$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa File: 4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa (raw, json) Hash identifier: U3Ro+zpxW5WEXlmKHXbNrNGEwQfqxoCpSWKG9OWkXJ8= Subject key identifier: 96:C6:91:11:B9:8F:B1:48:4C:12:35:72:D6:2B:9B:04:93:D0:61:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD228DBFADE8E35E01F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d2:28:db:fa:de:8e:35:e0:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=94c9f9c5-8804-4cab-95e1-7f34da01a782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2a:8f:fd:5f:b0:48:7a:5e:05:3c:1e:37:89: 1e:ec:96:99:46:f0:0e:27:bb:99:24:2b:80:7a:13: 17:4f:7e:96:b4:36:03:7a:28:ad:3e:9f:70:28:c8: fb:f2:52:e8:46:ee:f0:b1:32:1b:d8:88:cd:60:67: d0:90:f5:41:f2:80:4d:5d:a0:e4:25:c3:b2:d1:af: 41:86:b4:40:0d:bb:0f:37:f6:62:1a:2e:9b:64:05: 92:d8:79:d3:36:fd:81:24:60:64:b7:54:fc:b1:4a: f9:f2:32:3b:a3:96:a7:69:85:96:01:13:1c:8a:ce: d2:db:2a:b2:6e:2c:f5:3f:b8:a1:0c:dc:59:b5:8e: 1c:10:d4:97:29:11:cb:18:80:12:e4:27:ea:d3:1b: fa:d0:47:2b:7f:f3:af:96:fc:5b:64:ca:4f:87:c5: e5:43:76:cc:9f:8d:bd:3d:8a:1b:f2:46:c6:1c:b0: d3:2d:7c:b9:ec:b3:20:16:08:8d:69:98:2e:7b:a9: 14:c1:6d:3c:9d:0a:fe:1c:21:49:c1:89:2e:0f:9e: ff:9d:c8:b5:a7:60:93:89:de:ea:81:b1:a3:71:1b: 18:41:c4:72:53:f1:3a:f6:d6:38:93:d3:6b:a8:21: 3c:50:03:10:8c:53:a0:1d:6c:8a:1a:04:fd:21:11: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C6:91:11:B9:8F:B1:48:4C:12:35:72:D6:2B:9B:04:93:D0:61:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:72:4d:9f:4d:e5:d0:b3:db:62:60:02:c8:94:41:30:3a:9c: d9:55:32:a6:21:60:c2:b6:5f:3f:dd:14:4c:82:a9:b3:30:a1: e4:38:93:d1:84:40:79:13:51:e0:42:84:95:3b:7b:b0:f0:89: 08:51:25:5f:6d:91:99:a1:05:ab:d1:dd:c9:53:4b:2b:4b:d5: b4:66:ef:2b:f4:36:31:e1:45:6a:09:06:3d:69:ca:1f:00:82: e7:43:76:93:60:b6:18:2c:b1:7c:3c:2d:30:7a:4a:80:45:6c: 7e:c8:90:3c:49:b7:4f:12:78:d5:36:da:34:35:e4:f1:69:76: 3f:74:83:9e:02:61:d8:2d:5c:a7:b7:ff:a5:16:bf:f2:7a:7f: a9:82:9f:67:f3:60:46:68:69:b6:5d:58:42:a4:17:68:96:3b: 7d:0a:21:2a:a4:7f:47:1d:f4:a2:ff:43:1a:35:f2:78:4c:6b: b5:b6:49:13:25:68:99:fe:62:21:ac:5d:92:db:fd:18:0d:98: b9:ad:10:c3:92:8c:f2:d7:b1:5a:3e:1c:63:c8:9a:ed:a6:06: 57:62:59:d6:a2:03:b5:36:4f:d8:eb:0f:45:07:00:2b:0a:6d: ea:2c:d6:f1:e7:13:18:9e:b2:64:3f:1b:54:b1:d3:ea:6f:ce: 61:f1:22:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutIo2/rejjXgH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTRjOWY5YzUtODgwNC00Y2FiLTk1ZTEtN2YzNGRhMDFhNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iqP/V+wSHpeBTweN4ke7JaZRvAOJ7uZJCuA ehMXT36WtDYDeiitPp9wKMj78lLoRu7wsTIb2IjNYGfQkPVB8oBNXaDkJcOy0a9B hrRADbsPN/ZiGi6bZAWS2HnTNv2BJGBkt1T8sUr58jI7o5anaYWWARMcis7S2yqy biz1P7ihDNxZtY4cENSXKRHLGIAS5Cfq0xv60Ecrf/OvlvxbZMpPh8XlQ3bMn429 PYob8kbGHLDTLXy57LMgFgiNaZgue6kUwW08nQr+HCFJwYkuD57/nci1p2CTid7q gbGjcRsYQcRyU/E69tY4k9NrqCE8UAMQjFOgHWyKGgT9IRHZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbGkRG5j7FITBI1ctYrmwST0GGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGZmY2I2MjYtNTlhNy0z NzhmLThjZDEtZmRiZGZjNDk2MTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5yTZ9N5dCz22JgAsiUQTA6nNlVMqYhYMK2Xz/dFEyCqbMwoeQ4k9GE QHkTUeBChJU7e7DwiQhRJV9tkZmhBavR3clTSytL1bRm7yv0NjHhRWoJBj1pyh8A gudDdpNgthgssXw8LTB6SoBFbH7IkDxJt08SeNU22jQ15PFpdj90g54CYdgtXKe3 /6UWv/J6f6mCn2fzYEZoabZdWEKkF2iWO30KISqkf0cd9KL/Qxo18nhMa7W2SRMl aJn+YiGsXZLb/RgNmLmtEMOSjPLXsVo+HGPImu2mBldiWdaiA7U2T9jrD0UHACsK beos1vHnExiesmQ/G1Sx0+pvzmHxIsw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:52 2025 by rpki-client