$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/682f5889-368b-3ba4-ac1f-61c10958ebc3.roa File: 682f5889-368b-3ba4-ac1f-61c10958ebc3.roa (raw, json) Hash identifier: Ybjs6Bt2zZdhYRXn8+eycZ0SrZBDePEEbTWAMhAqWjg= Subject key identifier: 7A:FB:67:06:C0:25:9D:1A:EA:50:F3:0E:C8:69:79:65:58:30:FF:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD1DFAD2F02B17D012B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/682f5889-368b-3ba4-ac1f-61c10958ebc3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d1:df:ad:2f:02:b1:7d:01:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1ad13277-cd87-48de-b7b6-94b5962d05b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:b8:75:46:09:7e:8c:8e:9b:2a:82:a8:c3: ae:4e:e9:f5:c3:7e:c1:d7:57:b0:09:97:c6:05:f2: 0b:b0:ac:69:b7:4b:46:0f:16:81:f7:3f:e1:92:38: ff:e3:6f:17:2f:78:c8:a2:df:e7:86:3f:ce:5d:b1: 8a:b4:a1:1f:7d:c1:c2:8c:fb:fa:9b:08:ff:9e:56: 21:c2:14:42:9c:88:45:74:61:2a:99:ca:d9:d7:83: d0:75:17:4f:5a:4d:ae:49:40:0f:59:e7:98:0c:8a: 22:1b:0c:1e:56:20:4e:55:5c:79:f4:b1:d2:f7:ef: a0:cd:7c:09:0c:e6:ff:c7:cd:fb:e5:9b:e9:e0:c5: 32:45:ed:2c:a2:06:84:3d:76:40:27:8e:f5:d2:49: bb:5b:10:c1:cb:55:55:83:55:c8:1d:9c:55:0f:b5: 9b:07:10:01:9f:6e:6a:d9:b5:4e:be:3f:d5:3b:65: 5f:00:59:49:8d:e0:71:a7:da:cf:36:75:05:9f:f1: e8:68:ec:c8:0b:a7:94:bf:a2:11:75:ed:97:d9:49: d5:09:0d:1e:90:8a:10:72:48:ab:36:b7:d3:d5:e0: 11:63:dd:f8:5b:21:ae:6e:61:25:2a:88:cb:8d:c7: 80:28:11:42:aa:c5:d2:13:5e:3a:29:4c:8b:41:72: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FB:67:06:C0:25:9D:1A:EA:50:F3:0E:C8:69:79:65:58:30:FF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/682f5889-368b-3ba4-ac1f-61c10958ebc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:59:56:88:c5:8c:7d:db:af:cc:79:62:cc:34:51:f6:21:a4: d4:46:3b:96:22:15:82:a2:fe:17:24:ef:2e:07:9e:c9:75:dc: 11:a1:87:dd:15:c4:d9:4f:dc:1b:55:09:34:1c:c3:2a:fc:10: e0:1a:0e:c3:7c:dc:f1:5f:74:be:52:1f:b9:c4:2a:80:e9:a7: 1b:1a:da:df:ff:e3:ea:11:48:1d:c2:ca:d9:76:cf:82:70:c6: ae:17:4f:05:f8:32:01:12:ba:ad:65:77:39:ef:2e:c2:59:f2: 63:d8:97:2b:e4:f5:d0:46:f9:d0:4d:6c:c7:03:85:83:4b:38: 44:ae:47:c0:21:17:3c:2c:52:07:c7:f5:8b:84:97:db:cd:8b: 67:b4:26:75:b3:cf:0f:9c:6d:80:23:03:a9:bc:99:bc:b3:89: 43:04:a0:a4:3e:fb:85:1a:a2:40:2d:9e:a5:05:19:a0:d7:24: 7c:d7:9f:e3:0c:7f:f6:45:d7:fa:9b:5b:87:b1:ba:46:ab:58: 48:e9:6d:bc:1e:cc:62:60:40:84:ab:11:a4:ff:1e:1f:bc:92: cd:38:44:8c:6d:93:57:e7:2a:d8:54:2d:a4:3c:64:47:bd:c7: 90:43:70:3f:62:f0:e0:e0:0a:db:f8:34:5a:17:0d:06:05:9e: 1e:e8:6c:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutHfrS8CsX0BK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWFkMTMyNzctY2Q4Ny00OGRlLWI3YjYtOTRiNTk2MmQwNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7G4dUYJfoyOmyqCqMOuTun1w37B11ewCZfG BfILsKxpt0tGDxaB9z/hkjj/428XL3jIot/nhj/OXbGKtKEffcHCjPv6mwj/nlYh whRCnIhFdGEqmcrZ14PQdRdPWk2uSUAPWeeYDIoiGwweViBOVVx59LHS9++gzXwJ DOb/x8375Zvp4MUyRe0sogaEPXZAJ4710km7WxDBy1VVg1XIHZxVD7WbBxABn25q 2bVOvj/VO2VfAFlJjeBxp9rPNnUFn/HoaOzIC6eUv6IRde2X2UnVCQ0ekIoQckir NrfT1eARY934WyGubmElKojLjceAKBFCqsXSE146KUyLQXIIfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr7ZwbAJZ0a6lDzDshpeWVYMP9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjgyZjU4ODktMzY4Yi0z YmE0LWFjMWYtNjFjMTA5NThlYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZZVojFjH3br8x5Ysw0UfYhpNRGO5YiFYKi/hck7y4Hnsl13BGhh90V xNlP3BtVCTQcwyr8EOAaDsN83PFfdL5SH7nEKoDppxsa2t//4+oRSB3Cytl2z4Jw xq4XTwX4MgESuq1ldznvLsJZ8mPYlyvk9dBG+dBNbMcDhYNLOESuR8AhFzwsUgfH 9YuEl9vNi2e0JnWzzw+cbYAjA6m8mbyziUMEoKQ++4UaokAtnqUFGaDXJHzXn+MM f/ZF1/qbW4exukarWEjpbbwezGJgQISrEaT/Hh+8ks04RIxtk1fnKthULaQ8ZEe9 x5BDcD9i8ODgCtv4NFoXDQYFnh7obIA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:40 2025 by rpki-client