$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa File: 558a9f03-d275-3df3-9fd9-2afd50775883.roa (raw, json) Hash identifier: h/k7ruaIJ17Gk0WongOHF7YWtCGfHC0D2SgYtKqJFLk= Subject key identifier: BD:4D:62:88:64:0D:7D:6B:72:E5:8D:53:14:7C:B6:E7:88:70:D1:DB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA125C9D66301D882F55740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:25:c9:d6:63:01:d8:82:f5:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=4dee0e7b-3908-4cab-8742-771ee03ab2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:7a:b2:d5:14:92:99:a3:50:ef:f2:98:3c: ef:b5:6b:9f:05:8c:48:43:ad:ed:53:cc:b5:e7:0d: 8b:25:74:09:e1:20:99:8d:f0:f1:ab:8b:c6:84:a0: 13:6b:a0:d0:07:a3:7a:b8:78:84:dd:d0:ba:4b:a0: 47:49:0f:c5:6b:d8:a1:f2:84:1f:2f:b8:2b:5e:d6: 5f:f7:6a:01:c8:e8:b9:70:d6:6a:79:65:62:cd:e3: 8d:72:35:df:0d:ea:ea:a3:2c:f3:60:22:d7:48:34: b5:5e:b6:8c:f5:4b:9c:af:e2:11:79:23:25:ba:09: 48:cc:4b:d2:69:e7:66:ee:91:c1:f4:40:5f:a4:93: a0:f2:c4:b3:6e:df:8c:bc:e1:8d:3a:d2:74:ec:2d: 9e:cc:a5:f3:60:51:67:88:3b:0f:5e:53:2d:d8:bb: 16:97:e9:33:a8:5f:96:30:61:bd:3b:7d:68:8a:2b: b3:62:71:15:eb:c5:b6:c6:be:15:5d:80:51:7f:c9: c7:7b:01:48:a9:0d:d6:f8:a9:70:97:f3:35:78:0c: 13:ec:37:fc:3f:06:ff:2b:04:4e:0d:b6:05:3f:3f: 19:81:92:34:63:1b:84:d4:37:22:73:b8:c2:2b:95: 6c:49:27:e7:32:11:6a:56:bf:53:e9:64:25:4f:18: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4D:62:88:64:0D:7D:6B:72:E5:8D:53:14:7C:B6:E7:88:70:D1:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4a:03:73:f8:6c:9c:a3:8c:a6:25:0d:a2:9a:c5:90:40:97: 52:2d:c1:ce:fc:ae:19:78:80:1a:33:4e:f6:bf:f8:19:c4:ca: 7d:57:88:0f:7c:dd:e9:1a:27:23:cd:7f:bb:df:d6:01:ff:1e: e6:15:38:73:31:b5:02:24:4a:d4:00:49:05:7a:7d:f3:d0:5d: 55:a5:14:85:c5:d5:d9:0b:59:3e:f1:b7:0f:16:57:46:bb:e2: 2d:ef:23:a6:c8:92:6f:cd:d9:92:61:fe:bc:10:35:24:3e:ef: aa:5c:df:30:6d:d3:4d:e6:9a:7f:73:cc:82:9f:7f:19:07:1d: 2b:c3:75:7e:15:cf:75:a4:0a:ec:f3:10:34:35:53:4f:28:f6: 24:2c:d6:27:67:6c:f2:ed:71:6c:8c:22:30:48:2f:66:bf:74: 03:43:7b:9b:3c:68:52:9b:d2:e1:5b:30:64:0f:c1:af:70:75: 3e:b0:47:bb:ac:68:4a:bb:6a:4e:b9:a2:b3:fc:f2:cd:39:30: 6a:c7:3b:a9:e6:53:3e:f3:ce:2d:3b:a6:fb:b5:6e:9d:ec:98: 18:ea:10:d6:56:1d:8b:8e:45:7c:65:05:26:d5:98:66:13:00: 6d:34:7d:11:76:ed:cf:00:f3:5b:26:a0:ff:a5:fe:02:b1:ff: a7:a2:32:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSXJ1mMB2IL1V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NGRlZTBlN2ItMzkwOC00Y2FiLTg3NDItNzcxZWUwM2FiMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlad6stUUkpmjUO/ymDzvtWufBYxIQ63tU8y1 5w2LJXQJ4SCZjfDxq4vGhKATa6DQB6N6uHiE3dC6S6BHSQ/Fa9ih8oQfL7grXtZf 92oByOi5cNZqeWVizeONcjXfDerqoyzzYCLXSDS1XraM9Uucr+IReSMluglIzEvS aedm7pHB9EBfpJOg8sSzbt+MvOGNOtJ07C2ezKXzYFFniDsPXlMt2LsWl+kzqF+W MGG9O31oiiuzYnEV68W2xr4VXYBRf8nHewFIqQ3W+Klwl/M1eAwT7Df8Pwb/KwRO DbYFPz8ZgZI0YxuE1Dcic7jCK5VsSSfnMhFqVr9T6WQlTxitqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1NYohkDX1rcuWNUxR8tueIcNHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU4YTlmMDMtZDI3NS0z ZGYzLTlmZDktMmFmZDUwNzc1ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRKA3P4bJyjjKYlDaKaxZBAl1Itwc78rhl4gBozTva/+BnEyn1XiA98 3ekaJyPNf7vf1gH/HuYVOHMxtQIkStQASQV6ffPQXVWlFIXF1dkLWT7xtw8WV0a7 4i3vI6bIkm/N2ZJh/rwQNSQ+76pc3zBt003mmn9zzIKffxkHHSvDdX4Vz3WkCuzz EDQ1U08o9iQs1idnbPLtcWyMIjBIL2a/dANDe5s8aFKb0uFbMGQPwa9wdT6wR7us aEq7ak65orP88s05MGrHO6nmUz7zzi07pvu1bp3smBjqENZWHYuORXxlBSbVmGYT AG00fRF27c8A81smoP+l/gKx/6eiMho= -----END CERTIFICATE-----Generated at Sat Apr 26 19:57:00 2025 by rpki-client