$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa File: 76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa (raw, json) Hash identifier: lpoUBBiMnq4ivMrzYSIe32M9+UbOTfGbXUyAnF61XuI= Subject key identifier: 4A:7B:F7:AC:1D:4A:31:B9:CD:34:D6:76:23:41:AD:22:A8:94:76:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA12DC4760A69A0A527A360 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:2d:c4:76:0a:69:a0:a5:27:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=42720773-44c6-446f-909b-03df53551510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:06:50:27:8a:34:da:a7:35:6f:b3:a4:93:60: 91:9e:67:1f:ba:68:7a:80:7b:eb:5c:4c:46:d4:cc: a0:15:b0:2e:c1:f8:e8:2a:23:fd:17:b4:f6:24:49: 35:1f:b7:6b:d3:94:98:17:e3:e2:01:6a:b3:39:12: c2:92:04:9e:3c:8a:90:d2:03:be:c6:00:ca:a6:c1: eb:03:6c:06:0c:b0:22:92:52:e1:c0:70:58:2f:d8: fa:c5:c2:6b:f1:02:aa:de:d3:1c:36:93:b7:13:2a: a3:a3:27:31:9e:1c:08:ee:1e:67:f0:f9:1b:70:e3: a1:dd:98:50:ee:36:f2:85:59:22:56:4e:8a:d7:8a: e6:6a:00:71:a2:3d:57:f6:0a:95:7b:9f:3b:d5:f7: ec:1b:ba:04:77:79:60:58:62:93:96:6b:2d:49:85: c5:06:ef:e4:b9:60:22:06:51:dc:b0:e1:a8:ea:57: 69:7c:4c:eb:7f:42:34:74:6e:af:f2:3c:50:af:da: 9f:30:82:c2:66:6a:30:07:52:81:ae:9d:38:57:5f: da:d4:cc:35:15:97:74:33:e4:a9:07:6f:36:12:81: 8d:0e:3b:75:ff:ba:4e:0c:fb:46:6e:a1:e6:79:2b: 32:32:9b:d0:a1:bb:50:8c:45:5b:d8:c9:ae:ca:97: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7B:F7:AC:1D:4A:31:B9:CD:34:D6:76:23:41:AD:22:A8:94:76:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6a:4f:2f:31:63:2a:b1:42:a2:2a:8c:df:96:86:ce:4e:a8: 7b:83:5e:0d:42:8d:be:96:e7:bd:62:de:a4:50:40:33:f7:e5: c9:fb:3f:3b:21:f1:22:fd:78:a8:37:23:e4:8d:46:ab:62:64: 80:11:8b:0c:86:ac:3c:4b:61:8c:d6:af:e8:96:20:4d:fb:11: 60:b3:bb:13:ac:d0:aa:86:42:6b:5b:bf:2e:d7:60:6b:e6:c8: de:9b:1b:c8:d1:e2:8c:74:a0:63:8f:cf:b5:cd:06:ef:cc:9a: dc:55:e0:3d:9e:d9:55:cb:81:0f:ba:8f:63:a6:de:63:d2:43: a5:4f:3b:df:35:bc:20:a3:40:e6:cf:f8:5c:61:25:93:30:cd: 77:30:8f:a6:6f:d3:ef:f3:85:31:d2:12:aa:e4:36:4a:b5:c8: e6:2c:82:67:5e:4d:b7:cb:de:35:9b:8e:ea:04:a6:ac:0f:ac: b0:29:0d:ec:df:27:d8:46:2e:65:17:aa:4d:7c:3f:fe:63:8e: b5:a6:2a:87:94:e8:9d:f3:cc:98:f6:5d:ba:2a:5a:6e:81:91: 99:bd:bb:38:18:c7:2a:12:c7:50:66:0f:38:6c:76:47:4c:73: 9a:71:fb:44:0d:6e:3e:c0:b4:3b:13:80:86:02:c5:0a:4a:26: 49:94:87:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoS3EdgppoKUno2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NDI3MjA3NzMtNDRjNi00NDZmLTkwOWItMDNkZjUzNTUxNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwZQJ4o02qc1b7Okk2CRnmcfumh6gHvrXExG 1MygFbAuwfjoKiP9F7T2JEk1H7dr05SYF+PiAWqzORLCkgSePIqQ0gO+xgDKpsHr A2wGDLAiklLhwHBYL9j6xcJr8QKq3tMcNpO3EyqjoycxnhwI7h5n8PkbcOOh3ZhQ 7jbyhVkiVk6K14rmagBxoj1X9gqVe5871ffsG7oEd3lgWGKTlmstSYXFBu/kuWAi BlHcsOGo6ldpfEzrf0I0dG6v8jxQr9qfMILCZmowB1KBrp04V1/a1Mw1FZd0M+Sp B282EoGNDjt1/7pODPtGbqHmeSsyMpvQobtQjEVb2MmuypdOJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp796wdSjG5zTTWdiNBrSKolHaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzY4OTdhZTUtNTZlNC0z ZDZkLThhMDktNWM4OGU1ZDVmMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlqTy8xYyqxQqIqjN+Whs5OqHuDXg1Cjb6W571i3qRQQDP35cn7Pzsh 8SL9eKg3I+SNRqtiZIARiwyGrDxLYYzWr+iWIE37EWCzuxOs0KqGQmtbvy7XYGvm yN6bG8jR4ox0oGOPz7XNBu/MmtxV4D2e2VXLgQ+6j2Om3mPSQ6VPO981vCCjQObP +FxhJZMwzXcwj6Zv0+/zhTHSEqrkNkq1yOYsgmdeTbfL3jWbjuoEpqwPrLApDezf J9hGLmUXqk18P/5jjrWmKoeU6J3zzJj2XboqWm6BkZm9uzgYxyoSx1BmDzhsdkdM c5px+0QNbj7AtDsTgIYCxQpKJkmUh5U= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:01 2025 by rpki-client