$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e4af511-b95c-38d3-9f5a-45b94e656305.roa File: 1e4af511-b95c-38d3-9f5a-45b94e656305.roa (raw, json) Hash identifier: 2OlCOOJ6OgkrDwRV5IYh598QryKFhEjet2MtNoJW3oo= Subject key identifier: 32:A4:92:86:22:00:86:8A:6C:1D:2E:02:63:2B:D7:80:F0:5B:A6:04 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6376BE5D4F83920B2A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e4af511-b95c-38d3-9f5a-45b94e656305.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:63:76:be:5d:4f:83:92:0b:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=852c0595-b6ce-418a-aa95-df2de208f6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5e:76:b5:f2:eb:c6:d5:57:72:4b:09:11:dc: 0e:6b:6a:db:46:80:01:fb:8b:d2:02:76:0e:4d:60: a4:4d:a9:02:a8:b3:2d:f5:ad:af:9d:5e:3c:1b:49: 40:28:cc:31:08:9e:66:65:a6:53:11:d9:9e:c8:9c: e1:7c:82:a0:6f:69:e0:fb:d6:42:30:19:e5:60:b0: 29:0f:16:a2:7b:c4:b5:b2:05:2a:9c:46:be:fe:51: b0:ec:d7:be:68:d2:31:39:4b:84:0c:98:ac:12:e0: 58:ac:60:01:35:1c:6f:34:30:cc:43:f3:0a:3a:4d: 6c:23:4d:e7:37:a4:82:4a:5e:59:7c:33:be:a6:c9: c3:b9:34:7f:03:a6:a7:57:27:68:df:38:35:dc:60: 32:39:e1:7e:bd:12:55:d2:58:46:98:fa:61:0b:58: 59:a5:0f:66:c2:c1:f6:3f:df:82:e1:06:49:96:76: 35:d9:48:27:b4:5d:17:a0:c3:61:5a:45:4e:21:67: db:a1:b4:ec:d6:94:3b:26:3b:da:86:79:f9:17:08: 44:b5:ed:c2:93:f2:98:31:df:53:01:02:7e:8c:08: 1d:c0:5a:7f:29:8a:29:58:50:34:af:bf:ef:a9:c1: c9:13:ee:92:be:67:fe:e3:a6:62:ee:bb:05:46:0c: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A4:92:86:22:00:86:8A:6C:1D:2E:02:63:2B:D7:80:F0:5B:A6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e4af511-b95c-38d3-9f5a-45b94e656305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:af:15:97:b4:4b:cc:28:8e:f1:09:8a:31:f7:ef:4f:4c:95: 1e:68:3b:75:43:08:0b:d4:dc:bf:28:9c:43:c2:96:92:21:7b: 33:99:a6:3b:43:49:2b:76:6b:4d:23:14:d8:74:13:ad:f6:28: b4:4e:27:80:cf:4a:2d:db:89:f7:1c:03:73:4d:cc:c7:54:f7: d2:b3:0a:75:fa:c8:b2:e7:ee:20:10:c1:f5:8c:26:25:69:41: a3:53:25:d4:1f:09:62:c9:1d:1b:f4:bd:0f:85:22:30:b0:f6: 18:0a:19:f9:7d:07:74:d2:ee:6f:b1:1e:02:d5:e9:c1:b4:ea: e6:35:ca:54:cc:1b:07:af:fc:a1:91:12:e4:33:c0:4d:62:46: 6d:f4:57:b8:4b:bc:70:fb:ff:f7:c6:08:12:f4:ec:ca:d5:2d: 2e:8c:78:46:ac:50:b9:01:1f:96:df:b2:57:5f:34:ad:c6:56: 1f:16:26:73:da:22:d9:4f:f1:c0:35:2b:40:4f:03:1d:7a:50: 5f:bf:95:8a:1d:17:4d:47:49:4f:16:19:93:40:ee:07:9f:9b: 2d:dd:98:b0:c4:56:67:a9:78:23:5d:c4:e2:91:fa:a0:d3:1e: bc:bc:52:54:8a:02:99:fe:c6:e5:ee:18:11:69:46:5b:7b:2f: 26:fc:28:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2N2vl1Pg5ILKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODUyYzA1OTUtYjZjZS00MThhLWFhOTUtZGYyZGUyMDhmNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F52tfLrxtVXcksJEdwOa2rbRoAB+4vSAnYO TWCkTakCqLMt9a2vnV48G0lAKMwxCJ5mZaZTEdmeyJzhfIKgb2ng+9ZCMBnlYLAp Dxaie8S1sgUqnEa+/lGw7Ne+aNIxOUuEDJisEuBYrGABNRxvNDDMQ/MKOk1sI03n N6SCSl5ZfDO+psnDuTR/A6anVydo3zg13GAyOeF+vRJV0lhGmPphC1hZpQ9mwsH2 P9+C4QZJlnY12UgntF0XoMNhWkVOIWfbobTs1pQ7Jjvahnn5FwhEte3Ck/KYMd9T AQJ+jAgdwFp/KYopWFA0r7/vqcHJE+6Svmf+46Zi7rsFRgyWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKkkoYiAIaKbB0uAmMr14DwW6YEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWU0YWY1MTEtYjk1Yy0z OGQzLTlmNWEtNDViOTRlNjU2MzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6vFZe0S8wojvEJijH3709MlR5oO3VDCAvU3L8onEPClpIhezOZpjtD SSt2a00jFNh0E632KLROJ4DPSi3bifccA3NNzMdU99KzCnX6yLLn7iAQwfWMJiVp QaNTJdQfCWLJHRv0vQ+FIjCw9hgKGfl9B3TS7m+xHgLV6cG06uY1ylTMGwev/KGR EuQzwE1iRm30V7hLvHD7//fGCBL07MrVLS6MeEasULkBH5bfsldfNK3GVh8WJnPa ItlP8cA1K0BPAx16UF+/lYodF01HSU8WGZNA7gefmy3dmLDEVmepeCNdxOKR+qDT Hry8UlSKApn+xuXuGBFpRlt7Lyb8KG0= -----END CERTIFICATE-----Generated at Mon Apr 28 22:54:18 2025 by rpki-client