$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/299e5713-f430-322a-b11e-17331df2c539.roa File: 299e5713-f430-322a-b11e-17331df2c539.roa (raw, json) Hash identifier: MCiWwmeB9ySQ5v3SForeoWqyVGiAT8v19YfP/gUTXtE= Subject key identifier: AC:04:70:13:24:75:54:31:C8:98:E5:98:AC:E0:9A:4D:A3:71:53:F0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB620DAFC5EF6F710C7D50 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/299e5713-f430-322a-b11e-17331df2c539.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:62:0d:af:c5:ef:6f:71:0c:7d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fd6f87b0-6382-4462-b4ba-7f0353804d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:3d:80:25:09:fc:25:0a:b9:dc:e1:99:2c: 09:01:7a:a3:80:d0:0b:1f:d9:bb:24:6f:6b:fa:1b: 72:7e:9a:5a:b2:e7:59:3d:91:73:b9:35:50:43:be: 36:0e:dc:0a:ae:c3:de:42:79:1e:84:40:ae:7e:35: e6:91:31:06:8e:33:b0:b6:0c:1a:90:f9:7f:a1:93: be:64:54:23:82:4f:57:ce:32:c2:38:4a:86:48:13: f7:2c:80:eb:0e:a7:8c:26:f8:39:b7:5d:bd:c4:11: b0:87:82:dc:42:f4:e5:fe:0a:c2:b5:b4:be:33:e8: 7f:56:d0:09:42:57:23:87:dd:e9:a2:31:7b:57:96: b0:8c:f1:36:a7:b5:c5:db:60:ff:8c:cf:73:6c:e3: cd:da:e1:50:f2:33:3f:38:b0:7b:bb:d6:09:f8:00: 33:db:d7:5b:a8:74:76:f5:ac:31:cb:d2:31:22:6b: ad:49:78:05:ce:e8:b7:09:88:64:6b:84:34:11:d4: 10:0e:d8:60:ce:32:c0:5d:37:ea:f3:34:bd:c0:3f: a5:d1:75:55:b3:56:57:47:13:43:b4:37:54:8e:10: c5:64:a4:3f:78:10:d2:03:5a:a1:02:f4:cd:92:e5: 0e:7a:a1:05:d5:8e:a8:5c:b4:ee:66:ee:20:9c:66: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:04:70:13:24:75:54:31:C8:98:E5:98:AC:E0:9A:4D:A3:71:53:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/299e5713-f430-322a-b11e-17331df2c539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f1:7a:c1:4f:62:8f:d7:9c:91:27:ac:4f:96:6c:2c:e6:39: ba:90:a2:d2:b4:36:d5:5b:41:ea:3f:a3:2e:a3:fa:d6:b4:9d: b6:6e:55:3c:84:da:6c:45:ac:fc:e8:e6:d5:b2:65:7f:a9:bf: 61:2a:6e:82:b4:e8:e4:da:1a:f0:40:89:ed:8f:d0:bb:1f:22: b0:af:b2:eb:c8:d2:db:31:c8:63:d9:b5:fa:fc:af:6b:dc:88: dc:80:e9:14:5e:d8:d2:77:6e:b0:5c:2a:0f:38:23:33:59:83: ef:d4:62:72:60:8a:10:a4:17:ba:a1:18:29:c3:96:60:b4:ad: c9:b5:da:fc:69:b6:26:bd:03:08:06:ff:31:8c:97:96:3c:3d: 86:4b:38:9b:25:cd:39:58:78:7e:b9:3b:28:47:cf:32:d6:a1: 05:20:94:40:b8:63:08:fe:0e:ce:d4:ba:6b:bb:59:41:81:24: 6b:7d:21:c1:ae:12:7b:d5:a2:49:7e:b3:08:b9:10:89:d3:23: 64:6b:a6:73:e1:66:5a:c8:bc:0c:ed:73:eb:2d:0b:46:73:60: c5:37:21:7c:c2:c4:6c:4c:68:c8:f9:82:d9:2f:44:be:6e:b3: 8a:f7:1b:50:4c:ae:aa:27:f3:34:2d:a7:22:62:e3:76:44:cc: 45:4f:a1:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2INr8Xvb3EMfVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmQ2Zjg3YjAtNjM4Mi00NDYyLWI0YmEtN2YwMzUzODA0ZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQM9gCUJ/CUKudzhmSwJAXqjgNALH9m7JG9r +htyfppasudZPZFzuTVQQ742DtwKrsPeQnkehECufjXmkTEGjjOwtgwakPl/oZO+ ZFQjgk9XzjLCOEqGSBP3LIDrDqeMJvg5t129xBGwh4LcQvTl/grCtbS+M+h/VtAJ Qlcjh93pojF7V5awjPE2p7XF22D/jM9zbOPN2uFQ8jM/OLB7u9YJ+AAz29dbqHR2 9awxy9IxImutSXgFzui3CYhka4Q0EdQQDthgzjLAXTfq8zS9wD+l0XVVs1ZXRxND tDdUjhDFZKQ/eBDSA1qhAvTNkuUOeqEF1Y6oXLTuZu4gnGbQZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwEcBMkdVQxyJjlmKzgmk2jcVPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjk5ZTU3MTMtZjQzMC0z MjJhLWIxMWUtMTczMzFkZjJjNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnxesFPYo/XnJEnrE+WbCzmObqQotK0NtVbQeo/oy6j+ta0nbZuVTyE 2mxFrPzo5tWyZX+pv2EqboK06OTaGvBAie2P0LsfIrCvsuvI0tsxyGPZtfr8r2vc iNyA6RRe2NJ3brBcKg84IzNZg+/UYnJgihCkF7qhGCnDlmC0rcm12vxptia9AwgG /zGMl5Y8PYZLOJslzTlYeH65OyhHzzLWoQUglEC4Ywj+Ds7Uumu7WUGBJGt9IcGu EnvVokl+swi5EInTI2RrpnPhZlrIvAztc+stC0ZzYMU3IXzCxGxMaMj5gtkvRL5u s4r3G1BMrqon8zQtpyJi43ZEzEVPoUs= -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:19 2025 by rpki-client