$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa File: 7cf2fd49-6469-31b7-b902-e90312ec317d.roa (raw, json) Hash identifier: 0BExedQZelXvvfDAVWvVDUY2nB66HNP+XekCez/OlFQ= Subject key identifier: 8A:61:AE:E3:AF:78:14:5B:FF:DB:A6:36:C4:46:54:07:EB:67:8B:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB66AFD65EF767F024C700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:66:af:d6:5e:f7:67:f0:24:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4313135c-c1a9-4337-ae33-73e89daa4dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:04:06:07:d5:a7:82:2c:d9:ab:68:80:0f: 83:f7:67:43:17:02:bb:6e:cc:16:00:56:0d:69:4b: 4b:60:03:c5:6a:79:5f:f8:eb:40:69:1f:66:5d:e9: 64:21:50:87:67:ef:bd:60:fa:92:71:c4:45:70:20: a5:cf:06:ad:0a:2b:e6:b2:0c:52:96:1c:0c:b3:51: 82:09:a1:98:71:1d:d6:71:b1:17:4d:1f:58:ac:b2: ce:69:79:1e:ae:d5:d9:77:43:cc:ac:7d:bf:e5:3d: 54:9d:2b:87:eb:ca:d6:4a:39:bf:d1:d4:02:97:0d: 7c:e8:1c:35:c1:d1:bf:b7:0d:ce:ae:b2:5a:63:9f: 0b:fc:e2:c9:ee:4a:ac:fd:c2:0e:09:fd:18:e2:c7: 70:1b:6a:5d:eb:11:00:82:56:6b:b7:87:4d:b9:4a: c2:fb:5a:a4:6c:ec:4d:21:cb:01:05:0e:fd:03:82: 30:4b:96:3d:4d:df:4c:41:87:15:9c:30:29:36:73: 88:69:da:37:3b:2d:a6:e6:9e:ff:68:bb:dc:4a:35: ed:ad:9f:50:96:fa:1f:ac:83:e5:3f:77:40:3e:c8: c5:bf:30:b0:d2:a4:22:b9:47:dd:ea:bf:12:96:9e: a1:87:b5:63:ec:e0:89:11:ac:8f:a5:ce:3f:00:7e: 71:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:61:AE:E3:AF:78:14:5B:FF:DB:A6:36:C4:46:54:07:EB:67:8B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e3:53:c6:fb:d4:f8:22:f7:bf:10:d6:06:6d:77:cb:44:3b: 60:ba:8d:c2:74:24:6a:dc:48:c6:97:16:55:2b:12:b2:7c:b1: da:de:8d:ff:f5:f7:1a:81:17:31:16:79:3a:8b:a5:ec:6a:38: 10:69:9e:3d:b3:03:24:92:9c:53:59:a6:0e:64:0c:63:f1:93: 82:26:06:00:f2:32:ec:63:ee:01:4c:b9:b0:21:2e:8e:15:3a: c6:20:69:85:c9:e3:e0:99:12:7d:7b:d8:9d:7c:c8:f7:c9:86: a1:f3:47:60:4d:b2:c9:03:54:85:7b:3e:a8:1d:c9:6d:65:0f: 7a:ac:c7:e1:59:4d:84:80:7c:34:10:f5:23:20:d4:89:32:01: f3:91:83:24:28:b0:67:4d:f2:7f:7e:13:ff:45:9b:e9:cd:a0: ea:c7:3b:36:2c:b0:03:ca:d2:d4:4f:ac:3e:7d:f2:6d:3a:98: 5e:9e:c5:11:34:72:96:cd:12:93:f9:ed:bf:4a:1a:07:79:40: c6:30:1a:2d:88:a0:01:56:c4:05:56:3c:cd:56:8c:e2:c3:21: 35:92:77:74:e5:52:1b:af:ca:6d:95:04:9b:a8:cc:13:f9:2f: 2e:77:3f:af:a9:66:e1:f4:89:28:97:f8:cb:c4:5c:d0:5c:fb: 7b:bb:1f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2av1l73Z/AkxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDMxMzEzNWMtYzFhOS00MzM3LWFlMzMtNzNlODlkYWE0ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQMEBgfVp4Is2atogA+D92dDFwK7bswWAFYN aUtLYAPFanlf+OtAaR9mXelkIVCHZ++9YPqSccRFcCClzwatCivmsgxSlhwMs1GC CaGYcR3WcbEXTR9YrLLOaXkertXZd0PMrH2/5T1UnSuH68rWSjm/0dQClw186Bw1 wdG/tw3OrrJaY58L/OLJ7kqs/cIOCf0Y4sdwG2pd6xEAglZrt4dNuUrC+1qkbOxN IcsBBQ79A4IwS5Y9Td9MQYcVnDApNnOIado3Oy2m5p7/aLvcSjXtrZ9QlvofrIPl P3dAPsjFvzCw0qQiuUfd6r8Slp6hh7Vj7OCJEayPpc4/AH5xCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIphruOveBRb/9umNsRGVAfrZ4sTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2NmMmZkNDktNjQ2OS0z MWI3LWI5MDItZTkwMzEyZWMzMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDjU8b71Pgi978Q1gZtd8tEO2C6jcJ0JGrcSMaXFlUrErJ8sdrejf/1 9xqBFzEWeTqLpexqOBBpnj2zAySSnFNZpg5kDGPxk4ImBgDyMuxj7gFMubAhLo4V OsYgaYXJ4+CZEn172J18yPfJhqHzR2BNsskDVIV7PqgdyW1lD3qsx+FZTYSAfDQQ 9SMg1IkyAfORgyQosGdN8n9+E/9Fm+nNoOrHOzYssAPK0tRPrD598m06mF6exRE0 cpbNEpP57b9KGgd5QMYwGi2IoAFWxAVWPM1WjOLDITWSd3TlUhuvym2VBJuozBP5 Ly53P6+pZuH0iSiX+MvEXNBc+3u7H0g= -----END CERTIFICATE-----Generated at Sat Apr 26 20:55:18 2025 by rpki-client