$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17086d63-55ea-346e-b505-383f73ad55a9.roa File: 17086d63-55ea-346e-b505-383f73ad55a9.roa (raw, json) Hash identifier: WCMv5KZYZCA4Uv4SDUaVtupJqMHYE+eyge89OwOQ7NM= Subject key identifier: B6:45:C8:1F:60:7B:F7:05:BA:14:0D:34:25:9A:8A:49:B4:13:25:47 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6BE223A12B401F118380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17086d63-55ea-346e-b505-383f73ad55a9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6b:e2:23:a1:2b:40:1f:11:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fc7d6cdf-44d7-44f7-9265-aaa763d1ab83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:fd:73:59:5b:fd:70:c2:b5:3c:43:c6:74: 51:38:3e:d7:f1:3b:82:e0:74:cf:c2:c5:4d:57:d3: 4b:2d:af:2d:ea:93:fd:0d:cd:36:a1:5b:72:50:8d: 1c:4c:f1:90:c9:31:4e:b6:45:eb:69:56:ab:db:6a: 8f:27:04:57:f7:82:09:4a:de:13:9a:91:ec:05:f1: 6f:19:c6:af:a3:2b:2c:27:8b:22:4b:8d:cc:0d:c6: d9:49:0e:c0:f5:fe:f6:a7:54:2e:47:6e:dc:5e:e0: c8:17:d4:c4:8a:e9:2e:30:6b:8f:9f:96:52:27:07: 0b:f3:7c:12:b7:fd:17:53:0c:98:41:f4:f8:47:23: 11:a2:97:9c:32:7d:3c:6c:07:ce:68:1e:87:f7:9c: b7:67:58:b4:86:2f:d7:ce:a2:34:e5:a2:d5:9e:5c: 41:50:69:d7:18:e8:d8:6a:86:9a:c7:88:47:4c:80: e2:9b:c8:18:4e:ef:55:af:98:a3:69:69:6e:1c:f1: c7:6c:ff:37:0c:86:41:67:d7:84:68:0f:31:b6:e4: 89:a1:21:63:c8:11:3e:db:d6:02:e1:bb:d1:18:57: 39:ca:07:93:de:86:fe:65:d8:6f:76:9a:4a:bb:a0: 90:dc:d3:ce:7a:ef:a4:2d:6a:74:ae:75:22:e8:14: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:45:C8:1F:60:7B:F7:05:BA:14:0D:34:25:9A:8A:49:B4:13:25:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17086d63-55ea-346e-b505-383f73ad55a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:86:f9:f5:01:8b:ac:6e:03:7d:81:c1:ff:e3:7e:d2:76:a1: 87:6e:90:c2:ca:67:93:51:db:07:67:49:fb:c5:07:f2:23:6d: 06:63:f8:51:4d:6f:5c:74:fd:57:b0:7c:59:fd:5c:a0:62:0c: 26:b1:8d:bb:39:d1:9f:76:67:93:3f:21:4c:be:e8:fa:9a:1b: ec:d9:27:39:75:01:85:b0:08:6b:3b:48:5f:2a:87:56:2b:ce: 32:ff:09:46:7b:b1:70:a2:0d:4e:43:88:71:9d:17:67:f0:34: 54:0a:2b:d5:5f:ab:dd:83:64:15:bc:34:61:ea:a3:4d:00:80: 75:25:75:15:c7:75:7c:9f:b1:51:99:63:0f:91:47:17:ed:53: 6a:b2:38:88:f8:eb:c7:2e:6d:11:5e:5a:e8:21:12:25:c3:9a: ed:30:32:43:32:70:c1:95:95:28:f6:5f:c8:4c:cf:78:27:a9: b9:77:14:bd:c4:d6:f3:a3:4e:41:9c:c1:cc:4c:80:09:9d:60: ba:78:77:7c:08:4a:a8:06:25:fa:2d:56:20:72:d0:95:d5:54: b0:3e:2b:65:86:79:53:2c:9c:0b:c0:d9:8b:33:5f:f7:d4:45: d1:f5:ca:c4:eb:42:db:46:55:56:94:17:0a:26:37:36:b8:37: dc:e3:40:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2viI6ErQB8Rg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmM3ZDZjZGYtNDRkNy00NGY3LTkyNjUtYWFhNzYzZDFhYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6b9c1lb/XDCtTxDxnRROD7X8TuC4HTPwsVN V9NLLa8t6pP9Dc02oVtyUI0cTPGQyTFOtkXraVar22qPJwRX94IJSt4TmpHsBfFv GcavoyssJ4siS43MDcbZSQ7A9f72p1QuR27cXuDIF9TEiukuMGuPn5ZSJwcL83wS t/0XUwyYQfT4RyMRopecMn08bAfOaB6H95y3Z1i0hi/XzqI05aLVnlxBUGnXGOjY aoaax4hHTIDim8gYTu9Vr5ijaWluHPHHbP83DIZBZ9eEaA8xtuSJoSFjyBE+29YC 4bvRGFc5ygeT3ob+ZdhvdppKu6CQ3NPOeu+kLWp0rnUi6BQmuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZFyB9ge/cFuhQNNCWaikm0EyVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTcwODZkNjMtNTVlYS0z NDZlLWI1MDUtMzgzZjczYWQ1NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaG+fUBi6xuA32Bwf/jftJ2oYdukMLKZ5NR2wdnSfvFB/IjbQZj+FFN b1x0/VewfFn9XKBiDCaxjbs50Z92Z5M/IUy+6PqaG+zZJzl1AYWwCGs7SF8qh1Yr zjL/CUZ7sXCiDU5DiHGdF2fwNFQKK9Vfq92DZBW8NGHqo00AgHUldRXHdXyfsVGZ Yw+RRxftU2qyOIj468cubRFeWughEiXDmu0wMkMycMGVlSj2X8hMz3gnqbl3FL3E 1vOjTkGcwcxMgAmdYLp4d3wISqgGJfotViBy0JXVVLA+K2WGeVMsnAvA2YszX/fU RdH1ysTrQttGVVaUFwomNza4N9zjQFE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:40 2025 by rpki-client