$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa File: f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa (raw, json) Hash identifier: 8S39bnI3t7HjYZwCx9BvPFNA2dQZ8McNKr+yrYgbt1U= Subject key identifier: 31:8D:02:95:C7:EC:B9:3B:36:C9:C2:5C:1D:B7:C5:83:11:F2:0B:19 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817317DC5D0E0E2B514780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:73:17:dc:5d:0e:0e:2b:51:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=99b5f49a-5a9a-4ede-bb13-09ddb5fa0729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:87:81:5c:00:93:9e:05:f8:55:33:10:a2: 39:e7:67:ea:13:ef:bb:09:2d:e5:86:f3:f5:d7:d6: 54:2a:90:91:3c:93:cb:ee:c2:3d:e2:df:96:93:dc: 11:17:16:b9:68:cc:49:f3:e4:51:e9:99:e7:01:92: a3:91:7d:9e:83:2d:78:89:95:a4:81:a9:12:42:a3: 43:f3:9d:82:6b:a4:f7:8e:2a:dc:17:d3:16:68:bc: 3d:54:4b:44:1a:2a:5c:53:19:a5:f7:19:43:a7:e1: b6:0d:ad:ac:90:bc:50:a6:10:fb:86:c7:a3:dc:fd: ab:28:f2:31:84:83:1c:dc:c4:26:c9:3a:7c:95:91: d3:1a:e1:91:59:60:fd:1e:db:9d:55:43:d7:92:aa: dc:d3:98:57:54:53:4e:26:a9:84:4d:ca:53:0f:99: 72:c5:57:5a:c2:e2:67:90:b7:63:20:5a:7e:40:2d: eb:2c:1b:b4:8c:14:09:a0:d4:0a:51:7d:c9:5d:1e: 45:66:43:fb:d3:64:5a:fb:e9:c4:59:5b:36:98:38: a0:6d:32:1e:3d:35:4c:46:1f:37:5a:ef:85:e6:97: e5:85:fe:25:1f:35:19:37:18:2e:1c:63:c6:49:25: 93:59:40:11:41:fa:35:c0:e9:d1:21:e8:86:0a:d1: 9a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8D:02:95:C7:EC:B9:3B:36:C9:C2:5C:1D:B7:C5:83:11:F2:0B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:00:e3:87:5b:6d:42:4e:ae:4c:bb:d6:a3:02:89:ff:8a:a8: fe:b0:8f:38:1f:0e:6f:aa:ca:77:73:27:29:a0:3f:29:6a:75: 66:07:d9:5b:a8:de:fe:7c:24:1f:57:14:bc:cc:b1:e1:dc:07: 9d:99:1e:59:99:c7:e4:e8:37:16:a0:1c:e1:3b:d1:01:17:6d: 6c:86:30:2d:c4:ce:76:17:bc:c8:02:12:aa:ff:15:09:2d:29: 69:37:01:40:08:b9:3c:41:30:78:ff:ac:61:bd:20:d1:0e:d8: b6:32:8d:13:39:02:e1:e6:dd:d9:45:16:db:07:b4:df:d6:f4: 10:51:4c:f4:28:a5:c2:a0:a3:53:fe:b4:0c:b2:a0:cd:fd:f4: 01:d2:39:94:ff:d6:00:68:c7:22:a8:17:f8:b9:4d:ae:9e:df: 6a:1a:85:20:74:2f:32:c5:da:42:84:8d:e9:b6:f4:f9:51:63: a1:d5:f0:1c:9d:c1:0c:dc:ad:4b:13:ad:5b:e2:10:ca:f4:1c: 63:07:3e:9c:5c:3a:94:cf:ca:ef:ae:a0:08:c2:2f:15:44:cf: e8:0b:ef:41:70:c9:c5:c7:22:6b:af:b3:86:71:23:96:d7:51: 46:c2:a0:63:46:5c:8a:a9:75:36:ed:3c:05:5e:63:51:f9:74: 80:84:6f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXMX3F0ODitRR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTliNWY0OWEtNWE5YS00ZWRlLWJiMTMtMDlkZGI1ZmEwNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/aHgVwAk54F+FUzEKI552fqE++7CS3lhvP1 19ZUKpCRPJPL7sI94t+Wk9wRFxa5aMxJ8+RR6ZnnAZKjkX2egy14iZWkgakSQqND 852Ca6T3jircF9MWaLw9VEtEGipcUxml9xlDp+G2Da2skLxQphD7hsej3P2rKPIx hIMc3MQmyTp8lZHTGuGRWWD9HtudVUPXkqrc05hXVFNOJqmETcpTD5lyxVdawuJn kLdjIFp+QC3rLBu0jBQJoNQKUX3JXR5FZkP702Ra++nEWVs2mDigbTIePTVMRh83 Wu+F5pflhf4lHzUZNxguHGPGSSWTWUARQfo1wOnRIeiGCtGafwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGNApXH7Lk7NsnCXB23xYMR8gsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjQwM2RlZTItNzBhZS0z Y2ZjLThiMzktN2VkZTU5ZjQ0N2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYA44dbbUJOrky71qMCif+KqP6wjzgfDm+qyndzJymgPylqdWYH2Vuo 3v58JB9XFLzMseHcB52ZHlmZx+ToNxagHOE70QEXbWyGMC3EznYXvMgCEqr/FQkt KWk3AUAIuTxBMHj/rGG9INEO2LYyjRM5AuHm3dlFFtsHtN/W9BBRTPQopcKgo1P+ tAyyoM399AHSOZT/1gBoxyKoF/i5Ta6e32oahSB0LzLF2kKEjem29PlRY6HV8Byd wQzcrUsTrVviEMr0HGMHPpxcOpTPyu+uoAjCLxVEz+gL70FwycXHImuvs4ZxI5bX UUbCoGNGXIqpdTbtPAVeY1H5dICEbzk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:09 2025 by rpki-client