$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/013f6427-ee63-305a-9973-44f1733b485e.roa File: 013f6427-ee63-305a-9973-44f1733b485e.roa (raw, json) Hash identifier: Xy3WePwLVsPVAszv3ti3KQ6IpoqR/OACKmpo5nkPqpY= Subject key identifier: 88:62:04:4A:93:0B:C8:2F:F2:22:71:7B:E3:01:A9:32:F9:2D:20:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABFB0A5EBB46A0DAC0300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/013f6427-ee63-305a-9973-44f1733b485e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bf:b0:a5:eb:b4:6a:0d:ac:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1245ce1f-aacf-4b1c-bd23-7209b19e017e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:b3:a7:4a:26:0c:f8:9d:b8:c8:5b:0d:71: b9:a1:3f:b0:0e:99:06:1b:67:58:35:df:9f:71:7c: 89:04:e2:0c:ab:db:74:85:f2:42:3a:4c:2c:88:75: a5:0b:59:e0:54:c6:d9:50:29:41:78:40:b9:79:b7: ae:ae:c6:cb:83:2e:ec:4e:28:1b:e0:4d:ff:1c:b9: 7d:0b:19:c6:56:77:3b:14:af:e6:88:ab:a0:3b:27: f9:c3:7c:fc:04:fd:51:e9:c4:57:a6:80:30:06:91: 02:2f:ca:bd:28:3f:a2:fc:3b:db:20:3e:f0:68:c2: f8:57:cf:61:cb:76:25:2d:e5:fb:50:9f:d7:6d:a5: 56:3a:04:ac:2d:a5:dd:9d:c3:77:87:db:a6:27:7f: d3:51:ba:39:f0:77:99:bc:22:f5:cc:f4:d1:c8:f0: 32:45:3c:a9:7d:fa:de:7b:39:2f:16:5f:21:64:e9: 00:4b:6c:2c:43:66:ff:3b:4c:c7:9d:9a:2d:ea:d8: a2:b7:74:85:3a:b5:54:c4:be:fa:03:b5:f0:02:0d: 78:f5:ed:58:96:d7:40:1d:08:bd:98:83:30:f5:6f: 14:15:3c:10:fc:91:62:65:59:da:86:38:02:85:f4: 3b:ee:56:9c:be:53:64:90:3a:30:fa:83:31:ff:5c: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:62:04:4A:93:0B:C8:2F:F2:22:71:7B:E3:01:A9:32:F9:2D:20:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/013f6427-ee63-305a-9973-44f1733b485e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:98:8a:3e:11:d0:68:1b:c0:89:a7:5f:1d:f5:7e:e1:78:22: 5b:7e:05:1b:80:15:19:1e:09:ae:b4:4f:72:a0:46:23:14:10: 9d:a4:ca:8c:a3:90:16:a4:37:24:53:ae:b7:63:32:c5:02:45: e2:99:a2:94:16:c6:0c:de:61:9d:2a:86:9e:dc:2f:d4:ac:53: 2a:48:66:43:01:41:60:75:92:fb:7f:e9:64:54:17:ac:c6:63: 42:70:ef:45:f5:20:5f:24:ee:22:95:12:e2:91:98:7e:ca:0c: 43:38:92:33:5c:a1:32:23:3e:03:24:46:fa:11:e4:74:16:39: e4:ba:69:d8:4f:22:7c:9b:f1:e8:58:38:d9:2c:35:79:a2:8e: cb:09:78:c0:a0:33:1d:fd:96:50:92:cb:c6:78:4b:2c:1f:e5: 8c:84:d3:6b:03:9a:1a:20:40:64:8c:cb:18:ed:5a:84:df:9a: 2f:0f:27:d3:b2:05:a3:31:00:b6:e5:59:a1:d9:a7:76:ba:2f: e0:90:7c:4c:97:e6:5a:88:4d:14:73:c9:10:82:45:60:db:93: 98:40:1c:c3:cf:04:c8:a4:ad:82:01:95:83:93:ac:9d:7a:a2: 37:75:33:ba:1e:9f:b4:74:7d:57:7d:bc:ad:1c:1b:36:15:c2: d0:61:1f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkur+wpeu0ag2sAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTI0NWNlMWYtYWFjZi00YjFjLWJkMjMtNzIwOWIxOWUwMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcizp0omDPiduMhbDXG5oT+wDpkGG2dYNd+f cXyJBOIMq9t0hfJCOkwsiHWlC1ngVMbZUClBeEC5ebeursbLgy7sTigb4E3/HLl9 CxnGVnc7FK/miKugOyf5w3z8BP1R6cRXpoAwBpECL8q9KD+i/DvbID7waML4V89h y3YlLeX7UJ/XbaVWOgSsLaXdncN3h9umJ3/TUbo58HeZvCL1zPTRyPAyRTypffre ezkvFl8hZOkAS2wsQ2b/O0zHnZot6tiit3SFOrVUxL76A7XwAg149e1YltdAHQi9 mIMw9W8UFTwQ/JFiZVnahjgChfQ77lacvlNkkDow+oMx/1wsDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhiBEqTC8gv8iJxe+MBqTL5LSBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDEzZjY0MjctZWU2My0z MDVhLTk5NzMtNDRmMTczM2I0ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuYij4R0GgbwImnXx31fuF4Ilt+BRuAFRkeCa60T3KgRiMUEJ2kyoyj kBakNyRTrrdjMsUCReKZopQWxgzeYZ0qhp7cL9SsUypIZkMBQWB1kvt/6WRUF6zG Y0Jw70X1IF8k7iKVEuKRmH7KDEM4kjNcoTIjPgMkRvoR5HQWOeS6adhPInyb8ehY ONksNXmijssJeMCgMx39llCSy8Z4Sywf5YyE02sDmhogQGSMyxjtWoTfmi8PJ9Oy BaMxALblWaHZp3a6L+CQfEyX5lqITRRzyRCCRWDbk5hAHMPPBMikrYIBlYOTrJ16 ojd1M7oen7R0fVd9vK0cGzYVwtBhH/A= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:56 2025 by rpki-client