$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/615a8809-0cf9-3956-a9b2-054a1f89aa01.roa File: 615a8809-0cf9-3956-a9b2-054a1f89aa01.roa (raw, json) Hash identifier: yAg7RWRYKpc+DvPNBykkbl7YmpNuU6roO3aI/c2QJs0= Subject key identifier: 6E:DC:2E:DD:2A:AC:74:E7:47:1B:50:8C:BC:0D:06:3C:A7:54:96:11 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACC11CBCEA807D7DE0000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/615a8809-0cf9-3956-a9b2-054a1f89aa01.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cc:11:cb:ce:a8:07:d7:de:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e7f554ab-a1f5-4ce6-a336-07bdaf7fbf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:22:48:ad:de:12:98:17:6f:99:47:ce:d0:3d: dd:95:ed:d9:4d:5c:c2:cf:e8:77:46:49:7a:4a:de: ac:04:fd:56:9a:c8:1e:54:cb:f1:08:bc:06:57:38: da:3e:a1:24:2e:15:68:cc:9c:72:63:bc:e5:1e:99: 1b:4c:cc:e3:24:4d:93:04:96:ca:05:5d:45:61:8a: 31:49:50:98:ef:87:43:40:b0:80:42:dc:02:2e:d8: aa:c6:7d:1a:b0:ca:aa:88:fe:23:1c:85:ed:76:da: 12:79:80:1b:e1:ec:24:6b:fd:9f:79:c0:4f:bd:76: d7:cb:94:d5:2f:26:a8:8c:2e:c7:53:b7:30:4a:fc: d7:a4:73:d2:49:94:27:64:1e:86:f6:57:01:85:a3: a3:3a:be:41:ac:4d:7f:0a:c2:9e:f9:7f:6c:b4:f0: bc:3a:af:aa:53:57:73:72:76:06:37:a2:5d:12:32: 65:1e:21:96:9c:47:11:0b:47:4e:6f:7b:29:ef:3f: 6f:0c:8a:69:87:a7:a3:20:0a:18:d6:a9:d0:13:6e: ab:5a:1a:5e:b9:f3:4f:ed:b3:1b:9e:c0:19:3b:b0: dd:62:3e:a7:38:c1:c6:a8:8e:a2:cb:0c:67:a0:b7: 1b:e5:6d:8a:56:71:06:2f:c4:7e:19:6d:22:b7:74: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DC:2E:DD:2A:AC:74:E7:47:1B:50:8C:BC:0D:06:3C:A7:54:96:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/615a8809-0cf9-3956-a9b2-054a1f89aa01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ff:f1:9a:4b:61:56:51:47:c8:48:f4:23:c9:e4:6c:72:0d: d2:c2:cb:d3:80:cc:d6:f2:7a:39:3d:10:a8:2c:e3:db:87:67: f4:70:e4:ac:06:83:3a:fe:d8:06:14:6a:25:90:10:75:4d:b0: e0:7b:a4:3a:aa:61:d5:f4:d8:32:77:22:91:1f:97:e4:76:c4: 95:5c:a3:c2:44:f1:d8:2b:e1:2a:f5:9f:da:ff:f3:49:1d:7e: 12:31:2c:99:37:59:18:a0:40:e3:4e:8f:39:58:7b:55:49:b8: fc:ca:b6:3a:98:15:52:09:5f:43:8b:1c:04:bd:b0:97:29:b8: 69:e5:a8:8d:e3:6d:1c:b5:61:9a:e0:ee:cf:05:45:86:fa:e7: 89:b7:75:8c:b9:29:28:cd:d6:7c:85:b2:2a:20:e1:74:b3:53: d4:b2:4b:ce:c7:97:ff:48:4c:de:df:d9:24:17:82:cf:87:19: 3a:cc:78:86:05:68:cb:48:7d:3f:9d:bc:14:9d:34:10:2c:b2: 5c:22:29:8c:de:f6:16:65:fe:b3:4c:0b:79:29:3a:bd:28:2a: cd:52:73:e0:56:c1:45:5d:3d:e9:01:8e:93:ce:c4:39:2f:06: 86:df:ef:e5:f7:68:f6:a2:fd:e8:ff:07:55:29:ce:7d:31:13: 94:04:b9:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuswRy86oB9feAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTdmNTU0YWItYTFmNS00Y2U2LWEzMzYtMDdiZGFmN2ZiZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CJIrd4SmBdvmUfO0D3dle3ZTVzCz+h3Rkl6 St6sBP1WmsgeVMvxCLwGVzjaPqEkLhVozJxyY7zlHpkbTMzjJE2TBJbKBV1FYYox SVCY74dDQLCAQtwCLtiqxn0asMqqiP4jHIXtdtoSeYAb4ewka/2fecBPvXbXy5TV LyaojC7HU7cwSvzXpHPSSZQnZB6G9lcBhaOjOr5BrE1/CsKe+X9stPC8Oq+qU1dz cnYGN6JdEjJlHiGWnEcRC0dOb3sp7z9vDIpph6ejIAoY1qnQE26rWhpeufNP7bMb nsAZO7DdYj6nOMHGqI6iywxnoLcb5W2KVnEGL8R+GW0it3TYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7cLt0qrHTnRxtQjLwNBjynVJYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjE1YTg4MDktMGNmOS0z OTU2LWE5YjItMDU0YTFmODlhYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvq9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH/8ZpLYVZRR8hI9CPJ5GxyDdLCy9OAzNbyejk9EKgs49uHZ/Rw5KwG gzr+2AYUaiWQEHVNsOB7pDqqYdX02DJ3IpEfl+R2xJVco8JE8dgr4Sr1n9r/80kd fhIxLJk3WRigQONOjzlYe1VJuPzKtjqYFVIJX0OLHAS9sJcpuGnlqI3jbRy1YZrg 7s8FRYb654m3dYy5KSjN1nyFsiog4XSzU9SyS87Hl/9ITN7f2SQXgs+HGTrMeIYF aMtIfT+dvBSdNBAsslwiKYze9hZl/rNMC3kpOr0oKs1Sc+BWwUVdPekBjpPOxDkv Bobf7+X3aPai/ej/B1Upzn0xE5QEuWo= -----END CERTIFICATE-----Generated at Mon Apr 28 00:42:09 2025 by rpki-client