$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/575b4fd3-700b-363b-ae68-3021e2fa154a.roa File: 575b4fd3-700b-363b-ae68-3021e2fa154a.roa (raw, json) Hash identifier: fwfDcd8SzibgNBA4Im5m9pNhTTxjd+2u+AJbiTI0d5U= Subject key identifier: 18:8C:98:12:DD:F3:BC:E7:03:82:0B:09:46:A0:3E:F4:F4:05:66:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD1BD0098E07445595000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/575b4fd3-700b-363b-ae68-3021e2fa154a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d1:bd:00:98:e0:74:45:59:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d3ec78d2-a273-4abc-9d48-88d2bfb78126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:54:3d:77:1e:66:80:84:b0:af:d3:34:db: 76:da:10:ed:24:6a:c6:18:39:c8:9f:20:97:f1:fe: 7f:06:ba:73:42:e4:9b:f6:29:23:4a:ca:c7:ec:cb: b2:ab:56:f2:c1:35:54:a7:b2:31:48:ed:91:2d:45: bc:1f:0d:e4:0a:27:55:a7:da:2a:15:96:db:f3:81: 37:d8:1a:9e:e6:73:c1:bb:bb:28:71:65:e4:97:fe: 88:6e:73:8a:cc:2d:e9:f2:2d:28:81:d5:12:5f:cf: 9b:56:a3:14:92:4e:ec:32:95:44:43:10:4b:57:79: 3a:3f:b5:9b:f8:ea:70:af:44:8f:74:3b:a0:d5:bc: 15:91:9e:88:96:f6:07:23:45:1c:3d:e9:4d:8a:d8: b5:5e:11:08:e8:54:90:cc:46:ae:76:64:e9:86:6e: 83:a2:4e:c5:c6:11:87:3e:af:1f:38:57:7c:92:30: d5:84:69:d9:2e:a4:73:62:db:99:91:19:f7:57:d8: 97:3c:78:13:91:3b:6a:b8:36:26:f6:89:25:e3:2b: 90:dc:5f:63:c5:56:b2:6a:f5:4b:af:67:62:b3:73: a7:59:0a:c9:e4:cf:35:fb:2a:43:fe:37:77:4c:69: 5d:5e:91:85:bf:fb:af:86:00:47:99:16:d4:f0:02: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8C:98:12:DD:F3:BC:E7:03:82:0B:09:46:A0:3E:F4:F4:05:66:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/575b4fd3-700b-363b-ae68-3021e2fa154a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2b:7c:6e:ce:f2:d0:1f:b3:3d:d7:bf:2a:10:96:81:11:b6: 04:07:23:80:b7:3f:a1:3a:f5:06:22:0f:20:60:94:e8:e8:c9: 09:56:1b:75:32:8a:63:3f:fa:5f:de:7f:e2:a9:8b:50:de:27: b9:a8:67:5c:18:c3:f9:20:b8:26:26:f5:1d:8a:dc:f8:87:c1: 20:7f:bb:88:f6:0d:2a:39:68:04:3a:87:79:9e:95:88:f9:ea: b0:8c:ba:c0:e1:df:f1:da:96:55:86:6e:a3:46:d0:51:58:47: 64:f0:28:66:6e:4d:e8:c1:4f:62:d5:f4:5a:7e:b8:a8:37:bc: e3:cb:85:66:fe:ef:48:78:43:ee:c4:96:f5:37:f3:d2:0f:41: 2b:61:32:6a:a9:68:15:d8:2e:f0:6c:4e:cc:35:cc:4d:9a:c6: 4b:b8:b8:b5:af:fc:5a:d5:07:13:c0:0d:10:3c:43:1b:83:e5: 9f:91:73:70:ac:15:c3:83:4e:77:c1:2a:bb:a2:f0:eb:63:ae: 99:d4:19:47:6c:50:ea:78:43:60:27:64:ed:f9:22:5f:72:ab: db:1f:d0:17:02:02:27:e7:65:e7:1a:eb:55:bb:62:28:36:b1: 50:1e:f1:51:2a:60:66:22:7d:5f:c2:ee:61:dc:bf:0c:33:9c: 94:64:c3:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutG9AJjgdEVZUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDNlYzc4ZDItYTI3My00YWJjLTlkNDgtODhkMmJmYjc4MTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZtUPXceZoCEsK/TNNt22hDtJGrGGDnInyCX 8f5/BrpzQuSb9ikjSsrH7Muyq1bywTVUp7IxSO2RLUW8Hw3kCidVp9oqFZbb84E3 2Bqe5nPBu7socWXkl/6IbnOKzC3p8i0ogdUSX8+bVqMUkk7sMpVEQxBLV3k6P7Wb +Opwr0SPdDug1bwVkZ6IlvYHI0UcPelNiti1XhEI6FSQzEaudmTphm6Dok7FxhGH Pq8fOFd8kjDVhGnZLqRzYtuZkRn3V9iXPHgTkTtquDYm9okl4yuQ3F9jxVayavVL r2dis3OnWQrJ5M81+ypD/jd3TGldXpGFv/uvhgBHmRbU8AJPNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiMmBLd87znA4ILCUagPvT0BWb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTc1YjRmZDMtNzAwYi0z NjNiLWFlNjgtMzAyMWUyZmExNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8rfG7O8tAfsz3XvyoQloERtgQHI4C3P6E69QYiDyBglOjoyQlWG3Uy imM/+l/ef+Kpi1DeJ7moZ1wYw/kguCYm9R2K3PiHwSB/u4j2DSo5aAQ6h3melYj5 6rCMusDh3/HallWGbqNG0FFYR2TwKGZuTejBT2LV9Fp+uKg3vOPLhWb+70h4Q+7E lvU389IPQSthMmqpaBXYLvBsTsw1zE2axku4uLWv/FrVBxPADRA8QxuD5Z+Rc3Cs FcODTnfBKrui8OtjrpnUGUdsUOp4Q2AnZO35Il9yq9sf0BcCAifnZeca61W7Yig2 sVAe8VEqYGYifV/C7mHcvwwznJRkw6o= -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:32 2025 by rpki-client