$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa File: 668ba1c5-3435-3ef3-a8d7-a353e6418069.roa (raw, json) Hash identifier: PRn9UovwFIiqF4k6J8sRUzLH1XfPaxMMlGnSlczFAc4= Subject key identifier: 31:46:EB:7D:87:0B:40:BF:5A:A1:5C:3C:BD:9D:18:5A:23:81:3E:36 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA3497050C4E35BB646A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:34:97:05:0c:4e:35:bb:64:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=f1d06ab0-94cf-4724-b3f6-70b997a7a8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:52:dd:58:35:d9:c4:4c:a0:ff:80:a0:a7: be:74:b0:b6:95:0d:df:9f:67:8b:4f:d3:73:41:8a: 0a:f4:e1:cd:52:5f:09:19:04:1e:c8:88:a6:23:c5: 08:7d:df:69:c8:8c:d8:b9:ed:d5:34:2c:71:85:fb: e3:4a:a9:ff:8b:00:ce:3f:3b:2e:45:1b:16:b1:76: 50:20:42:95:ac:4f:c3:c3:78:8f:ec:b1:5c:45:2a: b8:d3:ce:c1:28:a6:a6:98:0d:93:ba:de:bd:5e:f0: 83:4e:3d:d2:4b:b9:38:27:10:d5:80:1d:9f:19:d1: d2:66:17:4e:37:68:85:9c:17:05:71:6a:7b:70:08: f6:47:32:56:41:31:27:9a:e2:b3:15:2f:1a:b8:4a: 02:ec:32:21:b1:36:b8:3e:73:e2:7a:66:f6:89:05: 17:bc:1d:41:d5:5b:88:35:8a:b2:56:fa:c5:72:35: b9:1d:ef:ee:0e:f4:43:1a:b9:be:91:69:70:18:1e: 06:5a:80:e7:9d:b7:66:e3:12:63:d0:ab:b4:98:3e: a3:74:af:2e:61:43:db:0d:0e:36:64:b7:6a:c9:6f: 2f:6e:98:ed:c4:8f:72:c0:d5:43:82:07:0b:c1:d8: 83:9f:5c:8a:18:db:ba:5d:84:89:09:72:6a:68:0b: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:46:EB:7D:87:0B:40:BF:5A:A1:5C:3C:BD:9D:18:5A:23:81:3E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:90:b2:a7:7d:fc:df:bb:0f:16:79:e0:00:69:b0:7c:00:5a: e7:38:89:de:5d:e1:70:b1:e5:48:ae:7b:c7:89:c0:cc:33:c6: 51:02:ae:9f:2a:05:79:4a:f7:4b:f6:11:4c:38:1f:0e:3b:f7: c3:10:43:4e:04:89:a0:6f:74:a1:54:11:18:d6:c9:91:9c:68: 57:f0:1c:26:cd:5e:51:de:65:70:da:a1:95:5a:f3:9e:1c:be: ba:f0:55:53:68:31:8b:70:75:80:41:90:d5:1a:d9:75:5d:9e: d4:aa:09:13:06:53:95:a7:3c:8d:1e:49:94:14:c2:ef:f4:86: 37:b1:e4:1e:5f:04:cd:17:09:10:d2:5f:ba:74:2c:a6:1f:35: 93:6b:6c:68:66:9c:27:a4:af:79:2b:29:64:86:46:40:91:f7: 74:6f:bb:27:98:f1:e0:f5:d2:fb:e8:88:4b:50:87:ba:39:b8: b5:e4:37:db:f7:b2:39:9b:b2:2c:60:71:25:6a:ca:c6:5c:7e: 3e:2e:8f:2f:60:ac:d6:75:70:de:9d:ab:20:ea:e6:0c:c5:2b: c1:49:92:a7:32:92:48:0d:d7:33:1a:a1:e4:c5:db:8e:4e:3e: e3:cd:7a:e4:a0:3b:44:04:06:ce:3a:ba:3e:e0:74:3b:4d:fa: 8d:ac:90:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jSXBQxONbtkaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZjFkMDZhYjAtOTRjZi00NzI0LWIzZjYtNzBiOTk3YTdhOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNpS3Vg12cRMoP+AoKe+dLC2lQ3fn2eLT9Nz QYoK9OHNUl8JGQQeyIimI8UIfd9pyIzYue3VNCxxhfvjSqn/iwDOPzsuRRsWsXZQ IEKVrE/Dw3iP7LFcRSq4087BKKammA2Tut69XvCDTj3SS7k4JxDVgB2fGdHSZhdO N2iFnBcFcWp7cAj2RzJWQTEnmuKzFS8auEoC7DIhsTa4PnPiemb2iQUXvB1B1VuI NYqyVvrFcjW5He/uDvRDGrm+kWlwGB4GWoDnnbdm4xJj0Ku0mD6jdK8uYUPbDQ42 ZLdqyW8vbpjtxI9ywNVDggcLwdiDn1yKGNu6XYSJCXJqaAtjzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFG632HC0C/WqFcPL2dGFojgT42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjY4YmExYzUtMzQzNS0z ZWYzLWE4ZDctYTM1M2U2NDE4MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyQsqd9/N+7DxZ54ABpsHwAWuc4id5d4XCx5Uiue8eJwMwzxlECrp8q BXlK90v2EUw4Hw4798MQQ04EiaBvdKFUERjWyZGcaFfwHCbNXlHeZXDaoZVa854c vrrwVVNoMYtwdYBBkNUa2XVdntSqCRMGU5WnPI0eSZQUwu/0hjex5B5fBM0XCRDS X7p0LKYfNZNrbGhmnCekr3krKWSGRkCR93RvuyeY8eD10vvoiEtQh7o5uLXkN9v3 sjmbsixgcSVqysZcfj4ujy9grNZ1cN6dqyDq5gzFK8FJkqcykkgN1zMaoeTF245O PuPNeuSgO0QEBs46uj7gdDtN+o2skHQ= -----END CERTIFICATE-----Generated at Sun Jun 15 21:41:56 2025 by rpki-client