$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68265e2e-e1c8-388b-8fc0-d6401745c121.roa File: 68265e2e-e1c8-388b-8fc0-d6401745c121.roa (raw, json) Hash identifier: sDQYc9TUyQWO95xSbKQR+FWFF5QPZlaG5s6Sxxavo1w= Subject key identifier: 1E:86:D8:E3:98:36:E5:DB:11:5E:08:A0:95:2D:CD:CE:E4:B0:16:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACFBDC767091B44098880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68265e2e-e1c8-388b-8fc0-d6401745c121.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cf:bd:c7:67:09:1b:44:09:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=92d77546-ed50-4f80-8617-8af5967a2b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:a1:96:69:39:5e:db:20:14:c1:c6:c1:12: 6a:1d:31:e3:83:a6:ee:fa:d7:04:75:07:be:5a:63: 55:8f:e0:fe:39:c6:56:5b:56:1f:6a:a1:00:c1:a1: c1:85:5a:68:30:5f:79:da:64:26:ab:7e:84:71:78: 21:23:a9:ba:50:84:89:bd:40:8f:ca:40:ff:4a:28: 97:a7:1a:f2:18:7b:b0:17:a9:95:97:61:47:99:01: 87:0f:e4:02:df:fe:88:6b:08:73:56:d5:96:c6:78: dc:0b:11:68:7f:77:8c:12:97:0d:f3:69:51:7f:02: 81:db:65:b0:c4:39:10:cd:6a:ca:60:50:4d:34:5d: 8b:9e:84:8f:5f:8d:45:19:dd:95:ef:50:9e:cc:e7: ff:22:c1:82:d7:b2:64:70:c8:d8:27:db:0e:19:64: 78:3d:58:1d:c9:fd:ab:61:aa:95:aa:d0:4e:4f:0b: 78:0e:a4:b5:bd:d7:33:ff:da:2d:8d:5b:a9:9e:80: 68:45:31:1e:63:4b:18:98:f9:f1:f8:7e:94:78:34: 9c:ac:80:c7:f5:f1:ee:c2:73:15:d8:31:75:64:34: 87:ae:d4:f2:06:32:3e:eb:b7:18:2b:d9:14:ac:7d: 67:a9:4c:0b:eb:34:9c:c5:19:30:08:fd:7f:df:e6: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:86:D8:E3:98:36:E5:DB:11:5E:08:A0:95:2D:CD:CE:E4:B0:16:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68265e2e-e1c8-388b-8fc0-d6401745c121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b5:b2:71:5f:b1:a3:68:fc:a7:bd:e0:dd:dc:59:c5:54:dd: c6:50:38:6a:c6:c8:ec:78:63:52:3e:6e:fc:b0:94:77:36:18: b0:02:86:7d:d2:5c:ee:1e:09:a3:ea:ce:5c:3e:16:3b:61:5f: 49:5e:cb:4d:10:e5:36:02:ca:15:4d:ba:51:79:f6:47:ab:e1: b5:e6:04:ca:a6:50:9f:04:69:fa:ea:8c:e9:7c:c3:d5:99:89: df:13:6f:17:95:6f:0a:0a:96:8d:8d:b1:e9:0c:ce:e5:65:e4: 38:ac:ad:ab:9d:df:79:50:69:83:33:aa:2b:5b:a4:c0:9d:da: 01:3d:d8:b2:8f:77:a5:ca:54:8a:95:f5:07:19:bf:89:dd:c8: bb:bd:51:7a:0c:52:25:43:c9:e0:df:35:fc:0b:8f:e9:f2:08: e1:b6:99:1c:01:9a:03:39:dc:47:d9:81:a2:f4:72:bd:9b:c4: d7:e4:3a:bc:60:35:2f:53:16:83:16:75:f8:b4:73:44:f3:ce: 32:9e:a3:8b:d2:aa:d5:ce:4b:ef:4b:e5:b0:ed:34:4f:52:f7: 9e:c0:98:c3:3f:15:78:ca:11:03:c4:60:cc:1a:49:7e:8a:5f: 4d:b8:0f:8b:a4:05:f9:4a:47:a7:44:75:a0:2a:b5:35:ec:35: b1:a3:66:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus+9x2cJG0QJiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTJkNzc1NDYtZWQ1MC00ZjgwLTg2MTctOGFmNTk2N2EyYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTKhlmk5XtsgFMHGwRJqHTHjg6bu+tcEdQe+ WmNVj+D+OcZWW1YfaqEAwaHBhVpoMF952mQmq36EcXghI6m6UISJvUCPykD/SiiX pxryGHuwF6mVl2FHmQGHD+QC3/6IawhzVtWWxnjcCxFof3eMEpcN82lRfwKB22Ww xDkQzWrKYFBNNF2LnoSPX41FGd2V71CezOf/IsGC17JkcMjYJ9sOGWR4PVgdyf2r YaqVqtBOTwt4DqS1vdcz/9otjVupnoBoRTEeY0sYmPnx+H6UeDScrIDH9fHuwnMV 2DF1ZDSHrtTyBjI+67cYK9kUrH1nqUwL6zScxRkwCP1/3+bQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6G2OOYNuXbEV4IoJUtzc7ksBYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjgyNjVlMmUtZTFjOC0z ODhiLThmYzAtZDY0MDE3NDVjMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvujMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe1snFfsaNo/Ke94N3cWcVU3cZQOGrGyOx4Y1I+bvywlHc2GLAChn3S XO4eCaPqzlw+FjthX0ley00Q5TYCyhVNulF59ker4bXmBMqmUJ8EafrqjOl8w9WZ id8TbxeVbwoKlo2NsekMzuVl5Disraud33lQaYMzqitbpMCd2gE92LKPd6XKVIqV 9QcZv4ndyLu9UXoMUiVDyeDfNfwLj+nyCOG2mRwBmgM53EfZgaL0cr2bxNfkOrxg NS9TFoMWdfi0c0TzzjKeo4vSqtXOS+9L5bDtNE9S957AmMM/FXjKEQPEYMwaSX6K X024D4ukBflKR6dEdaAqtTXsNbGjZmQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:52 2025 by rpki-client