$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e1a72dfb-1439-3141-a432-e977c9893c8e.roa File: e1a72dfb-1439-3141-a432-e977c9893c8e.roa (raw, json) Hash identifier: MDo/KXaHkxRocjVSUguVQeNdcyFbXxSwkU1dvq2Jsg8= Subject key identifier: CC:41:CD:A9:20:43:26:5B:F2:C9:9E:53:94:26:46:96:22:49:BC:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58188ED73A2A782C1485B22 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e1a72dfb-1439-3141-a432-e977c9893c8e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:88:ed:73:a2:a7:82:c1:48:5b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cdb64ba8-75eb-4540-8968-69eb062c45b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:cf:17:68:d0:88:b2:b9:b7:24:45:e4:f6: 1e:b2:c8:59:b4:b1:6b:2b:e8:95:71:b0:26:59:4d: 29:d8:3f:45:0d:2c:39:7e:3a:08:f2:e0:96:77:a9: 1a:51:68:e4:3d:61:7e:64:f9:9d:30:79:80:a9:48: 06:3a:5c:f9:6b:88:44:39:75:fa:5c:81:7c:af:79: 22:64:5d:4d:65:c3:f3:1b:1f:be:63:a9:1a:b5:4f: 8a:ea:f5:e4:b2:69:1f:d8:01:ed:33:fe:5e:19:49: d2:2d:3b:d8:c9:2f:dc:de:51:25:56:cc:94:09:b6: a6:eb:25:63:ab:08:ad:68:eb:45:bd:50:58:ef:a6: 1b:40:93:c7:d0:94:b7:e2:3c:7d:45:b9:47:6b:ac: 30:95:36:5b:28:21:6c:1f:5f:a9:4e:5c:e3:51:a8: 6d:d3:42:93:f3:c3:ed:b6:24:f0:d8:86:5c:29:3c: e9:e4:bb:b6:91:8d:69:50:44:3d:a9:3f:74:04:02: f0:d1:3a:e1:f0:14:5a:71:9d:0d:c6:6d:34:31:14: 83:e6:90:70:55:f5:19:da:ab:66:03:39:9a:5e:fc: a5:d5:61:31:40:1c:7b:2e:a5:53:bf:d6:a5:62:27: 3c:ad:55:bf:db:8b:03:57:8f:26:2e:74:39:93:94: e7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:41:CD:A9:20:43:26:5B:F2:C9:9E:53:94:26:46:96:22:49:BC:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e1a72dfb-1439-3141-a432-e977c9893c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a4:a2:22:11:5e:de:47:92:d7:73:c0:c4:1b:8d:c9:39:63: d9:0d:db:d9:87:7f:aa:1b:2c:69:87:96:46:b6:2c:4c:76:1d: 26:41:81:f3:0e:c0:41:ce:a3:49:c7:6e:1d:b2:7a:31:a8:d8: 3c:0c:14:7c:9f:a3:0c:d0:8a:48:49:c3:72:db:8e:22:71:6f: 4c:5c:3e:74:1e:66:68:22:67:f8:9e:37:74:5b:e2:ac:70:0c: 93:74:f0:15:02:47:b1:d5:8f:43:60:79:f1:87:d4:82:6c:ec: 12:f8:10:7b:07:ac:f9:94:9c:27:6d:14:f0:a7:a8:da:a6:9a: 8e:7a:85:b8:b3:66:bb:5a:47:d3:a5:c2:5e:88:b5:b5:fb:04: 66:b0:fa:f3:75:0b:72:89:e6:32:e5:43:c7:95:a4:c8:6e:48: ff:cc:6c:5b:54:fe:76:5a:b8:c7:37:db:87:a9:88:90:8f:88: 12:f9:ae:9a:68:8f:9f:b2:85:bb:5f:80:3b:fd:77:a7:0d:88: 2a:fa:75:4a:52:b5:0a:93:84:38:71:20:e5:51:e7:59:2f:8a: 58:90:0a:15:be:5c:8f:6f:62:ce:d2:22:f7:7a:4c:a1:49:2e: 6f:76:43:bb:f1:4f:1b:f7:dc:06:de:82:70:34:ed:ff:d2:98: 5a:cc:6b:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYjtc6KngsFIWyIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2RiNjRiYTgtNzVlYi00NTQwLTg5NjgtNjllYjA2MmM0NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBjPF2jQiLK5tyRF5PYesshZtLFrK+iVcbAm WU0p2D9FDSw5fjoI8uCWd6kaUWjkPWF+ZPmdMHmAqUgGOlz5a4hEOXX6XIF8r3ki ZF1NZcPzGx++Y6katU+K6vXksmkf2AHtM/5eGUnSLTvYyS/c3lElVsyUCbam6yVj qwitaOtFvVBY76YbQJPH0JS34jx9RblHa6wwlTZbKCFsH1+pTlzjUaht00KT88Pt tiTw2IZcKTzp5Lu2kY1pUEQ9qT90BALw0Trh8BRacZ0Nxm00MRSD5pBwVfUZ2qtm AzmaXvyl1WExQBx7LqVTv9alYic8rVW/24sDV48mLnQ5k5TnOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxBzakgQyZb8smeU5QmRpYiSbz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTFhNzJkZmItMTQzOS0z MTQxLWE0MzItZTk3N2M5ODkzYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEekoiIRXt5HktdzwMQbjck5Y9kN29mHf6obLGmHlka2LEx2HSZBgfMO wEHOo0nHbh2yejGo2DwMFHyfowzQikhJw3LbjiJxb0xcPnQeZmgiZ/ieN3Rb4qxw DJN08BUCR7HVj0NgefGH1IJs7BL4EHsHrPmUnCdtFPCnqNqmmo56hbizZrtaR9Ol wl6ItbX7BGaw+vN1C3KJ5jLlQ8eVpMhuSP/MbFtU/nZauMc324epiJCPiBL5rppo j5+yhbtfgDv9d6cNiCr6dUpStQqThDhxIOVR51kviliQChW+XI9vYs7SIvd6TKFJ Lm92Q7vxTxv33AbegnA07f/SmFrMa/8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:32 2025 by rpki-client