$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a7d8988-408e-3442-83b9-7474ec475a96.roa File: 3a7d8988-408e-3442-83b9-7474ec475a96.roa (raw, json) Hash identifier: o6cC+Aa6nDjnz+9woqtHt0Ioc7t+ECZgt5GRN1i/F6Y= Subject key identifier: 81:25:5A:CC:B1:6C:55:F7:C9:DF:46:1C:4B:12:46:52:4C:41:CD:DB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAB9D16EE35384983FC700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a7d8988-408e-3442-83b9-7474ec475a96.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b9:d1:6e:e3:53:84:98:3f:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a1be76da-f19b-44da-8d1f-4637f1ab9385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:05:11:46:4d:64:59:70:61:f1:fd:06:14: 65:7c:fe:f3:cc:f6:d9:f7:64:76:a7:46:32:78:8d: db:05:57:7b:31:9d:81:c7:e4:f0:05:ee:04:04:68: 14:2a:f7:57:fa:c1:3d:d3:ed:41:22:08:63:b4:e1: 95:3d:8f:e7:c2:88:c0:6f:31:11:3a:2c:2b:03:b4: 45:f2:02:fb:ee:e7:06:d6:04:0e:dd:05:e6:20:9a: 2d:95:1e:a6:d0:94:ab:fb:38:d3:e8:55:a7:b5:e9: 61:ad:6c:95:ad:78:2d:c8:e6:76:e6:da:6d:f6:4f: 8b:cb:71:51:b8:c0:6e:9e:02:2c:52:18:fc:de:2c: c0:fd:a2:74:2b:85:6c:bc:61:b4:e8:2b:5d:de:24: ca:f3:8f:7a:fb:7e:64:3c:00:19:f7:5a:ae:ea:0e: d6:bb:a5:e3:fd:18:f2:ff:a0:35:ca:1e:e4:8a:85: 0b:25:9c:ff:2a:5b:aa:1d:06:16:7d:3b:e4:6d:99: 6e:a6:72:94:d4:b0:e9:83:01:e9:77:6e:89:96:8d: 1a:f8:ff:75:6a:20:57:fc:60:68:c7:70:a2:f5:24: 38:b7:d1:bb:c5:ce:60:38:56:99:ab:51:c1:a6:02: 66:e6:72:5b:dd:93:d4:82:fa:a7:a4:ca:5b:fa:d2: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:25:5A:CC:B1:6C:55:F7:C9:DF:46:1C:4B:12:46:52:4C:41:CD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a7d8988-408e-3442-83b9-7474ec475a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:04:01:bb:df:7a:38:a2:d3:a4:d5:e8:70:d0:25:21:c9:c3: 36:38:70:3d:a2:75:f8:c2:a0:e0:7a:4d:28:c5:54:68:81:cf: 44:47:04:6b:e9:d5:d7:52:f6:fd:50:04:e6:8d:5a:67:da:e5: 62:d1:b1:f5:87:1e:2e:a3:6d:3c:36:13:6b:bc:7f:a7:e3:00: 1d:5d:86:7d:09:f8:d6:00:7d:2c:ec:62:d0:d7:82:99:f9:c9: bf:38:ec:8c:e1:00:b8:c2:16:c7:63:0d:29:d2:a6:4a:71:19: e8:ec:ac:b3:8c:ff:03:ec:ff:58:2e:ed:2d:26:83:87:b1:63: c7:c4:65:0f:6b:4a:bf:a4:a2:7c:a7:d5:3b:d9:58:2c:d7:b5: 72:58:7d:e7:b3:b0:6d:f5:69:9b:e2:6f:88:7d:99:66:3b:e1: ab:b7:05:da:52:27:96:e1:00:54:ba:f6:8b:18:70:91:b0:cf: d6:32:d0:d3:77:c5:cf:22:fb:ea:91:d6:e3:69:6c:84:a8:92: 83:39:97:3d:a4:e8:5c:43:c7:11:35:94:5c:af:ea:0b:56:4c: e1:0e:f8:af:31:c4:d6:ad:a3:f4:af:d2:51:a3:ee:97:b8:14: 6b:64:90:5b:d7:7c:d5:b6:43:ae:36:27:8b:c9:d5:13:db:4f: f7:5a:78:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurnRbuNThJg/xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTFiZTc2ZGEtZjE5Yi00NGRhLThkMWYtNDYzN2YxYWI5Mzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApisFEUZNZFlwYfH9BhRlfP7zzPbZ92R2p0Yy eI3bBVd7MZ2Bx+TwBe4EBGgUKvdX+sE90+1BIghjtOGVPY/nwojAbzEROiwrA7RF 8gL77ucG1gQO3QXmIJotlR6m0JSr+zjT6FWntelhrWyVrXgtyOZ25tpt9k+Ly3FR uMBungIsUhj83izA/aJ0K4VsvGG06Ctd3iTK8496+35kPAAZ91qu6g7Wu6Xj/Rjy /6A1yh7kioULJZz/KluqHQYWfTvkbZlupnKU1LDpgwHpd26Jlo0a+P91aiBX/GBo x3Ci9SQ4t9G7xc5gOFaZq1HBpgJm5nJb3ZPUgvqnpMpb+tIdewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIElWsyxbFX3yd9GHEsSRlJMQc3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2E3ZDg5ODgtNDA4ZS0z NDQyLTgzYjktNzQ3NGVjNDc1YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsEAbvfejii06TV6HDQJSHJwzY4cD2idfjCoOB6TSjFVGiBz0RHBGvp 1ddS9v1QBOaNWmfa5WLRsfWHHi6jbTw2E2u8f6fjAB1dhn0J+NYAfSzsYtDXgpn5 yb847IzhALjCFsdjDSnSpkpxGejsrLOM/wPs/1gu7S0mg4exY8fEZQ9rSr+konyn 1TvZWCzXtXJYfeezsG31aZvib4h9mWY74au3BdpSJ5bhAFS69osYcJGwz9Yy0NN3 xc8i++qR1uNpbISokoM5lz2k6FxDxxE1lFyv6gtWTOEO+K8xxNato/Sv0lGj7pe4 FGtkkFvXfNW2Q642J4vJ1RPbT/daeOg= -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:04 2025 by rpki-client