$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa File: 23e558ef-b1ed-349b-bb7c-72c343e78b57.roa (raw, json) Hash identifier: r643fx3p8J6+gXer1W/kfILzh+5FqFX/TMoT8nCExrU= Subject key identifier: D7:60:A5:14:48:9C:19:7A:D2:7F:C8:EB:C0:D7:F8:84:5B:44:61:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAB7FC7729443B61D43B20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b7:fc:77:29:44:3b:61:d4:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9a5f6601-8e02-4fc4-95dc-28357f2a0ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ef:c2:61:3a:66:2e:56:c9:e1:01:88:31:da: 46:62:ea:54:9a:a2:20:c6:27:fe:d5:5a:24:42:6a: 4b:15:32:28:f7:9f:c6:13:cb:04:0a:a9:47:3b:b0: 51:08:da:95:d3:37:e2:17:34:9d:cc:de:c3:fc:ee: 0a:0c:75:27:c6:b8:43:b5:82:21:84:80:45:ae:67: c7:da:94:46:95:d4:df:b9:10:6e:9c:7e:e8:02:e0: e6:b5:89:d6:40:03:c2:fc:c8:36:e5:e2:8e:9b:e6: 9b:2c:e6:d5:e8:7b:91:b8:a3:10:36:0e:18:96:de: 38:c8:4e:18:7c:b7:f4:b0:19:fe:e9:19:82:dc:ba: c9:8b:76:45:9a:29:df:2f:0e:4c:fe:60:9a:c9:af: d3:79:f1:10:b2:d5:55:01:c6:de:8b:56:9c:b4:b4: 57:59:30:d8:b7:2d:62:5c:13:50:9f:db:e2:76:a0: fe:29:52:fe:88:96:e4:e9:5e:74:fa:b0:49:83:c2: 0f:b7:54:fc:db:b2:f0:94:5f:3e:c2:64:1b:97:16: 4f:76:40:73:49:1a:16:de:25:cd:9f:a6:36:36:a6: 6a:de:ff:76:aa:c6:b8:7c:53:42:36:f4:e0:f1:a2: 26:7f:02:f9:5e:d8:15:04:f8:cd:02:68:62:9a:3f: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:60:A5:14:48:9C:19:7A:D2:7F:C8:EB:C0:D7:F8:84:5B:44:61:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:63:af:fa:22:ca:55:f8:f2:49:06:49:44:19:e8:9c:9d:e6: 74:c6:02:4d:a2:9d:f3:2d:64:2b:7a:3c:d8:ac:5b:17:1c:f5: dc:fd:5c:21:f7:85:22:0b:69:46:ca:ea:42:e1:d4:f4:53:1e: 2a:6c:1f:1d:cd:57:0b:00:6c:6e:d9:0f:3d:8e:02:41:ad:a1: 48:54:b0:2c:f5:72:b0:27:25:32:d4:4a:70:1a:ff:29:e3:a9: b7:0f:18:91:1e:68:f5:4a:74:76:a4:e2:71:34:23:dd:ad:47: 4c:8a:7c:40:e4:d0:95:b1:20:bb:15:15:f0:5d:90:e1:a4:e1: 03:47:c1:35:b6:cb:b9:30:1d:86:06:c1:f5:52:70:c9:78:2e: 67:8f:eb:ba:b3:6a:f4:c9:1b:78:f7:72:eb:01:ca:76:dd:43: 87:c0:55:01:ab:8a:86:12:23:f8:f3:84:02:7a:15:86:66:6e: 61:57:7f:a8:dc:0d:a4:02:64:30:a8:3f:a7:c6:e0:8a:42:51: af:4a:65:3c:73:8e:37:72:29:7b:62:9c:02:ae:be:7f:85:0c: e7:5f:fa:1a:ca:6d:a6:06:7b:21:7d:9a:7e:75:44:1a:8f:54: 23:9c:d1:a3:55:27:cf:2f:70:26:b9:cd:62:ab:89:82:e5:d8: d7:b3:9b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurf8dylEO2HUOyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWE1ZjY2MDEtOGUwMi00ZmM0LTk1ZGMtMjgzNTdmMmEwZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme/CYTpmLlbJ4QGIMdpGYupUmqIgxif+1Vok QmpLFTIo95/GE8sECqlHO7BRCNqV0zfiFzSdzN7D/O4KDHUnxrhDtYIhhIBFrmfH 2pRGldTfuRBunH7oAuDmtYnWQAPC/Mg25eKOm+abLObV6HuRuKMQNg4Ylt44yE4Y fLf0sBn+6RmC3LrJi3ZFminfLw5M/mCaya/TefEQstVVAcbei1actLRXWTDYty1i XBNQn9vidqD+KVL+iJbk6V50+rBJg8IPt1T827LwlF8+wmQblxZPdkBzSRoW3iXN n6Y2NqZq3v92qsa4fFNCNvTg8aImfwL5XtgVBPjNAmhimj9+JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdgpRRInBl60n/I68DX+IRbRGG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjNlNTU4ZWYtYjFlZC0z NDliLWJiN2MtNzJjMzQzZTc4YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFjr/oiylX48kkGSUQZ6Jyd5nTGAk2infMtZCt6PNisWxcc9dz9XCH3 hSILaUbK6kLh1PRTHipsHx3NVwsAbG7ZDz2OAkGtoUhUsCz1crAnJTLUSnAa/ynj qbcPGJEeaPVKdHak4nE0I92tR0yKfEDk0JWxILsVFfBdkOGk4QNHwTW2y7kwHYYG wfVScMl4LmeP67qzavTJG3j3cusBynbdQ4fAVQGrioYSI/jzhAJ6FYZmbmFXf6jc DaQCZDCoP6fG4IpCUa9KZTxzjjdyKXtinAKuvn+FDOdf+hrKbaYGeyF9mn51RBqP VCOc0aNVJ88vcCa5zWKriYLl2Nezm2M= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:49 2025 by rpki-client