$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa File: 39791293-3e4a-31e7-bd76-093a1ea73ab8.roa (raw, json) Hash identifier: jbu+dAo9caEfozoRbSXcpVeQtk/MYROK4Yq4Xz7e0ac= Subject key identifier: 22:EF:BC:1C:B6:02:A1:38:87:69:C1:CA:FF:5A:D8:32:40:C4:49:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB78009A21186A2B5D2F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:78:00:9a:21:18:6a:2b:5d:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3309900e-e647-4ea2-9e46-00a1fd720953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:cd:53:0d:e6:34:34:37:90:d0:dc:da:2a: 70:0f:e2:a5:77:e8:68:fa:4c:b5:d0:b3:c3:b4:7f: 69:36:76:3d:d1:b3:ea:84:c0:5f:f1:51:7d:d6:22: cf:21:6c:8c:38:71:21:e5:47:06:5b:14:9f:9b:50: 35:ab:d0:97:f8:9d:e3:fe:3d:4f:04:3c:27:d2:ce: 18:bb:c9:4d:7b:a5:77:92:d9:96:a9:06:24:7b:f5: b9:2f:74:86:08:b7:2f:2e:cb:33:95:6d:79:5b:80: 42:be:6d:db:52:df:57:f7:d1:3f:a4:0e:82:78:3f: 07:9a:ca:bf:11:e6:3a:ae:04:0b:c6:f6:7f:c9:cf: 38:75:eb:b7:ab:b7:95:6f:54:f6:31:c5:2a:44:f6: da:ea:d9:6c:f5:c6:6e:be:c6:e1:79:41:59:45:29: d3:e4:62:3c:40:bf:e6:08:3c:cd:e2:25:a0:0a:f7: 00:0a:e4:87:94:66:6e:a7:e6:32:25:a4:a2:0f:ac: ce:28:55:d4:3c:eb:c4:10:18:41:4d:52:de:98:ab: f1:7c:2d:9e:27:36:99:ac:23:5f:6e:c7:d4:49:61: 42:d8:df:6f:84:a8:6b:96:43:24:ae:09:67:bc:54: 8a:0d:b8:a3:1e:29:44:60:84:f4:34:02:97:f2:54: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:BC:1C:B6:02:A1:38:87:69:C1:CA:FF:5A:D8:32:40:C4:49:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4b:ef:03:64:88:ef:82:b8:43:80:0f:5c:f9:91:2a:e8:58: ed:0a:77:d9:e1:42:ae:f0:29:4d:b7:02:33:aa:9d:23:84:2c: 92:e4:98:70:49:74:c6:72:d1:a9:86:64:07:8a:bf:f5:ca:f9: 93:8f:61:a2:95:e6:56:a4:f6:fe:d7:bb:2d:af:97:52:3a:29: d3:ae:21:d2:8a:f1:2c:8b:45:d0:dd:99:0a:ec:1f:3a:57:1d: 2f:be:94:01:29:62:17:d9:9e:39:1d:f2:14:36:48:fd:17:47: df:d3:71:35:92:53:1d:b8:24:84:56:b8:bd:dd:3c:20:6f:bf: b0:e1:e8:ca:f8:cd:61:c1:e9:3a:23:ca:7e:35:95:4e:33:9a: fa:38:50:1a:ad:e3:17:e4:76:44:eb:07:da:89:fb:66:45:f6: e0:88:f4:9c:50:90:99:6e:de:f0:84:54:88:8d:5a:49:d5:3a: 85:42:d4:3f:a2:a9:85:0f:13:e8:c3:bb:a7:36:41:2f:7f:ad: 13:15:00:a4:2d:bd:50:56:8e:10:be:30:2b:b7:74:3b:8b:87: b0:15:2d:77:79:9f:20:2e:e5:35:79:5f:10:f9:81:f6:3f:e1: 75:4f:fb:08:31:44:bf:b4:7f:5a:df:69:a3:df:56:1c:0e:e0: 87:fd:51:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3gAmiEYaitdLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzMwOTkwMGUtZTY0Ny00ZWEyLTllNDYtMDBhMWZkNzIwOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr3NUw3mNDQ3kNDc2ipwD+Kld+ho+ky10LPD tH9pNnY90bPqhMBf8VF91iLPIWyMOHEh5UcGWxSfm1A1q9CX+J3j/j1PBDwn0s4Y u8lNe6V3ktmWqQYke/W5L3SGCLcvLsszlW15W4BCvm3bUt9X99E/pA6CeD8Hmsq/ EeY6rgQLxvZ/yc84deu3q7eVb1T2McUqRPba6tls9cZuvsbheUFZRSnT5GI8QL/m CDzN4iWgCvcACuSHlGZup+YyJaSiD6zOKFXUPOvEEBhBTVLemKvxfC2eJzaZrCNf bsfUSWFC2N9vhKhrlkMkrglnvFSKDbijHilEYIT0NAKX8lTilwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLvvBy2AqE4h2nByv9a2DJAxEmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzk3OTEyOTMtM2U0YS0z MWU3LWJkNzYtMDkzYTFlYTczYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExL7wNkiO+CuEOAD1z5kSroWO0Kd9nhQq7wKU23AjOqnSOELJLkmHBJ dMZy0amGZAeKv/XK+ZOPYaKV5lak9v7Xuy2vl1I6KdOuIdKK8SyLRdDdmQrsHzpX HS++lAEpYhfZnjkd8hQ2SP0XR9/TcTWSUx24JIRWuL3dPCBvv7Dh6Mr4zWHB6Toj yn41lU4zmvo4UBqt4xfkdkTrB9qJ+2ZF9uCI9JxQkJlu3vCEVIiNWknVOoVC1D+i qYUPE+jDu6c2QS9/rRMVAKQtvVBWjhC+MCu3dDuLh7AVLXd5nyAu5TV5XxD5gfY/ 4XVP+wgxRL+0f1rfaaPfVhwO4If9UTo= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:16 2025 by rpki-client