$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1b41fd-fa7a-39ed-a72a-3989d9a3e769.roa File: fd1b41fd-fa7a-39ed-a72a-3989d9a3e769.roa (raw, json) Hash identifier: LKZjim7DWjeU/mgXjIHGW3amq17imrYQQ6RfHOUrcn0= Subject key identifier: 16:8B:33:9E:DF:FE:72:30:F9:3A:AF:55:0C:0B:F3:38:6A:7D:85:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C581725B38769E16D107D8C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1b41fd-fa7a-39ed-a72a-3989d9a3e769.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 142.250.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:72:5b:38:76:9e:16:d1:07:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=143e87d4-cbf4-402e-a0df-711cc776cedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:73:0c:ab:a6:1c:45:31:06:8f:2d:25:99:54: fb:22:77:a2:78:f2:b7:74:48:68:07:81:e5:e8:9f: 36:b0:b1:1e:74:ae:b9:58:f3:9f:aa:46:d4:61:07: 56:65:f1:aa:02:6b:a6:a8:ba:93:2d:66:d5:d8:62: 54:a3:7c:9d:9c:50:8c:d8:08:53:66:34:02:a7:db: 75:48:75:38:08:5d:53:d7:4c:62:79:55:e1:0e:44: 05:08:da:2b:40:d8:a3:a6:bb:d4:4b:b2:e3:66:cc: 80:89:f4:a9:45:de:8c:92:4e:42:04:c8:90:c0:43: 41:5c:07:bd:74:2f:17:79:f7:53:cf:0b:ca:d4:52: e8:9e:65:90:2f:e7:97:78:22:2b:f5:af:b1:cd:8e: 95:4c:c2:19:60:07:66:a2:bf:4e:47:03:e8:a6:a4: b1:30:cb:e7:1c:d5:17:5b:35:fb:15:04:97:7f:2d: 37:64:66:07:90:b5:7a:2a:e1:35:24:90:75:1b:dc: 9d:ae:f3:55:69:00:8a:82:c4:3c:45:a0:b5:31:0a: 02:9d:51:ff:1e:ac:5f:b9:de:e5:39:0a:90:a4:09: 7b:11:e1:52:51:c6:44:c1:88:30:fc:a2:f1:f1:8f: 0c:db:f9:0e:67:c3:ee:75:64:f7:41:b3:d1:48:dc: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8B:33:9E:DF:FE:72:30:F9:3A:AF:55:0C:0B:F3:38:6A:7D:85:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1b41fd-fa7a-39ed-a72a-3989d9a3e769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:6c:86:a1:9d:50:60:a2:b2:53:ce:29:a5:f6:b9:32:9e:f0: b6:b0:c6:4f:14:8e:e7:ca:d2:92:d2:65:b8:c3:f3:69:3a:01: c4:e2:96:d8:04:86:86:21:26:63:1e:09:40:aa:bb:e6:2c:40: 80:c6:52:52:d8:25:24:62:0f:1a:ed:26:be:b0:81:c9:bd:a7: 93:a0:76:05:df:ca:9a:b0:49:d2:7f:c4:bc:35:bd:7e:f3:e9: 84:1e:45:b1:54:80:5c:ef:6b:af:3b:10:35:9d:1e:77:53:fa: f3:5f:e1:f3:dd:39:c6:8a:38:f1:13:98:71:c3:ca:14:04:6d: 0d:a7:00:ee:60:cd:55:a9:46:b6:0e:58:38:d3:63:ff:93:dd: 3d:f6:38:85:85:0c:54:dc:56:05:dd:04:a8:23:99:18:1c:14: a3:e4:58:0f:05:58:55:de:5c:5a:03:f8:54:f4:39:93:88:77: e4:c6:b0:47:e5:e8:08:e8:0a:a6:48:17:22:7c:d3:b8:7d:67: 16:38:10:55:4e:37:ac:10:55:40:8f:94:e2:cf:f3:3a:66:39: 15:ab:73:8f:e0:9a:26:21:64:31:bd:47:0a:56:00:e9:9c:f5: 19:26:7f:0a:ef:ff:d0:12:91:ee:84:2d:90:6f:6a:fb:ed:d9: 60:22:1a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXJbOHaeFtEH2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTQzZTg3ZDQtY2JmNC00MDJlLWEwZGYtNzExY2M3NzZjZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3MMq6YcRTEGjy0lmVT7IneiePK3dEhoB4Hl 6J82sLEedK65WPOfqkbUYQdWZfGqAmumqLqTLWbV2GJUo3ydnFCM2AhTZjQCp9t1 SHU4CF1T10xieVXhDkQFCNorQNijprvUS7LjZsyAifSpRd6Mkk5CBMiQwENBXAe9 dC8XefdTzwvK1FLonmWQL+eXeCIr9a+xzY6VTMIZYAdmor9ORwPopqSxMMvnHNUX WzX7FQSXfy03ZGYHkLV6KuE1JJB1G9ydrvNVaQCKgsQ8RaC1MQoCnVH/Hqxfud7l OQqQpAl7EeFSUcZEwYgw/KLx8Y8M2/kOZ8PudWT3QbPRSNyWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaLM57f/nIw+TqvVQwL8zhqfYUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQxYjQxZmQtZmE3YS0z OWVkLWE3MmEtMzk4OWQ5YTNlNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVshqGdUGCislPOKaX2uTKe8Lawxk8UjufK0pLSZbjD82k6AcTiltgE hoYhJmMeCUCqu+YsQIDGUlLYJSRiDxrtJr6wgcm9p5OgdgXfypqwSdJ/xLw1vX7z 6YQeRbFUgFzva687EDWdHndT+vNf4fPdOcaKOPETmHHDyhQEbQ2nAO5gzVWpRrYO WDjTY/+T3T32OIWFDFTcVgXdBKgjmRgcFKPkWA8FWFXeXFoD+FT0OZOId+TGsEfl 6AjoCqZIFyJ807h9ZxY4EFVON6wQVUCPlOLP8zpmORWrc4/gmiYhZDG9RwpWAOmc 9Rkmfwrv/9ASke6ELZBvavvt2WAiGh0= -----END CERTIFICATE-----Generated at Fri Mar 14 13:41:07 2025 by rpki-client