$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e05d528d-a35c-3d31-8fdc-9b54cac2bd1e.roa File: e05d528d-a35c-3d31-8fdc-9b54cac2bd1e.roa (raw, json) Hash identifier: Du7MGrczAFUu5l/TaV+JKqsV4AJ0IzliD2UpK0zZpJM= Subject key identifier: 67:ED:3A:AC:47:3F:B0:F8:ED:0D:2A:2D:B1:28:1B:09:1F:E4:6C:A4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12F6F1B5E617025282D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e05d528d-a35c-3d31-8fdc-9b54cac2bd1e.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2f:6f:1b:5e:61:70:25:28:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=2c4efdb2-751a-4ba9-99fc-57ac059787ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:0a:2f:9b:f7:33:9f:f4:e8:de:d9:d3:0a: 4f:d2:a9:df:0e:21:fc:91:97:11:25:8d:b4:f3:a2: 1b:ed:f4:54:0e:e5:6e:9b:d8:d7:c2:63:dd:70:af: 2e:c7:73:1f:d8:bd:08:a1:b4:05:97:6b:ec:c3:f6: cd:e4:6e:94:74:5e:1d:a6:8a:89:6f:92:5e:16:ac: 84:dd:07:59:91:97:70:05:30:91:0f:3e:c2:4d:91: 67:4e:bd:52:c9:de:84:38:ce:f9:42:e1:d9:28:f4: 9e:0b:2d:9e:b4:80:d8:d4:43:0e:d8:63:b6:6f:c1: 04:d2:1c:ac:82:34:67:fb:2a:b7:d0:2c:51:1d:fa: 42:1c:98:6c:ee:63:2d:15:1b:63:2c:74:cb:8e:b5: a9:93:16:51:17:1a:96:3a:ab:85:c0:bb:7e:70:ad: b9:fe:3f:bf:f1:49:2c:12:05:25:82:0e:78:71:15: 6e:23:31:ba:4d:63:41:7a:55:60:b7:38:12:be:39: 0b:bd:a6:ec:49:87:58:fc:53:78:8f:9c:1a:26:4b: 23:87:66:d1:dc:92:c8:18:0a:23:11:03:d4:41:dd: 08:fd:a9:86:8f:b3:0c:80:4f:c0:60:cc:0e:6e:67: 76:8f:dc:61:73:0d:a0:de:4f:70:7a:60:70:17:03: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:ED:3A:AC:47:3F:B0:F8:ED:0D:2A:2D:B1:28:1B:09:1F:E4:6C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e05d528d-a35c-3d31-8fdc-9b54cac2bd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:53:a5:04:89:5f:ae:c3:0b:4d:3e:21:eb:93:68:e2:02:dc: e6:9d:65:02:58:37:4b:91:0c:cb:46:25:12:1d:05:14:bf:4e: c6:ed:ec:69:77:8c:80:70:4b:a5:9e:1e:92:93:74:2b:25:2c: 06:5c:6d:7e:64:2b:e1:6c:ea:71:23:41:9c:fb:33:f6:9f:ed: 99:24:ed:0d:ce:c5:2e:63:ae:cf:6c:9f:45:9c:de:30:bf:9a: 4d:eb:b3:17:e1:5c:a0:c9:b7:ba:72:33:50:31:b8:13:1a:c9: d5:f2:ee:c3:f0:7d:c3:5c:bd:42:d6:93:9a:10:3b:a8:99:dc: 95:85:8e:03:21:90:39:7c:65:b9:8e:4a:81:27:3d:b4:e2:2e: bf:4f:cf:8c:71:1f:45:94:a5:7f:46:87:4a:a9:6b:94:57:fe: f3:f4:29:33:44:53:c1:3d:36:4e:1e:fb:79:01:d6:9e:4e:3b: 48:ca:e6:85:a4:ab:47:84:26:31:2a:e7:06:99:f5:bf:1e:3f: 9d:e5:5d:96:cc:db:08:c0:54:55:e9:78:bd:f0:57:48:c3:7b: 25:0e:84:9b:30:59:28:ed:d1:15:39:45:b8:d4:f6:7b:e7:53: 14:e3:43:69:70:c6:fe:6d:8e:1f:7c:af:9a:c8:11:ab:48:56: 59:d3:94:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS9vG15hcCUoLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MmM0ZWZkYjItNzUxYS00YmE5LTk5ZmMtNTdhYzA1OTc4N2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4IKL5v3M5/06N7Z0wpP0qnfDiH8kZcRJY20 86Ib7fRUDuVum9jXwmPdcK8ux3Mf2L0IobQFl2vsw/bN5G6UdF4dpoqJb5JeFqyE 3QdZkZdwBTCRDz7CTZFnTr1Syd6EOM75QuHZKPSeCy2etIDY1EMO2GO2b8EE0hys gjRn+yq30CxRHfpCHJhs7mMtFRtjLHTLjrWpkxZRFxqWOquFwLt+cK25/j+/8Uks EgUlgg54cRVuIzG6TWNBelVgtzgSvjkLvabsSYdY/FN4j5waJksjh2bR3JLIGAoj EQPUQd0I/amGj7MMgE/AYMwObmd2j9xhcw2g3k9wemBwFwPKMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGftOqxHP7D47Q0qLbEoGwkf5GykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTA1ZDUyOGQtYTM1Yy0z ZDMxLThmZGMtOWI1NGNhYzJiZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdTpQSJX67DC00+IeuTaOIC3OadZQJYN0uRDMtGJRIdBRS/Tsbt7Gl3 jIBwS6WeHpKTdCslLAZcbX5kK+Fs6nEjQZz7M/af7Zkk7Q3OxS5jrs9sn0Wc3jC/ mk3rsxfhXKDJt7pyM1AxuBMaydXy7sPwfcNcvULWk5oQO6iZ3JWFjgMhkDl8ZbmO SoEnPbTiLr9Pz4xxH0WUpX9Gh0qpa5RX/vP0KTNEU8E9Nk4e+3kB1p5OO0jK5oWk q0eEJjEq5waZ9b8eP53lXZbM2wjAVFXpeL3wV0jDeyUOhJswWSjt0RU5RbjU9nvn UxTjQ2lwxv5tjh98r5rIEatIVlnTlME= -----END CERTIFICATE-----Generated at Fri Apr 4 08:26:15 2025 by rpki-client