$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa File: 407f53f0-2a9c-3136-9379-57a68568a38a.roa (raw, json) Hash identifier: mNnUG7aRHcRSp/TpgmQnUc8KJk48/1a3/SdgxsJp21o= Subject key identifier: 0F:75:A3:F1:44:68:90:D5:53:BA:A0:F5:4D:9F:02:94:12:CB:D3:2D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5B4E94BD2269A140B2C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5b:4e:94:bd:22:69:a1:40:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=08fe3c3b-2b50-4e6e-9860-b52974d480ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d4:b8:e7:b9:e2:32:ed:15:34:6d:28:13:d5: 19:40:ec:c8:2d:1b:f2:37:15:15:57:36:3e:df:ca: 5c:44:1f:94:e2:da:de:de:57:9d:39:d2:37:f8:37: 57:2e:cf:25:b7:7f:dc:1c:c5:44:0a:e2:ed:6b:ac: 7d:cd:97:b5:70:32:a6:69:a3:4e:99:bc:ba:fd:5f: bb:38:cf:4e:43:e7:7f:a1:55:8b:d0:bc:2c:ee:8d: a3:9d:fe:a1:36:40:3f:54:78:e2:93:b4:03:fe:5b: 9b:6c:59:b2:35:68:a3:83:6b:c4:fb:2d:0f:32:02: 4c:f6:13:84:0e:c7:37:0e:93:a8:15:2c:81:7b:db: 64:ff:f3:00:86:74:a2:a2:7b:2b:9a:61:06:4d:7b: 58:b6:ef:ca:04:13:44:66:02:3c:63:18:d1:9d:17: 07:5a:df:b1:73:6a:0c:00:13:fc:fa:4b:1a:2a:7b: 36:42:81:9d:ab:ed:02:9a:b5:23:b3:1d:8b:d4:77: 06:55:ec:a5:57:be:a1:3e:23:f3:e4:7e:79:fa:4a: 43:9c:27:b1:05:21:88:df:81:72:91:62:69:30:11: e9:b7:59:2e:4c:ae:3a:5c:e9:95:87:49:96:42:df: 7a:ec:4d:0a:b2:fc:34:de:0b:9f:d2:fa:c3:79:8f: a6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:75:A3:F1:44:68:90:D5:53:BA:A0:F5:4D:9F:02:94:12:CB:D3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:89:f3:3a:75:1b:19:4a:69:45:97:0c:97:53:3c:fc:52:92: 40:71:db:8d:2b:5c:78:0f:da:c7:11:6e:95:c9:d6:ef:11:1e: ee:7c:fd:4f:a3:e6:7b:f4:6f:bc:a2:08:8e:54:fd:c3:c4:5a: 25:c9:93:b4:5a:6e:53:d4:c6:fa:7f:03:94:8e:12:07:ab:38: 9f:de:66:83:ab:4d:ec:b5:65:0c:90:1f:a0:ea:48:21:0d:e8: aa:2b:7e:0d:32:2c:bf:8c:e5:69:71:52:be:e7:26:1a:46:31: d6:08:2c:63:4d:4b:9e:f5:9d:77:62:91:40:4b:63:6a:09:65: 46:c0:62:27:90:de:f2:96:ee:c6:6e:06:e1:82:ab:67:02:37: c3:e8:be:f6:fe:f1:04:b1:89:8d:d6:51:12:9b:80:dc:a2:e0: 27:c0:e4:d8:d2:66:b9:06:56:42:74:6d:bb:ec:41:0d:7d:ba: 67:5d:fb:24:5c:18:b1:e7:70:90:8e:e7:38:79:37:dc:7c:4b: 35:78:0e:80:22:cc:9f:f3:bc:c3:3e:23:70:a1:cf:67:ec:34: 4e:e5:21:46:25:d1:a3:8c:7b:8e:f9:b3:17:30:ca:b5:df:29: 04:d4:8d:99:26:c6:fc:c8:11:08:24:11:67:09:08:33:2f:3d: e9:51:96:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1tOlL0iaaFAssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDhmZTNjM2ItMmI1MC00ZTZlLTk4NjAtYjUyOTc0ZDQ4MGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9S457niMu0VNG0oE9UZQOzILRvyNxUVVzY+ 38pcRB+U4tre3ledOdI3+DdXLs8lt3/cHMVECuLta6x9zZe1cDKmaaNOmby6/V+7 OM9OQ+d/oVWL0Lws7o2jnf6hNkA/VHjik7QD/lubbFmyNWijg2vE+y0PMgJM9hOE Dsc3DpOoFSyBe9tk//MAhnSionsrmmEGTXtYtu/KBBNEZgI8YxjRnRcHWt+xc2oM ABP8+ksaKns2QoGdq+0CmrUjsx2L1HcGVeylV76hPiPz5H55+kpDnCexBSGI34Fy kWJpMBHpt1kuTK46XOmVh0mWQt967E0Ksvw03guf0vrDeY+m2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA91o/FEaJDVU7qg9U2fApQSy9MtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDA3ZjUzZjAtMmE5Yy0z MTM2LTkzNzktNTdhNjg1NjhhMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaJ8zp1GxlKaUWXDJdTPPxSkkBx240rXHgP2scRbpXJ1u8RHu58/U+j 5nv0b7yiCI5U/cPEWiXJk7RablPUxvp/A5SOEgerOJ/eZoOrTey1ZQyQH6DqSCEN 6Korfg0yLL+M5WlxUr7nJhpGMdYILGNNS571nXdikUBLY2oJZUbAYieQ3vKW7sZu BuGCq2cCN8Povvb+8QSxiY3WURKbgNyi4CfA5NjSZrkGVkJ0bbvsQQ19umdd+yRc GLHncJCO5zh5N9x8SzV4DoAizJ/zvMM+I3Chz2fsNE7lIUYl0aOMe475sxcwyrXf KQTUjZkmxvzIEQgkEWcJCDMvPelRlk4= -----END CERTIFICATE-----Generated at Sat Apr 26 20:48:25 2025 by rpki-client