$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa File: df44435b-e5e2-3f3c-af09-a946a39238d3.roa (raw, json) Hash identifier: eVPm+hPzPuRkWBvP4GueVhuWxegXFgOlpFxAH9vYNZs= Subject key identifier: E6:55:82:53:19:64:45:F0:E7:11:54:F5:FC:DA:28:5C:89:F1:25:3A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582319EDFA09BC216FBDD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:31:9e:df:a0:9b:c2:16:fb:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b532986d-db30-481e-9c26-ce1d8bf5594e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:8f:30:7f:09:77:38:a7:9f:df:74:bc:12: 21:db:2c:61:9b:37:af:e1:a1:11:67:7d:54:8b:70: 16:1c:07:65:c9:97:dc:8d:c2:7f:3f:6d:87:ef:8d: 4f:0e:2c:26:cd:62:b4:23:aa:8e:c0:79:b2:1d:d6: f3:6b:db:83:37:3d:aa:58:38:1d:b3:04:79:22:07: cd:23:3a:36:63:1b:62:c5:47:10:70:a8:05:71:bc: bf:82:27:59:20:dc:d4:d4:67:72:75:b3:a2:02:7b: 1c:5a:a5:19:16:a4:a2:3d:3a:a0:41:70:7f:11:06: de:e5:05:2e:f1:61:12:d1:92:e4:5c:fc:b1:86:bd: 51:02:23:3d:53:b2:54:57:b9:a6:87:ed:d0:0b:38: bd:13:d8:93:85:b7:04:ce:68:63:98:b1:f8:8e:e4: 10:ee:6c:71:2a:73:d6:76:62:a3:a4:0f:5d:39:bb: 8d:60:a4:de:82:2d:6e:09:f4:56:ca:a8:26:54:b1: 4b:62:76:9e:34:d9:89:25:aa:c8:55:95:f0:f3:40: 96:38:61:41:85:22:8c:24:c6:06:03:3d:e3:65:ae: 3e:82:24:e4:10:6d:11:28:40:b0:4c:80:4c:0a:4c: 2b:1b:c8:ce:63:07:df:18:b8:9d:d2:f5:17:05:a7: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:55:82:53:19:64:45:F0:E7:11:54:F5:FC:DA:28:5C:89:F1:25:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4c:fb:5d:e4:ee:3a:65:46:76:d6:40:12:b8:0d:65:ab:d7: 49:ce:10:8d:8b:35:d7:a7:97:4b:90:49:c4:42:e7:f8:21:7e: 5e:c4:30:8b:8a:84:bd:34:aa:b5:a3:6f:8e:5a:63:d9:c8:19: 68:4d:2b:70:27:d6:99:33:61:de:31:9e:2d:ca:80:ed:dd:b0: 15:f4:b3:49:f9:06:26:d0:d4:8a:54:d6:af:b2:26:56:ba:e0: 81:04:3b:b5:8c:f8:4f:ae:1c:ab:24:c8:5c:bc:32:a5:97:3e: e5:37:58:4d:4e:89:ea:b9:1b:45:45:ca:d9:96:dd:b6:9b:14: ee:01:d4:f7:a3:f9:5b:5e:0d:1e:88:fc:74:ef:1a:6a:ab:3e: 71:76:50:00:83:3f:ab:03:43:1c:61:ad:66:64:bd:e2:c5:34: d7:c7:b2:6b:8d:1f:b3:11:58:26:da:f3:04:ca:15:5c:dc:47: ca:3f:f7:3f:39:e9:3a:4b:3e:82:70:42:82:9a:9b:f2:65:5c: 2b:23:ba:83:13:f0:a6:d5:eb:92:2f:91:6c:08:29:66:c5:f4: 06:b1:2d:5d:73:ca:0d:01:50:6d:28:82:1b:3d:99:17:a7:45: c9:a0:35:76:77:f8:46:b3:09:43:b9:4c:97:1d:a4:c3:29:4e: 5e:4c:14:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjGe36Cbwhb73YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjUzMjk4NmQtZGIzMC00ODFlLTljMjYtY2UxZDhiZjU1OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTGPMH8Jdzinn990vBIh2yxhmzev4aERZ31U i3AWHAdlyZfcjcJ/P22H741PDiwmzWK0I6qOwHmyHdbza9uDNz2qWDgdswR5IgfN Izo2YxtixUcQcKgFcby/gidZINzU1GdydbOiAnscWqUZFqSiPTqgQXB/EQbe5QUu 8WES0ZLkXPyxhr1RAiM9U7JUV7mmh+3QCzi9E9iThbcEzmhjmLH4juQQ7mxxKnPW dmKjpA9dObuNYKTegi1uCfRWyqgmVLFLYnaeNNmJJarIVZXw80CWOGFBhSKMJMYG Az3jZa4+giTkEG0RKECwTIBMCkwrG8jOYwffGLid0vUXBafZ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZVglMZZEXw5xFU9fzaKFyJ8SU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGY0NDQzNWItZTVlMi0z ZjNjLWFmMDktYTk0NmEzOTIzOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtM+13k7jplRnbWQBK4DWWr10nOEI2LNdenl0uQScRC5/ghfl7EMIuK hL00qrWjb45aY9nIGWhNK3An1pkzYd4xni3KgO3dsBX0s0n5BibQ1IpU1q+yJla6 4IEEO7WM+E+uHKskyFy8MqWXPuU3WE1Oieq5G0VFytmW3babFO4B1Pej+VteDR6I /HTvGmqrPnF2UACDP6sDQxxhrWZkveLFNNfHsmuNH7MRWCba8wTKFVzcR8o/9z85 6TpLPoJwQoKam/JlXCsjuoMT8KbV65IvkWwIKWbF9AaxLV1zyg0BUG0oghs9mRen RcmgNXZ3+EazCUO5TJcdpMMpTl5MFHk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:08 2025 by rpki-client