$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/05a7420d-eb8c-307a-b36c-a45d9fdae2f1.roa File: 05a7420d-eb8c-307a-b36c-a45d9fdae2f1.roa (raw, json) Hash identifier: 2dnf6NpWYQt7NL7Epwq3uw+icSlcZgfRb5Lnf4cTHU8= Subject key identifier: C7:AC:D0:24:68:4E:02:2B:C3:35:59:F2:89:F0:20:CF:F4:5C:CC:02 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5F9261CC9159CDBE2880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/05a7420d-eb8c-307a-b36c-a45d9fdae2f1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5f:92:61:cc:91:59:cd:be:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d3d2cce4-d090-42b8-8c01-1330b8d5584b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:cf:00:62:19:a9:e3:8e:92:67:68:73:b7: ab:cd:94:5c:4e:6f:7a:a1:52:4d:f3:68:28:84:94: 1b:f1:83:6b:71:67:5a:95:60:5c:a3:33:8c:bc:dd: fb:83:03:0c:d3:be:a2:b9:1b:dd:52:cf:59:1e:67: 49:54:bb:c9:92:f8:a5:4f:4e:d0:ab:99:ec:81:8b: 2d:7b:e2:68:9e:69:cf:cc:b4:22:17:ce:13:b1:c3: 59:f0:a3:67:83:b7:54:d8:c4:c7:8f:3f:cc:33:27: 7e:f5:eb:07:a5:97:fd:fd:19:f0:b7:36:61:68:a9: b3:87:f8:ad:1b:5e:42:52:4b:91:25:97:58:0c:38: 81:7b:b6:24:13:57:a5:1b:7d:cb:08:2f:03:22:30: 94:96:0e:fd:72:31:eb:6f:93:ce:7e:e6:77:4f:d0: ff:2a:48:b8:5e:bc:95:e8:29:cd:1d:cd:9a:20:ae: 06:09:05:87:cd:4f:42:81:61:27:6f:ab:0f:8f:cf: f3:ab:3f:e9:a9:01:8f:0d:1b:f9:98:48:8d:54:c2: e4:06:c4:dc:71:cc:d3:4e:28:4f:75:8d:ed:a2:80: 1e:02:35:46:74:6b:07:18:9e:27:18:28:e4:dd:d1: 0e:91:bd:28:71:7f:31:8c:ea:44:bf:cc:d0:69:79: 3f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AC:D0:24:68:4E:02:2B:C3:35:59:F2:89:F0:20:CF:F4:5C:CC:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/05a7420d-eb8c-307a-b36c-a45d9fdae2f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:66:65:45:a6:b0:d6:f4:e1:d9:3b:27:84:db:7c:27:fe:71: 85:7e:23:6b:93:ff:19:dd:ce:f2:eb:83:e0:f9:fd:67:50:b4: 13:93:80:b9:19:be:3d:6e:c6:e1:71:35:7a:80:4c:34:82:3b: 7b:5a:49:b9:9a:6d:87:7e:74:12:56:d5:d4:73:77:dd:22:ba: f6:51:dc:b3:04:23:72:01:d7:f6:89:15:0c:a5:48:18:98:47: 4d:6b:22:82:54:e7:cb:e5:83:a9:1c:a6:5b:cd:79:34:b6:ed: e0:b0:91:68:d3:e7:d1:6a:3e:b9:a9:a1:a3:be:3d:87:e2:87: 8a:7d:f2:71:07:84:af:cb:97:08:49:af:76:94:02:82:2a:c3: 13:69:17:39:64:ad:8d:7b:13:55:76:ab:ad:a0:92:3e:8a:63: 24:65:cd:97:28:56:d5:f6:0d:4c:3f:31:b4:93:e9:39:00:d6: d2:0a:fe:9f:97:f8:3e:68:e8:83:18:4a:5a:4d:61:6b:e8:c4: 86:3d:78:10:f8:d8:6a:3e:d2:2f:e4:1e:bc:c6:12:d8:42:84: 8d:38:cc:05:cf:f7:3f:af:d7:af:81:f7:16:f9:bd:2a:10:80: ea:b5:dd:53:33:b4:14:2a:06:b7:83:52:65:1d:c9:ff:39:5b: 30:69:71:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1+SYcyRWc2+KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDNkMmNjZTQtZDA5MC00MmI4LThjMDEtMTMzMGI4ZDU1ODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoLPAGIZqeOOkmdoc7erzZRcTm96oVJN82go hJQb8YNrcWdalWBcozOMvN37gwMM076iuRvdUs9ZHmdJVLvJkvilT07Qq5nsgYst e+JonmnPzLQiF84TscNZ8KNng7dU2MTHjz/MMyd+9esHpZf9/RnwtzZhaKmzh/it G15CUkuRJZdYDDiBe7YkE1elG33LCC8DIjCUlg79cjHrb5POfuZ3T9D/Kki4XryV 6CnNHc2aIK4GCQWHzU9CgWEnb6sPj8/zqz/pqQGPDRv5mEiNVMLkBsTccczTTihP dY3tooAeAjVGdGsHGJ4nGCjk3dEOkb0ocX8xjOpEv8zQaXk/LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMes0CRoTgIrwzVZ8onwIM/0XMwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDVhNzQyMGQtZWI4Yy0z MDdhLWIzNmMtYTQ1ZDlmZGFlMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvs0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxmZUWmsNb04dk7J4TbfCf+cYV+I2uT/xndzvLrg+D5/WdQtBOTgLkZ vj1uxuFxNXqATDSCO3taSbmabYd+dBJW1dRzd90iuvZR3LMEI3IB1/aJFQylSBiY R01rIoJU58vlg6kcplvNeTS27eCwkWjT59FqPrmpoaO+PYfih4p98nEHhK/LlwhJ r3aUAoIqwxNpFzlkrY17E1V2q62gkj6KYyRlzZcoVtX2DUw/MbST6TkA1tIK/p+X +D5o6IMYSlpNYWvoxIY9eBD42Go+0i/kHrzGEthChI04zAXP9z+v16+B9xb5vSoQ gOq13VMztBQqBreDUmUdyf85WzBpcY8= -----END CERTIFICATE-----Generated at Sun Apr 27 07:07:27 2025 by rpki-client