$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa File: f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa (raw, json) Hash identifier: DWhnBJhBEAWGPglc3HgqpFmcgnx/gIwVhKQT+y7cf3s= Subject key identifier: 90:16:17:DE:3A:D3:54:A4:FC:F2:71:04:E7:D7:ED:4F:F8:B9:5D:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12F15ACE16FF375843400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2f:15:ac:e1:6f:f3:75:84:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=5ef7bf61-a233-4715-bcd4-6be997cff6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9f:6f:3c:64:fd:69:57:00:1a:1d:9f:51:dc: 83:4c:bb:a4:2e:16:5c:c5:f9:f3:05:40:80:81:90: c6:53:e8:39:a7:4b:15:06:7f:31:c7:64:31:4f:5c: 4a:19:91:43:2f:91:fc:64:d0:2a:6c:2a:13:94:62: 0e:e9:5e:c5:f8:1e:5f:ff:d2:0a:0f:3f:c3:fd:55: a3:77:88:c0:da:2b:f2:ea:14:28:68:61:f8:60:33: 38:96:eb:5b:72:a9:41:03:f5:7e:e0:42:b8:04:98: c5:c0:03:5b:0a:05:b9:16:43:b9:3f:af:ea:81:0c: 42:33:75:46:2b:71:d3:01:80:03:7b:f6:b9:1b:cf: 27:0b:40:4b:31:b0:5a:68:ef:01:d9:c8:22:9b:83: 97:52:de:b9:38:d4:72:8c:49:8a:0f:d9:e8:24:77: c9:40:be:43:16:08:87:10:e1:da:e4:4a:8d:d7:07: 4c:22:97:b5:66:2b:db:9c:d0:fb:54:c3:6a:a1:71: 59:e2:4c:9a:29:94:a9:cb:37:d6:93:b6:f6:e6:50: 36:08:0f:57:15:8d:d1:96:e8:25:58:f8:f9:38:87: 25:9b:4f:a3:1c:b9:b8:2e:96:59:81:2c:4b:7c:1b: 3a:1e:bf:00:be:b2:c8:6c:46:f2:0a:81:95:bd:fd: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:16:17:DE:3A:D3:54:A4:FC:F2:71:04:E7:D7:ED:4F:F8:B9:5D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f2:8f:32:c9:86:de:f1:8d:42:cb:58:ec:1a:80:95:8b:2b: 1d:a7:02:8a:aa:9e:98:38:3c:a9:a7:ef:19:20:2c:26:1c:d9: 09:a9:7c:96:af:7d:04:59:85:2f:e3:32:e7:43:f8:ff:04:cc: 2d:ee:02:89:fa:3e:68:59:8f:a1:d2:67:fb:a0:3e:f7:1b:aa: fe:2d:c9:3a:22:2f:18:c3:2f:94:d3:2c:3f:dd:cd:e0:38:f9: af:fc:5a:e7:6a:b6:34:72:98:50:77:20:59:b5:23:e7:86:19: a3:92:b5:52:dc:5a:d7:d4:07:0e:49:37:d6:ac:61:f1:21:61: 84:11:42:53:bc:af:6c:83:3d:6b:3b:74:e9:36:2c:5f:cc:c5: 28:c3:2c:7c:1b:41:a5:41:9c:01:14:1c:2c:2e:f6:c3:b5:b7: d5:ab:c8:96:0b:9b:d7:5b:fe:10:cc:83:e1:8d:75:d1:1f:36: e3:bd:c5:9d:7e:eb:48:08:94:dd:bf:f2:ab:97:34:3a:8e:71: 36:7c:7a:e8:f3:4d:d8:e9:ea:b2:3e:88:c4:84:31:bb:2f:d1: b7:32:ae:b2:67:ef:cb:c0:5d:cf:0f:3e:8d:32:58:63:44:7f: 46:ef:4e:cd:fb:9d:df:5a:9f:44:49:4a:3f:8f:cf:95:eb:bb: 55:38:41:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS8VrOFv83WENAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NWVmN2JmNjEtYTIzMy00NzE1LWJjZDQtNmJlOTk3Y2ZmNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ9vPGT9aVcAGh2fUdyDTLukLhZcxfnzBUCA gZDGU+g5p0sVBn8xx2QxT1xKGZFDL5H8ZNAqbCoTlGIO6V7F+B5f/9IKDz/D/VWj d4jA2ivy6hQoaGH4YDM4lutbcqlBA/V+4EK4BJjFwANbCgW5FkO5P6/qgQxCM3VG K3HTAYADe/a5G88nC0BLMbBaaO8B2cgim4OXUt65ONRyjEmKD9noJHfJQL5DFgiH EOHa5EqN1wdMIpe1ZivbnND7VMNqoXFZ4kyaKZSpyzfWk7b25lA2CA9XFY3Rlugl WPj5OIclm0+jHLm4LpZZgSxLfBs6Hr8AvrLIbEbyCoGVvf0uhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAWF94601Sk/PJxBOfX7U/4uV2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjVmN2JmZmEtMDI5ZS0z ZmNjLTlmZTQtOThkZWI2OGJhM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALyjzLJht7xjULLWOwagJWLKx2nAoqqnpg4PKmn7xkgLCYc2QmpfJav fQRZhS/jMudD+P8EzC3uAon6PmhZj6HSZ/ugPvcbqv4tyToiLxjDL5TTLD/dzeA4 +a/8WudqtjRymFB3IFm1I+eGGaOStVLcWtfUBw5JN9asYfEhYYQRQlO8r2yDPWs7 dOk2LF/MxSjDLHwbQaVBnAEUHCwu9sO1t9WryJYLm9db/hDMg+GNddEfNuO9xZ1+ 60gIlN2/8quXNDqOcTZ8eujzTdjp6rI+iMSEMbsv0bcyrrJn78vAXc8PPo0yWGNE f0bvTs37nd9an0RJSj+Pz5Xru1U4QQs= -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:27 2025 by rpki-client