$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa File: 21c30bc2-e254-3dfc-8044-27631c929828.roa (raw, json) Hash identifier: XZqJE1+zskBR2ijCVNDNUEpjJtqkT8+AIUCAFZNrvkA= Subject key identifier: F3:97:CB:1E:66:72:7B:FB:B8:64:98:81:39:85:AD:3A:F9:FD:F1:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB7224964D69A04D967B40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:72:24:96:4d:69:a0:4d:96:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=484aaf88-fb7b-4f7a-8212-b039451040e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:55:19:db:d9:42:3a:6a:2c:bd:74:24:8a: 33:bf:dd:63:38:3a:89:ed:37:da:99:30:f9:bf:aa: 40:03:91:c5:d6:10:74:02:af:3d:da:0f:e8:88:50: e8:c6:bb:df:cc:a9:63:03:74:9c:ed:db:ca:d6:89: ad:be:bb:89:0d:cf:aa:96:8e:f6:8f:f0:cb:a2:79: af:8d:be:3b:44:e2:1e:e5:9a:1a:f1:04:c0:ab:7e: 8c:5e:73:a5:0c:22:af:3c:da:04:77:84:c0:50:00: e6:b2:8f:30:d4:aa:fd:3b:86:17:ce:a8:99:81:63: c1:7c:2b:ac:21:a7:a8:14:90:c0:dd:bb:f8:2f:9f: d8:69:6f:e7:62:ad:c3:36:da:ba:06:af:06:d7:0a: 83:11:be:11:d3:0a:a2:3e:e1:dc:2e:be:28:cc:20: 0e:ef:24:c8:e1:d8:f0:31:96:74:f1:76:38:15:63: 31:34:1e:5d:17:e9:b0:7c:4f:33:1d:ca:87:04:6b: 6c:7c:80:e4:88:1f:cd:6d:b3:83:79:d2:0f:f1:e6: 66:d9:88:28:43:0b:d9:0d:4d:49:f3:4f:c4:5a:e5: 06:4b:c0:54:bb:40:06:32:66:02:e6:84:d1:d8:5c: 91:49:14:5f:2b:71:2f:96:02:b8:22:12:7a:7b:37: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:97:CB:1E:66:72:7B:FB:B8:64:98:81:39:85:AD:3A:F9:FD:F1:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:24:47:41:43:e0:6d:0e:a1:16:8e:29:96:81:de:24:0c:11: 8b:5d:9b:51:a6:67:ec:03:3d:00:40:86:45:1a:ee:cc:ec:b3: 81:4b:55:25:c7:66:47:51:81:1f:df:66:d7:f0:b1:1c:02:ea: f3:b8:ae:e7:c7:3f:cd:90:10:13:86:a8:e5:e4:60:e3:b2:16: 94:35:a1:77:98:65:24:37:bb:82:cc:42:ed:d7:b6:fe:fa:91: 6d:c7:b4:39:e7:a2:90:47:11:74:48:a3:a7:20:21:c9:a3:3d: 06:01:3c:3a:b6:a5:22:16:67:0a:26:69:8c:3e:7e:7a:04:1b: f8:93:75:ee:a4:25:1a:a8:71:fd:8f:a5:dc:76:27:df:9d:9f: 53:75:7b:47:42:15:a6:5d:74:bf:56:c1:e6:b7:65:01:f7:c7: 17:d6:11:59:4d:b1:62:0b:de:c9:46:f4:00:a2:d7:a9:7f:e5: 62:0c:e4:4a:71:ca:e9:ee:24:25:7d:93:48:21:97:c6:50:7f: 24:5d:85:50:21:09:80:e8:bf:bc:85:a8:38:23:54:c8:ef:ca: 1d:f6:f8:b1:a5:d7:ca:51:45:8f:d7:93:00:4e:db:07:fe:a2: 2b:7a:5a:f6:71:26:97:2a:e3:f0:b2:41:54:fc:85:54:b2:87: 5a:24:01:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3Iklk1poE2We0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDg0YWFmODgtZmI3Yi00ZjdhLTgyMTItYjAzOTQ1MTA0MGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcRVGdvZQjpqLL10JIozv91jODqJ7TfamTD5 v6pAA5HF1hB0Aq892g/oiFDoxrvfzKljA3Sc7dvK1omtvruJDc+qlo72j/DLonmv jb47ROIe5Zoa8QTAq36MXnOlDCKvPNoEd4TAUADmso8w1Kr9O4YXzqiZgWPBfCus IaeoFJDA3bv4L5/YaW/nYq3DNtq6Bq8G1wqDEb4R0wqiPuHcLr4ozCAO7yTI4djw MZZ08XY4FWMxNB5dF+mwfE8zHcqHBGtsfIDkiB/NbbODedIP8eZm2YgoQwvZDU1J 80/EWuUGS8BUu0AGMmYC5oTR2FyRSRRfK3EvlgK4IhJ6ezdy6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOXyx5mcnv7uGSYgTmFrTr5/fE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjFjMzBiYzItZTI1NC0z ZGZjLTgwNDQtMjc2MzFjOTI5ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHskR0FD4G0OoRaOKZaB3iQMEYtdm1GmZ+wDPQBAhkUa7szss4FLVSXH ZkdRgR/fZtfwsRwC6vO4rufHP82QEBOGqOXkYOOyFpQ1oXeYZSQ3u4LMQu3Xtv76 kW3HtDnnopBHEXRIo6cgIcmjPQYBPDq2pSIWZwomaYw+fnoEG/iTde6kJRqocf2P pdx2J9+dn1N1e0dCFaZddL9Wwea3ZQH3xxfWEVlNsWIL3slG9ACi16l/5WIM5Epx yunuJCV9k0ghl8ZQfyRdhVAhCYDov7yFqDgjVMjvyh32+LGl18pRRY/XkwBO2wf+ oit6WvZxJpcq4/CyQVT8hVSyh1okAXY= -----END CERTIFICATE-----Generated at Sun Apr 27 22:41:36 2025 by rpki-client