$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa File: fa32539a-0dbd-3810-a010-b81c403c8b41.roa (raw, json) Hash identifier: eeVOgMuZVVcOuvR8+xSDvdb1ym3vG32NyE7tIaxBaAs= Subject key identifier: B5:AE:86:77:09:D8:6A:71:03:C6:D2:09:69:1A:C5:CC:F3:AB:6C:A8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5817217FDA02FE4444CC900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.251.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:72:17:fd:a0:2f:e4:44:4c:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=bc57ef4c-19b4-455d-9fb8-12a19cf86c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e3:d5:f0:50:11:c5:fa:68:c8:84:b7:97:e5: 8f:36:ee:46:4a:aa:f1:96:b3:c8:78:29:44:25:b8: 5c:6e:9f:25:20:bf:62:53:78:d4:22:bb:e4:70:3b: e6:3f:6f:83:7a:cb:a2:4f:86:39:f5:af:7d:73:9e: aa:70:3e:63:60:eb:e1:c9:23:6b:03:7d:45:dc:e9: 2c:f0:5a:5f:cc:f5:8c:ff:bd:8f:06:ce:62:ce:91: 28:98:61:86:05:16:2f:7c:f4:92:ad:8c:e7:b7:9e: 68:43:ea:19:fe:0c:ed:c7:5f:1e:c6:b6:25:fa:7a: e1:de:3e:08:d7:23:81:76:3c:e3:76:75:ec:9b:1c: 3c:7c:37:b1:83:32:41:f9:c1:0a:7d:ee:81:62:26: 0c:3a:eb:fb:c7:b4:e5:06:77:d5:6d:3c:7c:64:78: 16:85:96:7b:f1:0f:9b:87:d9:3f:a5:d5:41:96:b7: 1a:30:8d:37:36:24:d7:91:80:ca:08:cf:61:3c:3a: cd:3f:b3:e7:dd:5a:a3:98:d3:f0:5c:39:51:65:d4: 39:f5:87:c6:ea:d7:fa:12:42:28:ba:6d:91:f1:f7: d5:0d:7b:57:c9:ae:06:13:1b:6e:22:31:fc:a9:0f: ee:ea:1c:2e:34:39:d4:47:c0:b7:4d:cb:9d:c0:af: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AE:86:77:09:D8:6A:71:03:C6:D2:09:69:1A:C5:CC:F3:AB:6C:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:58:a4:41:2c:e0:46:90:96:50:42:23:71:88:74:cf:86:71: b1:c5:41:9d:fd:03:c9:a0:08:2f:23:07:40:ce:5a:b7:4a:5b: 0b:25:23:84:6a:0b:4f:40:16:37:82:96:fc:aa:5b:fe:79:97: 43:f8:21:3b:d1:d9:f4:95:5f:6a:ed:ed:f3:5d:19:ca:7d:d1: 71:27:c6:11:28:42:be:26:5a:d4:1e:08:58:21:60:62:b3:63: 28:2b:9a:67:fe:93:e9:fd:1b:b7:93:5a:b1:e0:f9:36:3f:a2: 25:1b:b4:29:fe:7c:96:b1:80:9b:8d:99:e0:c3:5e:35:c4:c3: d7:d7:3c:ae:50:8c:8d:10:68:c8:81:88:6d:a6:a0:5d:d0:95: 7e:f8:01:99:a3:4d:7d:9c:1f:98:4f:7a:60:b0:8f:41:68:56: aa:78:d3:d4:e2:30:5a:33:91:19:ac:5f:3f:c0:db:c9:cc:a9: 72:42:00:93:78:94:ae:28:2c:cb:53:4d:c2:1e:c7:72:45:8f: c3:4b:38:f3:e2:0e:24:62:f1:1a:a9:fd:0f:6b:dc:52:c4:9d: df:d5:96:ac:bf:43:66:a4:84:67:d2:ab:93:e5:a0:13:e8:51: 2c:4f:3f:2c:06:d9:f8:c1:b9:49:33:d4:55:84:2f:76:e5:b4: 98:0d:8d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXIX/aAv5ERMyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmM1N2VmNGMtMTliNC00NTVkLTlmYjgtMTJhMTljZjg2YzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+PV8FARxfpoyIS3l+WPNu5GSqrxlrPIeClE Jbhcbp8lIL9iU3jUIrvkcDvmP2+DesuiT4Y59a99c56qcD5jYOvhySNrA31F3Oks 8FpfzPWM/72PBs5izpEomGGGBRYvfPSSrYznt55oQ+oZ/gztx18exrYl+nrh3j4I 1yOBdjzjdnXsmxw8fDexgzJB+cEKfe6BYiYMOuv7x7TlBnfVbTx8ZHgWhZZ78Q+b h9k/pdVBlrcaMI03NiTXkYDKCM9hPDrNP7Pn3VqjmNPwXDlRZdQ59YfG6tf6EkIo um2R8ffVDXtXya4GExtuIjH8qQ/u6hwuNDnUR8C3TcudwK/T8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWuhncJ2GpxA8bSCWkaxczzq2yoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmEzMjUzOWEtMGRiZC0z ODEwLWEwMTAtYjgxYzQwM2M4YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhYpEEs4EaQllBCI3GIdM+GcbHFQZ39A8mgCC8jB0DOWrdKWwslI4Rq C09AFjeClvyqW/55l0P4ITvR2fSVX2rt7fNdGcp90XEnxhEoQr4mWtQeCFghYGKz Yygrmmf+k+n9G7eTWrHg+TY/oiUbtCn+fJaxgJuNmeDDXjXEw9fXPK5QjI0QaMiB iG2moF3QlX74AZmjTX2cH5hPemCwj0FoVqp409TiMFozkRmsXz/A28nMqXJCAJN4 lK4oLMtTTcIex3JFj8NLOPPiDiRi8Rqp/Q9r3FLEnd/Vlqy/Q2akhGfSq5PloBPo USxPPywG2fjBuUkz1FWEL3bltJgNjZ4= -----END CERTIFICATE-----Generated at Fri Apr 4 08:36:03 2025 by rpki-client