$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b1af465-c310-3f84-8c9a-7ac58d62f231.roa File: 2b1af465-c310-3f84-8c9a-7ac58d62f231.roa (raw, json) Hash identifier: 6K2/bm09JC3bBwYGx0pqNdCe/bLFzMNrz3iqkk3x6oU= Subject key identifier: 30:D4:9F:35:FC:3B:57:A7:19:23:77:A9:F4:39:29:22:F5:65:13:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB76B6795BCAA5818EA380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b1af465-c310-3f84-8c9a-7ac58d62f231.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:76:b6:79:5b:ca:a5:81:8e:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=23893a1f-573e-420b-880d-4e9170671edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:78:f2:b6:2f:8c:38:96:c2:c3:d3:94:f0:7a: 56:98:71:20:ec:a2:7a:7c:cf:28:73:a5:67:84:a2: d2:dd:85:39:dd:d2:91:3a:12:db:da:af:a3:ea:c2: c2:a7:22:ef:93:27:7e:51:95:26:19:4a:7f:aa:c3: 82:9d:cc:21:c3:f0:8d:5c:6a:f7:d0:ba:ac:63:d2: 7b:80:a8:51:9d:c8:68:3f:9d:48:06:0b:3a:42:4e: c8:7c:63:a2:5b:a7:c5:b5:aa:29:eb:54:3e:11:ea: 15:72:26:2a:ef:e1:27:23:b5:19:55:66:b6:5a:d3: 82:75:82:e3:24:b8:0c:f9:68:4d:3a:18:ae:81:3c: 37:91:4c:51:e0:77:18:7a:0e:26:4f:31:06:f9:55: bc:01:bf:b1:a2:1d:1b:5e:25:b1:90:f5:6f:7e:d3: 6d:b8:11:bb:ca:b0:b4:47:3b:db:89:e2:f0:be:4f: 95:e4:08:c9:86:3a:70:f7:74:bb:d6:ce:e4:bc:12: 64:e5:9a:5a:c2:18:cc:63:4b:fa:e5:8c:f2:52:76: 43:81:b0:60:ce:84:e8:74:04:04:3b:23:09:a0:a3: 08:76:db:4a:a7:af:99:e4:c5:38:2e:25:b7:96:6f: d8:b6:43:ff:15:ad:94:38:05:fe:90:c7:36:6b:d2: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D4:9F:35:FC:3B:57:A7:19:23:77:A9:F4:39:29:22:F5:65:13:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b1af465-c310-3f84-8c9a-7ac58d62f231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:32:d2:db:c8:9d:46:b0:72:75:02:a7:0b:29:3f:a2:04:7c: cb:0a:e3:78:80:74:5d:c3:43:96:6e:41:de:c0:a9:0f:6a:ef: 36:1e:4b:0b:52:de:78:f7:2c:48:d8:c8:0c:20:87:fe:04:61: 43:74:6c:ba:a5:9b:2b:1b:2a:0c:eb:eb:51:3f:a8:7e:b3:95: 78:9d:67:d7:ab:d7:8a:e7:b6:6e:25:c1:9c:33:b4:54:b5:11: 50:a4:09:9f:35:0c:c9:32:ab:13:27:0a:f4:4f:e6:5f:54:97: 12:8a:8d:c2:29:5d:3c:2c:08:70:f0:ba:f2:69:b6:1f:69:1a: 43:a7:a8:8d:c5:35:68:87:ec:86:00:11:06:89:2a:d3:85:72: 0a:80:ff:3c:0a:c6:b2:bb:40:04:8a:b5:d7:ce:fe:b8:4e:d3: 9c:2e:b3:26:60:94:e2:cd:64:3e:c1:6b:b2:b5:d5:5a:f4:6f: c4:76:3b:03:3f:6f:00:44:79:3d:8c:49:b7:38:e7:a0:af:34: 84:9a:b2:ea:2f:e7:b4:3c:52:4b:45:1b:a5:32:be:b8:43:be: a0:5a:23:8b:00:16:5e:8a:28:9d:d2:ae:46:4a:20:d8:62:03: 43:9e:19:45:43:a8:2c:28:27:38:d1:37:e7:e7:60:c0:ab:79: 07:5c:21:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3a2eVvKpYGOo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjM4OTNhMWYtNTczZS00MjBiLTg4MGQtNGU5MTcwNjcxZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknjyti+MOJbCw9OU8HpWmHEg7KJ6fM8oc6Vn hKLS3YU53dKROhLb2q+j6sLCpyLvkyd+UZUmGUp/qsOCncwhw/CNXGr30LqsY9J7 gKhRnchoP51IBgs6Qk7IfGOiW6fFtaop61Q+EeoVciYq7+EnI7UZVWa2WtOCdYLj JLgM+WhNOhiugTw3kUxR4HcYeg4mTzEG+VW8Ab+xoh0bXiWxkPVvftNtuBG7yrC0 RzvbieLwvk+V5AjJhjpw93S71s7kvBJk5ZpawhjMY0v65YzyUnZDgbBgzoTodAQE OyMJoKMIdttKp6+Z5MU4LiW3lm/YtkP/Fa2UOAX+kMc2a9K0jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDUnzX8O1enGSN3qfQ5KSL1ZRNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmIxYWY0NjUtYzMxMC0z Zjg0LThjOWEtN2FjNThkNjJmMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcy0tvInUawcnUCpwspP6IEfMsK43iAdF3DQ5ZuQd7AqQ9q7zYeSwtS 3nj3LEjYyAwgh/4EYUN0bLqlmysbKgzr61E/qH6zlXidZ9er14rntm4lwZwztFS1 EVCkCZ81DMkyqxMnCvRP5l9UlxKKjcIpXTwsCHDwuvJpth9pGkOnqI3FNWiH7IYA EQaJKtOFcgqA/zwKxrK7QASKtdfO/rhO05wusyZglOLNZD7Ba7K11Vr0b8R2OwM/ bwBEeT2MSbc456CvNISasuov57Q8UktFG6UyvrhDvqBaI4sAFl6KKJ3SrkZKINhi A0OeGUVDqCwoJzjRN+fnYMCreQdcITk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:08 2025 by rpki-client