$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa File: f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa (raw, json) Hash identifier: ilrEq0W5U0V46m4DsrRo6WI5y86/xv+1X97lZSpuRx0= Subject key identifier: 0D:63:AB:4D:E3:46:88:C4:EF:04:6D:40:4E:64:2D:59:6C:34:31:BA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12EE33E7F69F29208FA40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2e:e3:3e:7f:69:f2:92:08:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=f392ccd6-36be-4ab1-86c6-e49f2751c3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:b7:f7:88:23:42:d1:7c:51:79:ee:66:c1: ab:95:fe:1a:82:21:0a:df:2e:84:a6:55:72:59:cb: b9:a2:03:b9:4b:3c:e7:41:13:89:9b:dc:f8:ea:bf: 18:6e:b2:6a:58:10:09:fb:03:74:9c:c0:c9:2b:9b: 07:24:71:fd:db:10:86:8d:9d:e0:b1:52:54:b6:e7: 27:bb:4d:e6:31:96:9a:b6:94:2a:0f:77:97:97:4e: f7:73:9d:5e:ee:51:3f:b6:02:5d:0a:5f:78:c3:9d: 66:6f:25:3d:ab:aa:1d:d6:d5:f6:aa:19:97:09:80: c2:5b:b0:56:cc:80:05:ba:ad:89:62:4e:98:44:f8: cd:72:c0:b5:fe:f6:23:c1:38:75:84:74:85:73:1d: 57:dd:24:e9:d7:3d:ed:1a:57:9f:04:26:55:b9:59: 96:60:c3:3f:08:a6:c2:4d:bf:68:6c:1a:dc:37:95: 91:e5:ed:c3:6f:83:2b:68:82:bc:0a:2c:05:72:cd: 20:c6:cb:1b:02:49:fb:fd:f7:4a:60:0e:a2:a1:ca: b2:e9:d2:ab:9b:a5:b8:0c:28:18:e2:f5:51:81:84: 17:b2:17:cd:c1:1e:5c:fb:0d:b6:af:e9:43:86:82: 9c:22:22:52:1e:25:aa:12:d9:2d:ea:ef:6a:be:09: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:63:AB:4D:E3:46:88:C4:EF:04:6D:40:4E:64:2D:59:6C:34:31:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:98:cd:9e:81:3a:25:e5:cf:9a:ce:56:0a:7b:51:f7:63:74: b7:58:8f:00:f3:4e:ff:fe:fb:02:bf:56:0d:d4:00:22:10:5f: 40:dc:df:9a:15:ec:b8:1b:e6:75:78:5f:17:a4:d1:64:c7:47: d8:a5:45:3a:55:57:c2:6a:d2:7f:82:33:15:ec:b5:00:c2:09: 72:6e:17:34:5b:b5:e9:8e:ec:98:65:e1:fe:0f:79:4d:f1:c5: b5:c4:86:a4:09:56:20:5f:99:5b:1a:9e:8f:32:ec:06:f3:e4: be:c0:61:7a:a4:38:6c:f0:dd:00:55:04:9b:20:73:3a:43:c0: aa:79:82:73:28:af:18:48:79:50:b5:7b:66:b7:57:b6:bf:5c: c9:d4:fd:4c:ad:7a:bf:b4:16:f6:75:0d:a3:6c:14:ae:6d:87: 5b:dc:ed:05:f0:a4:61:bc:1a:c0:36:77:df:57:6e:aa:d7:81: f7:a7:49:46:c0:72:12:b0:e9:ab:cb:a5:2c:2b:d7:3b:07:b4: 5c:b1:e1:1f:2b:51:98:85:42:d5:eb:00:2f:a2:00:70:1a:b6: 6d:e5:cf:20:16:5d:13:a8:c6:3b:af:eb:2a:12:f4:cb:bc:6d: 35:5c:3f:a8:13:5f:b6:4c:5d:02:89:9b:58:d7:0b:61:1a:0c: 7b:5f:ce:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS7jPn9p8pII+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ZjM5MmNjZDYtMzZiZS00YWIxLTg2YzYtZTQ5ZjI3NTFjM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5y394gjQtF8UXnuZsGrlf4agiEK3y6EplVy Wcu5ogO5SzznQROJm9z46r8YbrJqWBAJ+wN0nMDJK5sHJHH92xCGjZ3gsVJUtucn u03mMZaatpQqD3eXl073c51e7lE/tgJdCl94w51mbyU9q6od1tX2qhmXCYDCW7BW zIAFuq2JYk6YRPjNcsC1/vYjwTh1hHSFcx1X3STp1z3tGlefBCZVuVmWYMM/CKbC Tb9obBrcN5WR5e3Db4MraIK8CiwFcs0gxssbAkn7/fdKYA6iocqy6dKrm6W4DCgY 4vVRgYQXshfNwR5c+w22r+lDhoKcIiJSHiWqEtkt6u9qvgmJcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1jq03jRojE7wRtQE5kLVlsNDG6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjZjMmY3ZWEtYTk3Zi0z NGQ4LTgzNmUtMTdmYzU1M2IzNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6YzZ6BOiXlz5rOVgp7UfdjdLdYjwDzTv/++wK/Vg3UACIQX0Dc35oV 7Lgb5nV4Xxek0WTHR9ilRTpVV8Jq0n+CMxXstQDCCXJuFzRbtemO7Jhl4f4PeU3x xbXEhqQJViBfmVsano8y7Abz5L7AYXqkOGzw3QBVBJsgczpDwKp5gnMorxhIeVC1 e2a3V7a/XMnU/Uyter+0FvZ1DaNsFK5th1vc7QXwpGG8GsA2d99XbqrXgfenSUbA chKw6avLpSwr1zsHtFyx4R8rUZiFQtXrAC+iAHAatm3lzyAWXROoxjuv6yoS9Mu8 bTVcP6gTX7ZMXQKJm1jXC2EaDHtfzuk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:27 2025 by rpki-client