$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df76bf95-5cc2-3e42-9028-4902a21538ad.roa File: df76bf95-5cc2-3e42-9028-4902a21538ad.roa (raw, json) Hash identifier: a8ZiMuAxRo88p2MQoz4LoQyIXz1EyOiR5pIxRqnyGvI= Subject key identifier: 96:BE:F2:62:81:2F:31:6F:C8:42:30:52:9E:65:0B:15:70:47:94:00 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581869FB2E923F42F2E3980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df76bf95-5cc2-3e42-9028-4902a21538ad.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:86:9f:b2:e9:23:f4:2f:2e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1a510e4d-5a8e-4ae2-b634-72b3e3fe55b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:d0:87:f5:02:c9:06:f6:5f:7b:5c:24:80: c5:99:fb:90:75:80:46:21:b3:ae:8e:f2:0f:45:e2: c1:6a:23:e6:b8:96:81:e0:35:9b:ac:83:45:8f:57: 26:04:78:ee:43:13:b7:55:62:ea:5b:a1:de:b5:cf: c5:3a:bd:db:20:b1:c0:f3:b1:7d:fe:0f:9c:af:ef: 1e:29:fe:c0:38:28:90:9b:2f:60:e8:38:f0:f5:d0: 49:52:39:33:d6:8a:3d:47:bf:95:f3:cc:cb:16:f9: 84:56:bf:04:9a:24:21:f6:c0:8a:b5:2e:72:58:46: db:33:64:20:d7:35:17:0d:aa:22:69:96:c6:51:ac: 0d:c4:92:cc:56:53:4e:59:f3:41:06:96:c4:3e:aa: 8f:4d:0a:c7:de:5e:a6:21:7c:13:da:17:86:06:17: 0d:82:df:25:df:f3:c3:30:06:9f:d6:5b:9c:39:dc: 34:8a:d7:0f:0a:11:d5:51:1e:39:ae:6c:b1:fd:fa: b1:8b:03:cb:e5:19:f3:d9:03:1e:3e:07:ff:10:84: 80:a3:2b:da:87:d3:23:ea:61:45:04:cb:9f:05:d9: 32:3c:e5:81:99:12:b2:92:ce:99:22:f7:e6:d9:c7: 70:e2:69:fb:b6:b2:ec:c1:3c:60:b5:e8:33:83:8b: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BE:F2:62:81:2F:31:6F:C8:42:30:52:9E:65:0B:15:70:47:94:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df76bf95-5cc2-3e42-9028-4902a21538ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:76:ec:37:94:8e:3c:22:ea:15:84:be:64:d4:db:06:50:2e: e0:56:67:31:52:6b:e0:ee:2f:b1:9b:d4:23:88:3f:c7:64:f5: fc:0e:8b:3a:2d:35:1a:0c:dc:02:7c:15:87:21:2f:7b:58:b9: 83:fd:3d:d2:1d:45:bb:40:69:73:0b:c5:bc:33:9b:09:2e:48: 84:1b:d9:f4:58:40:18:81:7f:68:80:61:8b:c8:07:07:87:7a: 38:6f:74:fb:01:24:9d:a5:e1:b0:41:c0:90:53:a4:7f:94:32: 40:37:2a:d5:f3:f3:bf:c2:38:09:18:00:07:61:4c:e5:39:a6: 1c:11:f0:a6:8b:a6:26:44:07:87:c0:d2:cf:34:52:cc:0c:69: 85:d2:d1:15:2b:df:19:43:fd:53:0c:98:d9:62:7c:19:5a:2f: 00:84:be:cc:4b:51:49:83:c4:61:01:19:90:08:a7:72:6f:f5: 95:4d:b2:2b:ef:5e:ef:f8:d7:24:6a:bd:cc:af:8d:ee:da:05: 8e:18:b2:79:20:40:2c:2b:72:51:c5:ed:64:0c:38:b0:58:1e: 33:10:b1:e6:f6:40:fb:10:fd:0f:fd:47:f1:36:07:f3:6b:3f: cb:e1:69:c3:98:86:fa:c2:84:a9:b0:7b:30:47:bb:0a:3c:fb: dd:cd:c5:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYafsukj9C8uOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWE1MTBlNGQtNWE4ZS00YWUyLWI2MzQtNzJiM2UzZmU1NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A/Qh/UCyQb2X3tcJIDFmfuQdYBGIbOujvIP ReLBaiPmuJaB4DWbrINFj1cmBHjuQxO3VWLqW6Hetc/FOr3bILHA87F9/g+cr+8e Kf7AOCiQmy9g6Djw9dBJUjkz1oo9R7+V88zLFvmEVr8EmiQh9sCKtS5yWEbbM2Qg 1zUXDaoiaZbGUawNxJLMVlNOWfNBBpbEPqqPTQrH3l6mIXwT2heGBhcNgt8l3/PD MAaf1lucOdw0itcPChHVUR45rmyx/fqxiwPL5Rnz2QMePgf/EISAoyvah9Mj6mFF BMufBdkyPOWBmRKyks6ZIvfm2cdw4mn7trLswTxgtegzg4u1LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa+8mKBLzFvyEIwUp5lCxVwR5QAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGY3NmJmOTUtNWNjMi0z ZTQyLTkwMjgtNDkwMmEyMTUzOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR27DeUjjwi6hWEvmTU2wZQLuBWZzFSa+DuL7Gb1COIP8dk9fwOizot NRoM3AJ8FYchL3tYuYP9PdIdRbtAaXMLxbwzmwkuSIQb2fRYQBiBf2iAYYvIBweH ejhvdPsBJJ2l4bBBwJBTpH+UMkA3KtXz87/COAkYAAdhTOU5phwR8KaLpiZEB4fA 0s80UswMaYXS0RUr3xlD/VMMmNlifBlaLwCEvsxLUUmDxGEBGZAIp3Jv9ZVNsivv Xu/41yRqvcyvje7aBY4YsnkgQCwrclHF7WQMOLBYHjMQseb2QPsQ/Q/9R/E2B/Nr P8vhacOYhvrChKmwezBHuwo8+93NxYk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:44 2025 by rpki-client