$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7c89b4e-6f44-3076-836e-32f12467ca0b.roa File: e7c89b4e-6f44-3076-836e-32f12467ca0b.roa (raw, json) Hash identifier: btXUiEQF1e9l+EvR8xblTRGU1RNc0XlMwxQAAaslANU= Subject key identifier: 7E:2C:68:FC:78:18:C6:54:E8:B8:CA:30:C8:71:24:5A:B6:18:C5:CE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C582130017C2578595A86A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7c89b4e-6f44-3076-836e-32f12467ca0b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:13:00:17:c2:57:85:95:a8:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=711eb861-08ab-44ba-af64-36af6145753b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:71:46:55:1a:a4:30:f0:b8:3b:ca:f0:3a:b7: 8f:19:3b:1a:5a:ef:5b:dc:e7:77:f2:4a:e8:3e:26: 47:5c:b6:b6:11:ce:64:cb:e5:e7:83:47:84:13:0f: 56:be:cc:d1:f9:e1:b7:53:cc:2a:ee:e8:14:16:c9: 74:24:b0:af:06:55:13:14:5d:9d:d9:69:fb:23:2d: d6:1f:46:4f:7b:ee:f0:ae:aa:ef:ce:f7:e0:7c:80: 7c:c8:02:e5:55:c1:68:e8:71:4d:c6:fd:f4:00:d2: 71:35:b5:c3:56:57:2a:0f:0f:c1:bd:69:a9:ec:04: 10:73:ec:fd:d9:1e:c9:52:69:40:98:7f:dc:c2:5f: 48:84:9d:51:65:26:03:4a:6f:4c:82:ad:8b:47:07: b9:fb:17:40:73:75:40:f0:ec:8d:d1:9d:54:73:fb: 37:d6:7b:4c:45:a1:5f:a8:dc:3a:95:df:b0:ff:39: 82:1a:e7:94:ad:67:e1:c5:27:9f:ab:d8:99:16:29: 5c:e1:f1:ee:e8:c0:f4:a1:36:be:70:ba:e5:26:54: e1:eb:7b:a7:0e:f7:19:4c:97:97:4c:9f:6c:3b:48: 99:d2:88:11:8d:21:01:41:2a:8a:ce:f7:9a:c4:b1: 85:76:c3:5e:a1:40:d7:57:a5:d2:89:86:f3:ee:cf: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2C:68:FC:78:18:C6:54:E8:B8:CA:30:C8:71:24:5A:B6:18:C5:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7c89b4e-6f44-3076-836e-32f12467ca0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a9:aa:fa:5a:71:24:08:0f:fc:8c:11:80:65:5a:07:8f:3a: 14:83:b7:ba:43:be:be:88:b2:53:9b:e9:41:da:ae:42:32:97: e7:be:bd:4d:b8:75:33:49:07:9d:80:7f:c0:f8:c5:5d:f2:0b: 0a:59:5c:70:66:9b:1f:64:ce:da:1c:ea:08:07:fb:26:3f:68: f2:96:b9:50:5c:89:27:8d:46:c8:4f:8f:80:ec:7a:b2:2d:fa: de:50:07:ea:25:14:c9:16:f0:20:8a:03:e0:9a:83:6b:84:98: ab:0e:50:3f:08:d8:5d:00:0c:63:7e:5f:d5:df:09:a6:98:0c: 18:64:b1:25:f6:be:d9:14:63:90:46:82:6d:b5:37:f5:38:8b: ab:cf:df:56:c1:91:c3:09:9d:e4:f9:d0:fa:34:4f:38:25:01: bd:4b:ef:a9:be:14:41:d7:21:7d:f2:14:e9:8d:0f:fd:80:2f: ec:86:bd:24:ec:b8:cf:50:f1:8b:cd:b4:68:22:a1:07:84:c3: 8f:84:03:76:94:14:01:88:a7:8d:c1:c0:a8:62:d9:e0:19:81: d1:46:16:05:52:af:50:9f:09:d8:26:e6:49:82:4d:aa:c9:f0: 9c:cd:09:1f:49:ef:89:0b:ef:13:d3:6d:60:ec:73:a3:a5:14: a6:b2:bb:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghMAF8JXhZWoagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzExZWI4NjEtMDhhYi00NGJhLWFmNjQtMzZhZjYxNDU3NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23FGVRqkMPC4O8rwOrePGTsaWu9b3Od38kro PiZHXLa2Ec5ky+Xng0eEEw9WvszR+eG3U8wq7ugUFsl0JLCvBlUTFF2d2Wn7Iy3W H0ZPe+7wrqrvzvfgfIB8yALlVcFo6HFNxv30ANJxNbXDVlcqDw/BvWmp7AQQc+z9 2R7JUmlAmH/cwl9IhJ1RZSYDSm9Mgq2LRwe5+xdAc3VA8OyN0Z1Uc/s31ntMRaFf qNw6ld+w/zmCGueUrWfhxSefq9iZFilc4fHu6MD0oTa+cLrlJlTh63unDvcZTJeX TJ9sO0iZ0ogRjSEBQSqKzveaxLGFdsNeoUDXV6XSiYbz7s8CNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4saPx4GMZU6LjKMMhxJFq2GMXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdjODliNGUtNmY0NC0z MDc2LTgzNmUtMzJmMTI0NjdjYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvubMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADepqvpacSQID/yMEYBlWgePOhSDt7pDvr6IslOb6UHarkIyl+e+vU24 dTNJB52Af8D4xV3yCwpZXHBmmx9kztoc6ggH+yY/aPKWuVBciSeNRshPj4DserIt +t5QB+olFMkW8CCKA+Cag2uEmKsOUD8I2F0ADGN+X9XfCaaYDBhksSX2vtkUY5BG gm21N/U4i6vP31bBkcMJneT50Po0TzglAb1L76m+FEHXIX3yFOmND/2AL+yGvSTs uM9Q8YvNtGgioQeEw4+EA3aUFAGIp43BwKhi2eAZgdFGFgVSr1CfCdgm5kmCTarJ 8JzNCR9J74kL7xPTbWDsc6OlFKayu1M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:51 2025 by rpki-client