$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9cb2a04-8979-3731-8c92-0f70826beb04.roa File: e9cb2a04-8979-3731-8c92-0f70826beb04.roa (raw, json) Hash identifier: DdZP8jtGRPxVg9ycq3BT8LTVlEiUnYhJB13zZDw/QPc= Subject key identifier: 6C:68:FD:E2:F5:B8:F6:13:DF:3E:97:94:B9:44:A8:D0:8E:34:EC:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58177BDC258859C81EB8A84 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9cb2a04-8979-3731-8c92-0f70826beb04.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:77:bd:c2:58:85:9c:81:eb:8a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7b148d81-c3aa-4f5c-98aa-8d2d029cf88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:12:3c:0f:f3:f5:c0:0e:87:a4:8b:3f:56: cf:18:ae:99:67:65:c6:2c:80:ea:a5:f6:84:5f:b2: 58:d6:3c:9e:fd:41:ee:dd:64:c6:c3:b0:9c:71:35: 37:54:a2:8b:08:e6:b5:35:db:bf:c9:a2:0d:24:b0: 41:7f:a9:30:8c:60:9c:69:86:51:ff:5f:69:57:01: 6d:b4:00:2f:8b:39:58:1b:2f:04:75:32:79:97:db: a0:af:69:b2:42:83:f7:24:34:23:20:e7:99:45:0c: 04:1e:36:7e:da:37:7f:a0:21:77:56:c8:30:d1:42: 28:33:b4:58:b1:fa:fb:74:65:de:f5:ef:2c:31:fb: 52:ba:c1:fc:74:71:08:ab:85:ef:03:b9:f7:f0:b5: d2:13:e4:90:56:bb:8b:aa:a2:b2:06:a9:2d:3a:2f: f8:87:16:ae:90:bf:5a:33:4c:46:83:8b:3d:40:ca: 0a:62:56:ed:57:9d:2a:69:af:a3:1b:9c:aa:e5:9c: 7f:b4:c0:0e:58:e3:a3:37:f4:74:bd:47:de:0a:96: bb:8d:6f:a7:9f:59:60:52:55:67:6a:d0:71:47:70: db:da:63:46:2e:9a:8d:63:a5:b2:38:53:0f:6b:4b: 56:cd:1a:1f:52:8f:c8:92:bb:fb:e0:9b:a0:e9:97: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:68:FD:E2:F5:B8:F6:13:DF:3E:97:94:B9:44:A8:D0:8E:34:EC:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e9cb2a04-8979-3731-8c92-0f70826beb04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4b:b2:cb:20:46:6e:2e:94:09:0b:3b:1e:b9:f4:6f:e1:93: b5:ec:14:cb:38:54:d2:04:4c:a6:a4:bd:d0:91:10:c1:2b:f4: 1c:99:78:b3:ad:ec:37:d2:64:9e:72:1c:23:33:72:4e:04:40: 22:e5:5e:0e:f1:1b:81:ff:9c:46:51:56:b1:97:c4:89:18:be: c1:2c:d8:3f:ec:b7:6b:5d:cf:be:68:43:78:dd:63:1e:80:71: ce:16:b7:a1:df:27:6f:d4:dc:ab:46:b3:88:19:3e:ea:44:6e: ef:c5:c9:5d:c0:d8:96:05:65:40:de:51:65:43:12:cb:68:9b: 7c:86:3e:a5:57:d3:89:79:7f:dd:85:16:ba:9d:bd:0b:be:21: 8b:99:ef:ea:4e:b3:88:26:61:e1:f1:63:bb:86:51:c2:1f:cd: 4b:57:ac:74:74:2d:3d:9b:4f:7b:52:a7:1e:43:5e:97:a2:04: 33:d0:9c:6b:5e:76:24:f7:81:27:af:9e:14:9f:13:0e:03:fe: 61:4b:4b:5a:44:cd:d9:36:12:5e:be:5f:b7:d8:52:c9:44:48: 89:8e:18:1b:70:67:ee:01:b1:bb:39:18:67:e2:48:ea:11:eb: f4:e4:48:17:9d:2a:75:0d:9a:81:0f:2b:a6:29:02:63:82:05: cb:4e:b2:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXe9wliFnIHrioQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2IxNDhkODEtYzNhYS00ZjVjLTk4YWEtOGQyZDAyOWNmODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMgSPA/z9cAOh6SLP1bPGK6ZZ2XGLIDqpfaE X7JY1jye/UHu3WTGw7CccTU3VKKLCOa1Ndu/yaINJLBBf6kwjGCcaYZR/19pVwFt tAAvizlYGy8EdTJ5l9ugr2myQoP3JDQjIOeZRQwEHjZ+2jd/oCF3Vsgw0UIoM7RY sfr7dGXe9e8sMftSusH8dHEIq4XvA7n38LXSE+SQVruLqqKyBqktOi/4hxaukL9a M0xGg4s9QMoKYlbtV50qaa+jG5yq5Zx/tMAOWOOjN/R0vUfeCpa7jW+nn1lgUlVn atBxR3Db2mNGLpqNY6WyOFMPa0tWzRofUo/Ikrv74Jug6Zfs3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxo/eL1uPYT3z6XlLlEqNCONOxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTljYjJhMDQtODk3OS0z NzMxLThjOTItMGY3MDgyNmJlYjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdLsssgRm4ulAkLOx659G/hk7XsFMs4VNIETKakvdCREMEr9ByZeLOt 7DfSZJ5yHCMzck4EQCLlXg7xG4H/nEZRVrGXxIkYvsEs2D/st2tdz75oQ3jdYx6A cc4Wt6HfJ2/U3KtGs4gZPupEbu/FyV3A2JYFZUDeUWVDEstom3yGPqVX04l5f92F FrqdvQu+IYuZ7+pOs4gmYeHxY7uGUcIfzUtXrHR0LT2bT3tSpx5DXpeiBDPQnGte diT3gSevnhSfEw4D/mFLS1pEzdk2El6+X7fYUslESImOGBtwZ+4Bsbs5GGfiSOoR 6/TkSBedKnUNmoEPK6YpAmOCBctOsks= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:10 2025 by rpki-client