$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa File: 23f6d5b1-a0f6-317d-bee3-89903b027032.roa (raw, json) Hash identifier: pviOlmAlXOEssN0Sa5MqpPDQ9fcplXRoTeR6E/yVgoQ= Subject key identifier: 00:1E:E3:66:34:5B:66:8D:B3:AA:69:32:A8:E4:75:1F:91:40:BB:4C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB59F6E736B635FEA1ED80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:59:f6:e7:36:b6:35:fe:a1:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f85b4be2-b186-4978-9fc7-e7b926b08fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:d0:dd:b6:6f:8c:65:58:9e:92:0e:c0:0e: 64:5c:39:5a:27:62:40:82:a3:ab:ee:24:88:2f:f2: 10:cb:48:a6:c8:95:ea:aa:fb:c8:d0:d5:20:6c:d7: 2f:41:9e:f9:d6:c6:52:9a:11:f5:41:61:c4:f8:29: 04:88:32:cb:c4:91:a3:56:b0:1d:e5:6d:6b:90:f8: 0d:d1:0d:f9:11:e1:49:9c:5b:1f:bd:f8:13:50:d1: 30:88:db:72:bf:f5:1a:40:e6:ce:77:8c:5b:a2:f5: 87:65:1b:38:81:5c:7c:d9:93:2d:17:21:3c:41:0d: 20:73:a5:09:d2:97:ad:35:63:e3:3c:4d:c6:9c:8b: c0:7c:35:25:6f:be:76:0b:3a:9d:e3:92:5f:ff:52: fa:44:c8:01:c0:cc:b0:68:ba:5c:bd:84:33:4f:40: af:33:71:f7:ff:56:d9:fe:82:f0:92:31:28:71:7a: 27:2c:3a:77:7a:e2:d0:f9:2b:52:44:bf:e9:cf:ca: 5d:a1:b3:3a:23:0f:dc:7f:ff:47:ff:37:ff:15:1e: de:ed:9f:d1:84:46:eb:90:b0:27:e6:68:75:91:c9: d6:32:50:ce:7d:38:4b:6c:ee:2e:3a:c2:f8:18:5b: 46:b9:de:59:a4:e8:66:24:f0:cb:b4:f3:68:72:58: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1E:E3:66:34:5B:66:8D:B3:AA:69:32:A8:E4:75:1F:91:40:BB:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4b:ca:30:f9:4c:6d:a8:f4:8a:11:e8:fd:46:a8:59:51:3d: 22:60:91:be:a8:7a:d0:ce:51:ea:a9:eb:75:35:d7:29:e1:e4: c5:35:72:b8:51:0f:ef:d8:38:a7:91:13:86:aa:72:74:fb:0a: 4d:30:9e:1c:0f:cb:bb:68:8f:4a:a4:7a:d5:f4:1d:55:30:68: 18:27:e1:3b:17:01:23:0f:01:85:e9:a2:70:d9:71:e9:83:a4: 90:00:79:d7:9b:d2:0a:da:00:64:d9:fa:01:e7:73:db:e7:b9: 22:16:ee:68:37:ca:5c:9d:84:25:e4:80:75:6d:c3:50:da:c1: 26:7d:28:11:c5:11:6c:6b:e9:6e:89:59:6e:11:79:5e:a2:49: d1:16:78:48:d3:e7:72:7d:5f:96:f8:f8:b4:21:14:ef:cb:8d: 91:5a:6f:27:d4:fe:3c:e4:db:7e:e6:1a:2c:3f:a2:d6:23:7d: 8d:a3:98:14:42:9c:36:22:2d:49:3c:ee:81:29:3e:37:71:82: b1:d6:c2:f5:61:83:31:f1:a3:39:9c:24:db:65:c4:63:24:0e: fa:12:7d:71:91:a9:75:a0:c3:69:c7:b9:f4:08:8e:37:af:4d: 28:af:45:f3:8f:5d:70:3a:08:36:68:1f:41:66:bd:ab:35:91: db:28:41:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1n25za2Nf6h7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Zjg1YjRiZTItYjE4Ni00OTc4LTlmYzctZTdiOTI2YjA4ZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhXQ3bZvjGVYnpIOwA5kXDlaJ2JAgqOr7iSI L/IQy0imyJXqqvvI0NUgbNcvQZ751sZSmhH1QWHE+CkEiDLLxJGjVrAd5W1rkPgN 0Q35EeFJnFsfvfgTUNEwiNtyv/UaQObOd4xbovWHZRs4gVx82ZMtFyE8QQ0gc6UJ 0petNWPjPE3GnIvAfDUlb752Czqd45Jf/1L6RMgBwMywaLpcvYQzT0CvM3H3/1bZ /oLwkjEocXonLDp3euLQ+StSRL/pz8pdobM6Iw/cf/9H/zf/FR7e7Z/RhEbrkLAn 5mh1kcnWMlDOfThLbO4uOsL4GFtGud5ZpOhmJPDLtPNoclgDlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAe42Y0W2aNs6ppMqjkdR+RQLtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjNmNmQ1YjEtYTBmNi0z MTdkLWJlZTMtODk5MDNiMDI3MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZLyjD5TG2o9IoR6P1GqFlRPSJgkb6oetDOUeqp63U11ynh5MU1crhR D+/YOKeRE4aqcnT7Ck0wnhwPy7toj0qketX0HVUwaBgn4TsXASMPAYXponDZcemD pJAAedeb0graAGTZ+gHnc9vnuSIW7mg3ylydhCXkgHVtw1DawSZ9KBHFEWxr6W6J WW4ReV6iSdEWeEjT53J9X5b4+LQhFO/LjZFabyfU/jzk237mGiw/otYjfY2jmBRC nDYiLUk87oEpPjdxgrHWwvVhgzHxozmcJNtlxGMkDvoSfXGRqXWgw2nHufQIjjev TSivRfOPXXA6CDZoH0Fmvas1kdsoQTo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:05 2025 by rpki-client