$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa File: 2496aed2-6643-3205-9f31-bcdb349f0efa.roa (raw, json) Hash identifier: uFuMSHExUnUsVWxtKAf9/lCLXXaBfWZwCm8EdNDh2wg= Subject key identifier: 7C:6A:88:D8:12:19:1B:6F:27:F1:24:8A:A2:FE:D3:DE:0C:33:FE:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12F7D337F5B6F5D556000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2f:7d:33:7f:5b:6f:5d:55:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=8cc6089e-0e10-4306-9f88-c34e34cd2dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:e8:74:2e:6f:6a:26:7f:28:e3:c2:07:98: 01:bf:32:0f:0e:8b:74:d4:3e:fa:95:2a:b9:12:53: f3:a0:d1:3e:34:9f:04:fe:68:39:44:bb:9f:fd:d7: 11:70:c7:36:75:c6:19:8e:6a:e1:08:8b:0d:62:fc: 66:d8:97:7e:f1:18:3d:8a:d2:fb:5c:48:3b:28:db: 5b:c5:62:fa:bb:74:05:6d:3d:5a:bb:35:87:08:c3: b5:6f:59:7f:60:22:f2:be:e9:74:ee:f7:8b:2e:57: d8:dc:ee:0c:80:c9:a6:a3:20:eb:7d:e7:94:c6:99: 4e:b1:eb:8d:b6:e8:27:02:01:5f:9d:5d:d9:b9:b9: 02:1f:74:9d:1f:db:32:ea:a8:d3:38:07:c0:fb:c1: a4:0f:c1:90:d1:82:9f:8a:bd:65:7e:4d:4e:aa:7c: c5:64:78:ac:45:ab:ff:a6:e0:58:cf:4f:16:65:63: f5:a9:45:a8:e8:1a:32:12:5b:2a:99:8f:40:35:24: 12:17:05:b4:79:bd:41:50:02:e3:23:c8:f0:13:18: fc:dc:95:1f:1b:a4:71:f5:91:dd:e9:f8:5c:d0:f6: 0a:bd:63:d0:07:f3:6c:46:2d:40:20:f9:73:28:49: ae:57:94:a0:75:d5:e9:21:ff:8b:8d:2f:a4:76:34: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6A:88:D8:12:19:1B:6F:27:F1:24:8A:A2:FE:D3:DE:0C:33:FE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:87:fa:62:62:b9:6a:7f:8f:a5:cf:05:a6:76:ad:ae:78:c4: d2:ae:58:5e:fe:68:5e:7a:31:7c:90:67:7c:df:f7:b5:f4:e0: 58:fb:03:0f:07:af:ad:4f:b9:49:14:a8:b2:e5:27:66:b5:21: b0:b0:71:af:2c:57:85:b1:d0:4f:bd:9a:3a:bd:54:02:5e:05: b6:ad:8d:90:09:df:83:08:4c:e9:6b:69:66:e0:00:ae:c4:13: 8c:cb:df:e5:b9:30:c7:22:ba:af:b5:0b:14:fa:82:c4:00:f7: ae:b1:34:15:81:dc:7c:ad:f8:82:ba:04:5e:fb:89:e6:3f:91: 23:cc:eb:b7:01:88:91:62:ad:2b:34:3d:fa:97:8b:ee:53:f0: a3:04:43:dc:97:31:40:7d:c4:27:77:b6:b0:4a:b8:6e:36:1d: 02:46:10:49:45:83:bc:be:bd:a8:45:91:df:52:b0:fa:5a:1e: 30:56:a6:6d:07:c0:4d:1f:e0:05:4e:95:35:9d:03:04:04:18: 9f:9c:7b:1f:ca:77:44:63:c0:47:16:e3:0b:ca:99:d9:3c:b2: f9:92:13:a8:0f:c9:be:c8:9a:4d:db:a5:d7:47:ac:df:c1:8c: 35:90:5c:d1:9a:dc:14:c6:91:70:99:34:e6:ae:11:1e:59:48: 30:f8:29:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS99M39bb11VYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk OGNjNjA4OWUtMGUxMC00MzA2LTlmODgtYzM0ZTM0Y2QyZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQnodC5vaiZ/KOPCB5gBvzIPDot01D76lSq5 ElPzoNE+NJ8E/mg5RLuf/dcRcMc2dcYZjmrhCIsNYvxm2Jd+8Rg9itL7XEg7KNtb xWL6u3QFbT1auzWHCMO1b1l/YCLyvul07veLLlfY3O4MgMmmoyDrfeeUxplOseuN tugnAgFfnV3ZubkCH3SdH9sy6qjTOAfA+8GkD8GQ0YKfir1lfk1OqnzFZHisRav/ puBYz08WZWP1qUWo6BoyElsqmY9ANSQSFwW0eb1BUALjI8jwExj83JUfG6Rx9ZHd 6fhc0PYKvWPQB/NsRi1AIPlzKEmuV5SgddXpIf+LjS+kdjRUEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxqiNgSGRtvJ/EkiqL+094MM/6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjQ5NmFlZDItNjY0My0z MjA1LTlmMzEtYmNkYjM0OWYwZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuH+mJiuWp/j6XPBaZ2ra54xNKuWF7+aF56MXyQZ3zf97X04Fj7Aw8H r61PuUkUqLLlJ2a1IbCwca8sV4Wx0E+9mjq9VAJeBbatjZAJ34MITOlraWbgAK7E E4zL3+W5MMciuq+1CxT6gsQA966xNBWB3Hyt+IK6BF77ieY/kSPM67cBiJFirSs0 PfqXi+5T8KMEQ9yXMUB9xCd3trBKuG42HQJGEElFg7y+vahFkd9SsPpaHjBWpm0H wE0f4AVOlTWdAwQEGJ+cex/Kd0RjwEcW4wvKmdk8svmSE6gPyb7Imk3bpddHrN/B jDWQXNGa3BTGkXCZNOauER5ZSDD4KV8= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:56 2025 by rpki-client