$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/136a47fa-0e4f-35dc-bf9e-2e4295cf7684.roa File: 136a47fa-0e4f-35dc-bf9e-2e4295cf7684.roa (raw, json) Hash identifier: xK+ht4V1qJ/MkPhZD+rS7/pYdomLBbS+dCDFkyZj748= Subject key identifier: E7:AF:31:CB:68:55:F0:93:E1:41:EE:AE:65:91:88:B9:6B:5B:C0:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC379EF3A12B5A3D4D280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/136a47fa-0e4f-35dc-bf9e-2e4295cf7684.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c3:79:ef:3a:12:b5:a3:d4:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e3c0053a-4994-4dfa-9504-6642988fffd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:16:25:e2:48:9d:2a:71:f0:57:ac:be:9a:69: e3:e1:11:03:a4:ac:9c:ba:ec:4e:c2:db:04:40:19: 3b:ff:f7:5d:66:e9:42:95:0c:58:2d:b0:3d:8a:d7: 1a:b0:cc:09:92:52:8c:57:70:f5:eb:9a:26:02:e2: 70:28:de:6b:fd:9e:04:da:9c:a1:e9:e9:b7:e7:14: 1a:e5:ee:bb:c2:b4:96:c7:de:82:01:a9:5b:a1:cc: 1d:6a:9c:c7:84:ce:be:0f:b7:1c:c2:e6:85:f1:aa: ea:80:7d:d3:fe:09:f2:c3:fc:8a:b0:a8:22:06:4c: 3b:d4:2f:44:ab:25:d4:dc:c9:17:5c:8b:4c:fd:94: ae:12:f3:97:a3:ee:f6:da:cb:56:62:31:d1:35:7f: b0:53:dd:be:f7:04:15:ec:d3:1b:ad:c1:67:4c:09: 3e:f8:9c:f4:25:f6:b8:9e:7e:c4:67:88:7a:6e:49: 12:0d:d6:09:28:70:bd:80:90:67:f3:5e:9e:17:84: 5f:e7:c5:65:c6:7e:86:78:6d:3f:74:68:5a:e0:2f: c5:7b:a1:53:d2:ef:31:3e:1b:fd:95:2d:29:df:17: 64:50:9a:0e:40:6c:14:63:76:b4:cc:82:ad:e5:38: 69:2b:15:5c:cc:be:0d:2b:d0:44:12:be:45:3c:1b: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AF:31:CB:68:55:F0:93:E1:41:EE:AE:65:91:88:B9:6B:5B:C0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/136a47fa-0e4f-35dc-bf9e-2e4295cf7684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:06:07:a1:fa:f0:35:65:fb:e8:b8:6f:f5:60:be:12:a1:9b: 02:ca:c5:9c:1a:48:55:3b:d1:c7:ea:65:03:5f:c5:f8:8c:7e: e3:54:62:71:dd:f3:bc:93:c7:20:07:76:2a:d2:9f:14:2a:5b: 88:9c:f6:b2:24:51:09:5a:17:0c:9b:fa:e6:9d:c9:01:d3:d3: 3e:26:19:f6:19:35:fc:44:bb:5d:85:5f:32:75:b4:84:13:61: e3:0a:cb:cc:37:44:b0:37:59:1d:c1:39:c9:93:68:bf:c4:f3: 66:b8:b7:6b:64:f4:e7:15:ef:16:91:10:75:c3:be:5c:0c:63: f3:e8:85:03:96:92:b9:bf:77:c0:9e:20:78:19:5c:2e:2c:45: 60:5c:1c:b4:e4:f8:0b:b8:a0:66:d4:97:c5:5c:c6:93:22:ec: c7:0c:55:8f:4b:0a:15:e0:89:a4:ef:7f:ac:e1:d9:cf:04:eb: 98:35:06:95:83:39:ed:ae:bd:4a:40:4d:79:cd:5d:96:75:0a: ec:dc:d4:f7:e8:de:1d:fd:9e:34:28:8a:f4:e9:0b:94:20:5e: 34:6b:87:df:02:30:09:43:a7:d3:52:66:51:76:17:88:43:11: cb:24:69:ed:ff:eb:58:f7:3f:26:98:ee:78:5b:bc:b8:91:8e: 13:9e:2e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusN57zoStaPU0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTNjMDA1M2EtNDk5NC00ZGZhLTk1MDQtNjY0Mjk4OGZmZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRYl4kidKnHwV6y+mmnj4REDpKycuuxOwtsE QBk7//ddZulClQxYLbA9itcasMwJklKMV3D165omAuJwKN5r/Z4E2pyh6em35xQa 5e67wrSWx96CAalbocwdapzHhM6+D7ccwuaF8arqgH3T/gnyw/yKsKgiBkw71C9E qyXU3MkXXItM/ZSuEvOXo+722stWYjHRNX+wU92+9wQV7NMbrcFnTAk++Jz0Jfa4 nn7EZ4h6bkkSDdYJKHC9gJBn816eF4Rf58Vlxn6GeG0/dGha4C/Fe6FT0u8xPhv9 lS0p3xdkUJoOQGwUY3a0zIKt5ThpKxVczL4NK9BEEr5FPBuVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOevMctoVfCT4UHurmWRiLlrW8AXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTM2YTQ3ZmEtMGU0Zi0z NWRjLWJmOWUtMmU0Mjk1Y2Y3Njg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkGB6H68DVl++i4b/VgvhKhmwLKxZwaSFU70cfqZQNfxfiMfuNUYnHd 87yTxyAHdirSnxQqW4ic9rIkUQlaFwyb+uadyQHT0z4mGfYZNfxEu12FXzJ1tIQT YeMKy8w3RLA3WR3BOcmTaL/E82a4t2tk9OcV7xaREHXDvlwMY/PohQOWkrm/d8Ce IHgZXC4sRWBcHLTk+Au4oGbUl8VcxpMi7McMVY9LChXgiaTvf6zh2c8E65g1BpWD Oe2uvUpATXnNXZZ1Cuzc1Pfo3h39njQoivTpC5QgXjRrh98CMAlDp9NSZlF2F4hD Ecskae3/61j3PyaY7nhbvLiRjhOeLsw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:44:11 2025 by rpki-client