e1:65:61:d2:a6: e4:24:34:28:d6:50:e1:77:02:58:58:3b:4d:ad:7b: f4:b1:38:69:7a:99:62:77:6d:0e:cf:62:a9:d5:77: fc:54:5d:8f:e4:57:c5:3e:78:f4:0a:bb:66:ea:10: 76:c4:8e:3a:0f:b3:d6:e3:ed:f8:c0:c0:22:1c:aa: 78:20:2b:bc:07:40:7e:78:65:b4:03:c6:4d:4b:e5: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:B7:41:00:E9:17:58:E7:31:2B:80:2E:0E:3D:EA:80:F4:83:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7d:5b:91:34:00:65:12:c5:f1:47:4b:68:01:4b:bd:62:aa: 80:ae:15:df:2e:48:c3:4b:7d:88:8a:3f:24:f2:b2:25:a4:e2: a5:a4:21:31:bb:7f:55:7d:01:90:43:db:d8:63:00:97:44:52: 59:aa:4c:a1:0f:91:33:17:f5:0e:1f:26:57:11:50:b5:e1:91: 82:39:33:ad:09:f5:8a:d2:45:33:60:af:50:eb:82:c7:1d:ec: 46:79:4f:74:c2:f0:4b:ae:e5:87:93:db:f0:39:99:0e:c1:b5: f2:fe:72:2a:c4:05:ad:7e:d1:f0:c2:2c:5c:b5:43:04:d0:15: c8:6a:81:ee:fe:f7:6e:82:c0:a4:0b:b8:fa:87:d9:4d:0f:4a: e9:fd:42:81:c4:2d:bd:61:c5:23:77:4f:95:56:6e:20:35:1e: 72:44:4c:41:ae:23:70:e5:16:16:fc:c8:56:09:9b:d1:98:cf: 4f:4f:16:61:29:6c:e0:50:ce:34:de:af:d8:f5:79:43:25:58: 22:c2:e9:ed:67:28:ea:f4:fa:74:11:de:21:3b:64:ab:b3:99: 15:ad:fe:4e:05:bc:1c:10:2c:0b:30:eb:ea:cb:41:6d:c3:12: ed:5c:5b:f3:78:0f:b3:44:2c:5f:f0:13:c3:46:3f:12:2e:db: b1:12:5a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSeH/41Oh7sY6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NmQxOTBiN2UtYmI4Yy00ZmNjLTlmYTEtODY1NjUxODQ2MGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ5hHvFcQVz3rauMlBHu4n1xztZIzJhrmnEe WC2JP3Rgg7yOifzJ+Np0Mq1T2OxEkG0f2BdC/dkwLx3fUhls50DR7fnxcvUiVADq BGumiTbv7Pzy0VS892I3IujTZzhVHiK7zTR5hAXAC/YDAWj6Wts7mXlLc6M0oWdl 1gC+H/3uz5CQO1RPbD++gn15aKhidSk0C/NkZg5shssYXwqqFYSnU7uRfA1eY/xf 3KWq4WVh0qbkJDQo1lDhdwJYWDtNrXv0sThpeplid20Oz2Kp1Xf8VF2P5FfFPnj0 Crtm6hB2xI46D7PW4+34wMAiHKp4ICu8B0B+eGW0A8ZNS+XY8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2Lt0EA6RdY5zErgC4OPeqA9IN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGUyMTQzMmItMmFkNC0z YzEyLTkzYmEtMmM3ZjYwZmU2MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB59W5E0AGUSxfFHS2gBS71iqoCuFd8uSMNLfYiKPyTysiWk4qWkITG7 f1V9AZBD29hjAJdEUlmqTKEPkTMX9Q4fJlcRULXhkYI5M60J9YrSRTNgr1Drgscd 7EZ5T3TC8Euu5YeT2/A5mQ7BtfL+cirEBa1+0fDCLFy1QwTQFchqge7+926CwKQL uPqH2U0PSun9QoHELb1hxSN3T5VWbiA1HnJETEGuI3DlFhb8yFYJm9GYz09PFmEp bOBQzjTer9j1eUMlWCLC6e1nKOr0+nQR3iE7ZKuzmRWt/k4FvBwQLAsw6+rLQW3D Eu1cW/N4D7NELF/wE8NGPxIu27ESWtA= -----END CERTIFICATE-----Generated at Fri Apr 4 08:45:20 2025 by rpki-client