$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/023ed912-0490-392e-9d11-e377feb37b28.roa File: 023ed912-0490-392e-9d11-e377feb37b28.roa (raw, json) Hash identifier: buJYHURq2qW688M3tjQrRG1x3NY4JB3oLL2NKt+UH5s= Subject key identifier: 31:D0:D2:34:2B:20:D5:E8:60:56:1C:36:B6:64:78:4A:05:84:D3:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC83C069023A9E1963480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/023ed912-0490-392e-9d11-e377feb37b28.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c8:3c:06:90:23:a9:e1:96:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=edb3bce3-fb82-4d09-af01-156bb65f8721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:38:24:cd:e9:db:09:82:d3:09:07:b0:d3: ce:b8:a3:1a:e5:a5:08:3f:57:3b:45:e6:8b:64:72: b4:de:e8:4f:c6:9f:0e:fa:a8:e3:56:98:92:8c:96: eb:ff:8c:de:57:19:9a:e1:55:45:87:1d:e7:1d:dd: 1d:24:11:46:fd:51:f9:d5:0f:ad:5f:4d:e4:d1:84: 3b:d9:6a:01:32:0d:ec:bd:fc:0b:2b:b5:cd:1a:74: e7:e1:62:c6:da:2b:6d:a2:9e:60:41:e9:bf:89:3b: 30:d1:e3:e8:e5:f2:e4:15:dc:c1:91:06:df:43:f1: 44:10:5e:62:87:35:cd:9b:7a:7b:81:76:8b:23:d8: 75:72:97:d4:f7:bc:37:77:f7:6d:57:24:91:6c:33: 79:4d:73:b2:0b:06:dc:5a:fb:4e:38:60:7b:a9:4b: e0:f6:21:b5:b4:96:7d:4a:7f:dc:18:01:57:52:a8: 69:51:d9:c5:16:6d:67:ec:1d:4c:03:db:2b:3c:14: e5:6e:d8:55:03:9c:06:46:18:4f:ca:30:92:19:ca: b7:70:68:7e:39:f7:b4:27:98:fc:89:dd:f8:b8:c2: 71:f2:7f:98:58:19:55:b6:83:c3:62:ed:c6:10:bf: e5:a5:bf:c6:02:74:ba:7e:a9:2c:32:e2:19:ce:4f: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D0:D2:34:2B:20:D5:E8:60:56:1C:36:B6:64:78:4A:05:84:D3:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/023ed912-0490-392e-9d11-e377feb37b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:97:4d:02:cf:2b:16:af:65:8e:b4:f0:ec:77:a3:3c:d3:ab: 47:55:7c:91:5e:f2:98:97:9f:dd:54:52:41:5e:d3:ed:aa:00: b3:45:30:93:68:4b:72:3a:3e:9a:48:29:cd:22:68:d3:55:e0: 96:4b:fd:2b:6d:ba:17:cc:ba:e9:fc:5b:a5:f7:03:00:7f:82: d4:7e:49:fe:c7:37:39:d4:e1:2a:93:cc:00:d1:0e:27:13:c1: f6:52:c0:a3:de:64:e9:5b:07:78:cd:49:fc:4d:f8:3d:e7:85: 0c:20:ba:51:65:79:cc:c9:93:79:60:29:16:b7:4b:5e:35:cc: 76:40:44:11:28:3a:f7:98:ce:57:17:12:3e:3a:07:f6:b2:ce: 23:86:d8:4f:19:66:86:10:4a:eb:3e:12:90:50:4f:4c:20:e9: 45:ad:d5:a1:b6:65:b5:7f:79:12:f8:f1:e8:89:72:b3:68:ce: 6e:a6:2b:9c:64:ff:00:72:10:63:46:de:32:90:09:4a:dc:ea: 79:23:28:93:fd:fe:41:04:d4:09:3c:c9:9c:88:d2:cb:36:14: 70:25:e4:3d:e2:88:ae:ec:d9:71:0e:ba:97:e9:02:0f:88:a2: 7e:8e:61:b9:ef:1a:fe:7b:af:dc:90:8c:9f:d9:96:b6:c9:f0: c2:51:d9:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusg8BpAjqeGWNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWRiM2JjZTMtZmI4Mi00ZDA5LWFmMDEtMTU2YmI2NWY4NzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXs4JM3p2wmC0wkHsNPOuKMa5aUIP1c7ReaL ZHK03uhPxp8O+qjjVpiSjJbr/4zeVxma4VVFhx3nHd0dJBFG/VH51Q+tX03k0YQ7 2WoBMg3svfwLK7XNGnTn4WLG2ittop5gQem/iTsw0ePo5fLkFdzBkQbfQ/FEEF5i hzXNm3p7gXaLI9h1cpfU97w3d/dtVySRbDN5TXOyCwbcWvtOOGB7qUvg9iG1tJZ9 Sn/cGAFXUqhpUdnFFm1n7B1MA9srPBTlbthVA5wGRhhPyjCSGcq3cGh+Ofe0J5j8 id34uMJx8n+YWBlVtoPDYu3GEL/lpb/GAnS6fqksMuIZzk8y5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHQ0jQrINXoYFYcNrZkeEoFhNMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDIzZWQ5MTItMDQ5MC0z OTJlLTlkMTEtZTM3N2ZlYjM3YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvobMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiXTQLPKxavZY608Ox3ozzTq0dVfJFe8piXn91UUkFe0+2qALNFMJNo S3I6PppIKc0iaNNV4JZL/SttuhfMuun8W6X3AwB/gtR+Sf7HNznU4SqTzADRDicT wfZSwKPeZOlbB3jNSfxN+D3nhQwgulFleczJk3lgKRa3S141zHZARBEoOveYzlcX Ej46B/ayziOG2E8ZZoYQSus+EpBQT0wg6UWt1aG2ZbV/eRL48eiJcrNozm6mK5xk /wByEGNG3jKQCUrc6nkjKJP9/kEE1Ak8yZyI0ss2FHAl5D3iiK7s2XEOupfpAg+I on6OYbnvGv57r9yQjJ/ZlrbJ8MJR2S4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:49 2025 by rpki-client