$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/687f2922-1683-35d2-b282-095673dabb54.roa File: 687f2922-1683-35d2-b282-095673dabb54.roa (raw, json) Hash identifier: twJoBSYabjRcGlhRA3orAGc2lJw1dZSVvh/8zECj5q8= Subject key identifier: 33:D5:42:51:40:95:55:5B:25:93:5F:6A:C0:98:3B:3B:5B:1B:4E:25 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB720A03FA843498F1D240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/687f2922-1683-35d2-b282-095673dabb54.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:72:0a:03:fa:84:34:98:f1:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a34a99bb-e4d8-496a-ac51-9541d47069d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:86:73:a5:e1:80:d7:f5:9b:53:c0:b3:59: ae:8f:67:b7:45:ee:7e:72:f6:0f:77:30:16:6f:b7: df:1f:ea:31:83:e1:f4:c5:4f:3d:48:b2:e2:20:d4: c5:e7:9d:9e:08:a8:d1:10:16:e0:ad:31:57:c1:25: 8e:37:72:dd:3b:3e:df:2c:a9:0e:72:91:eb:57:5e: ef:d3:7f:60:6d:c1:3d:5c:06:fd:65:cc:1b:dc:c9: 57:9a:59:13:64:a0:c6:a5:7c:ba:9d:1e:b4:b5:bc: 28:88:e3:b8:5c:ec:48:3b:49:75:2a:b7:f0:e0:f9: 86:93:3a:9d:6a:22:fb:a3:d6:53:57:bf:bc:84:bd: 7b:c2:8b:fc:9a:e9:b2:3f:a6:36:3c:fb:67:92:9f: d9:07:1b:5c:8c:dd:28:82:2e:b7:93:fc:48:fe:45: d1:5f:41:ee:26:69:6f:f5:9b:b9:0a:3a:9b:98:25: aa:5d:88:5a:61:00:85:46:1f:d4:0c:84:34:7c:33: 40:8f:bc:4c:79:42:78:04:34:48:da:79:32:e4:9c: 7d:ea:5d:d3:ba:5b:77:db:21:08:90:3c:2c:6b:ea: 96:8b:1d:03:b7:43:7f:72:b9:f0:1e:a1:71:d6:a9: 62:ba:69:6b:35:1a:dd:4a:e3:4e:4c:46:be:ec:0b: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D5:42:51:40:95:55:5B:25:93:5F:6A:C0:98:3B:3B:5B:1B:4E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/687f2922-1683-35d2-b282-095673dabb54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c0:41:46:dd:80:42:43:6b:40:44:8c:37:9d:41:1d:d4:bf: 28:b6:9f:91:82:a7:af:5f:c2:48:47:85:66:e0:91:44:db:88: 6e:52:2a:b4:b4:e5:05:c1:31:d1:6e:08:f3:ed:4a:b9:42:2e: cb:c2:01:09:d1:5b:b1:ac:34:cd:61:71:f2:29:2b:e8:f6:0c: 9a:a0:fe:87:27:ce:15:3d:b0:ad:64:06:c4:fa:5c:58:25:9f: 06:51:ab:92:ed:00:5f:06:ae:42:9c:0a:75:b0:41:3f:48:27: 4e:7e:71:8a:04:12:8c:51:2c:11:4d:bd:cf:cf:d0:14:ab:66: 3a:70:6d:a6:d0:8d:13:d4:99:c6:f5:c5:d4:64:e4:93:14:36: 06:6c:c1:75:f6:5a:c0:ad:0b:67:3f:8d:ae:d5:a5:ce:29:00: 61:f8:84:fb:52:8d:2e:b2:4b:d1:68:f0:ea:7f:df:9a:d7:78: 14:ed:c1:70:c3:d0:4b:e5:a3:01:3f:eb:0b:c4:eb:72:9c:7a: be:8c:20:59:fc:cc:d8:4d:87:06:c3:3f:2a:ee:5b:54:cb:c7: 48:3a:2f:2f:cc:82:0c:95:73:ec:87:c8:46:5e:b7:27:5c:77: 09:5a:46:ef:03:f9:c3:00:82:7e:ba:da:d2:45:81:76:99:5b: ca:1f:63:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3IKA/qENJjx0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTM0YTk5YmItZTRkOC00OTZhLWFjNTEtOTU0MWQ0NzA2OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0GGc6XhgNf1m1PAs1muj2e3Re5+cvYPdzAW b7ffH+oxg+H0xU89SLLiINTF552eCKjREBbgrTFXwSWON3LdOz7fLKkOcpHrV17v 039gbcE9XAb9Zcwb3MlXmlkTZKDGpXy6nR60tbwoiOO4XOxIO0l1Krfw4PmGkzqd aiL7o9ZTV7+8hL17wov8mumyP6Y2PPtnkp/ZBxtcjN0ogi63k/xI/kXRX0HuJmlv 9Zu5CjqbmCWqXYhaYQCFRh/UDIQ0fDNAj7xMeUJ4BDRI2nky5Jx96l3Tult32yEI kDwsa+qWix0Dt0N/crnwHqFx1qliumlrNRrdSuNOTEa+7Ato3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPVQlFAlVVbJZNfasCYOztbG04lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjg3ZjI5MjItMTY4My0z NWQyLWIyODItMDk1NjczZGFiYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7AQUbdgEJDa0BEjDedQR3Uvyi2n5GCp69fwkhHhWbgkUTbiG5SKrS0 5QXBMdFuCPPtSrlCLsvCAQnRW7GsNM1hcfIpK+j2DJqg/ocnzhU9sK1kBsT6XFgl nwZRq5LtAF8GrkKcCnWwQT9IJ05+cYoEEoxRLBFNvc/P0BSrZjpwbabQjRPUmcb1 xdRk5JMUNgZswXX2WsCtC2c/ja7Vpc4pAGH4hPtSjS6yS9Fo8Op/35rXeBTtwXDD 0EvlowE/6wvE63Kcer6MIFn8zNhNhwbDPyruW1TLx0g6Ly/MggyVc+yHyEZetydc dwlaRu8D+cMAgn662tJFgXaZW8ofYwg= -----END CERTIFICATE-----Generated at Sun Apr 27 14:49:27 2025 by rpki-client