$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa2a0cc6-6a4b-3cf5-8ac7-94c00ad87635.roa File: fa2a0cc6-6a4b-3cf5-8ac7-94c00ad87635.roa (raw, json) Hash identifier: LEC868FioNI80wvakpW87Sdd62OW6ExB+//+HMg34Zs= Subject key identifier: ED:8A:36:A1:53:17:44:2A:96:36:FC:86:2A:DF:87:8E:D1:C2:4D:84 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818A5EA99081C9040EB800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa2a0cc6-6a4b-3cf5-8ac7-94c00ad87635.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8a:5e:a9:90:81:c9:04:0e:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=60dc6505-c600-410c-be4d-ad6f9efa08d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0b:20:0b:1f:f7:d8:44:1a:cc:6e:33:12:2a: 9f:89:47:67:9b:31:eb:30:b8:99:1a:b0:1f:f4:2e: c5:8c:a0:55:be:4e:f7:fb:e3:07:5d:47:fd:97:51: 6b:42:83:26:fd:ce:6a:bb:c3:b7:99:a7:2f:22:7c: c5:b2:48:82:fd:8f:3d:ba:1e:b6:bf:67:99:c4:9f: 1e:56:fa:2c:fd:94:6c:1d:23:b3:65:3b:f9:c7:b3: d6:1e:5b:bf:71:53:1e:e0:2b:c8:1b:91:5d:56:26: 52:a5:4c:65:ed:c9:86:a0:10:e6:e7:8a:08:db:3c: a4:7d:2d:3c:32:6b:eb:5c:e8:d7:7a:36:fb:68:29: b8:37:c8:f1:51:ad:b7:be:db:9a:c3:8d:46:59:d8: 6e:c0:c8:de:4e:3b:92:74:22:32:d7:7a:84:43:d3: 23:b5:fb:3b:6c:b6:be:23:2e:50:ec:e4:54:7b:96: d5:a7:d3:fb:da:65:15:30:dd:91:6b:28:8d:83:0e: 27:68:7b:34:55:94:7b:95:26:dc:fb:9e:b7:14:e0: e3:52:b7:5a:8a:d5:bc:5f:f8:d4:35:05:90:c6:11: 09:c9:b6:0b:bc:56:25:8e:13:b3:fb:15:0f:da:0a: 6d:b5:2c:0e:fe:4f:0d:43:9c:6b:09:ce:a3:37:42: 0b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8A:36:A1:53:17:44:2A:96:36:FC:86:2A:DF:87:8E:D1:C2:4D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa2a0cc6-6a4b-3cf5-8ac7-94c00ad87635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:cf:36:c8:04:9a:44:0c:9a:0d:00:bd:21:7d:14:d6:21:b7: fc:06:01:b3:94:19:17:cd:11:29:e9:fe:ce:7a:3d:10:df:ad: c7:0b:14:6c:0b:72:9f:24:ff:26:4f:c8:07:84:19:de:82:08: 44:a1:ed:7b:03:93:b8:fb:cc:f6:d7:22:dc:ff:63:64:b7:2c: d9:4b:05:72:32:f7:86:5e:18:04:b0:13:63:fa:d7:b6:18:fa: 5b:34:ec:eb:4d:f9:3a:05:1d:24:bb:ed:5e:3a:ce:83:24:23: 8a:60:7a:cf:c7:74:cc:9a:f8:54:87:81:08:14:3a:bd:70:ae: 2e:1c:8d:9a:de:b2:6d:2a:8b:40:45:93:48:db:63:dd:58:bc: d3:d9:e7:c4:b0:00:c0:2a:41:2b:b0:df:6e:30:44:50:cd:50: 0f:f8:29:d4:fd:4a:21:64:f9:57:cb:3f:b2:71:47:05:10:29: c1:a8:c3:19:80:d1:cb:23:2c:b7:21:a9:cf:61:e8:1e:1c:20: e0:ff:6f:8d:92:9d:b9:35:c4:46:9e:38:a0:3f:45:d8:62:fc: b0:6a:72:a1:b2:85:41:73:e7:3d:b7:f0:49:20:98:c4:58:08: 59:31:d8:6a:cd:a2:3d:35:c2:2c:fe:a2:06:2a:cc:53:6d:f4: ca:14:b9:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYpeqZCByQQOuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjBkYzY1MDUtYzYwMC00MTBjLWJlNGQtYWQ2ZjllZmEwOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgsgCx/32EQazG4zEiqfiUdnmzHrMLiZGrAf 9C7FjKBVvk73++MHXUf9l1FrQoMm/c5qu8O3macvInzFskiC/Y89uh62v2eZxJ8e Vvos/ZRsHSOzZTv5x7PWHlu/cVMe4CvIG5FdViZSpUxl7cmGoBDm54oI2zykfS08 MmvrXOjXejb7aCm4N8jxUa23vtuaw41GWdhuwMjeTjuSdCIy13qEQ9Mjtfs7bLa+ Iy5Q7ORUe5bVp9P72mUVMN2RayiNgw4naHs0VZR7lSbc+563FODjUrdaitW8X/jU NQWQxhEJybYLvFYljhOz+xUP2gpttSwO/k8NQ5xrCc6jN0ILMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2KNqFTF0Qqljb8hirfh47Rwk2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmEyYTBjYzYtNmE0Yi0z Y2Y1LThhYzctOTRjMDBhZDg3NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7PNsgEmkQMmg0AvSF9FNYht/wGAbOUGRfNESnp/s56PRDfrccLFGwL cp8k/yZPyAeEGd6CCESh7XsDk7j7zPbXItz/Y2S3LNlLBXIy94ZeGASwE2P617YY +ls07OtN+ToFHSS77V46zoMkI4pges/HdMya+FSHgQgUOr1wri4cjZresm0qi0BF k0jbY91YvNPZ58SwAMAqQSuw324wRFDNUA/4KdT9SiFk+VfLP7JxRwUQKcGowxmA 0csjLLchqc9h6B4cIOD/b42Snbk1xEaeOKA/Rdhi/LBqcqGyhUFz5z238EkgmMRY CFkx2GrNoj01wiz+ogYqzFNt9MoUuVY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:53 2025 by rpki-client