$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/962bf7de-0c9c-3eff-a5b5-952421fda78c.roa File: 962bf7de-0c9c-3eff-a5b5-952421fda78c.roa (raw, json) Hash identifier: Ju3P5Hk9aStQsxycuK/tFe1G8RORFxARAAucz9jHoaM= Subject key identifier: 55:30:92:38:D7:C4:06:60:12:12:91:09:74:4A:84:6C:7E:BF:38:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC74224171654A510C100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/962bf7de-0c9c-3eff-a5b5-952421fda78c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c7:42:24:17:16:54:a5:10:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8ce33847-3565-4752-9d53-d73f67afbfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:ce:24:45:64:8f:31:92:4e:4f:70:3d:1d: e4:36:17:bc:03:fa:ab:7d:a3:55:9f:ec:89:01:d4: 06:b1:26:4b:64:f5:46:ed:d2:1b:46:76:eb:f4:75: 12:b2:78:ea:0c:fc:dc:2f:d0:f2:b4:43:83:c1:33: 64:e7:4c:69:f6:a4:8d:c9:0b:97:7e:d0:9a:17:9c: a0:a0:ac:0d:74:db:21:90:40:d1:42:e4:f6:68:34: 9e:bf:6e:fd:c3:70:56:be:1e:d9:69:e3:ae:1d:5e: 85:a4:ed:10:e3:cf:22:29:22:98:87:3b:69:f1:49: 27:99:2f:75:ce:87:7c:36:f0:73:ee:13:67:9a:7e: 5d:ee:46:43:e2:a3:a5:6f:30:68:64:0d:01:66:a5: 96:a9:bc:93:e6:76:e7:4d:fc:13:1a:e4:2d:f8:07: 33:e4:03:67:4b:01:fe:3c:3d:90:4f:df:78:d9:a9: a8:44:24:2b:ad:71:ab:5b:35:e0:9b:5d:d4:13:1c: fb:24:ca:cb:0e:2f:fb:f3:a8:09:b8:c6:83:5c:b6: 94:e0:af:91:ea:78:bc:55:a1:19:69:9d:1c:4f:9c: 4d:c9:2d:cb:0d:cf:b8:f5:46:cf:c9:c0:e8:99:b2: e4:83:4d:ec:92:ba:d7:11:71:f1:e9:3f:cd:6b:9f: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:30:92:38:D7:C4:06:60:12:12:91:09:74:4A:84:6C:7E:BF:38:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/962bf7de-0c9c-3eff-a5b5-952421fda78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:85:c1:d6:a4:2f:e7:73:56:e5:c7:73:2f:02:53:bc:50:54: 70:a3:51:ce:ab:30:5f:73:6e:22:97:08:77:9e:22:9d:cc:9e: 32:d6:f9:e8:99:71:54:74:10:05:8a:c5:32:77:13:4f:2d:62: 35:c0:f0:f1:37:05:e5:81:52:74:84:2a:f6:4e:ac:83:e0:12: 3a:57:e6:ad:7b:8b:5b:83:3f:80:38:fd:69:76:08:fd:c2:67: 41:93:97:92:82:44:e4:2f:24:9a:71:80:b3:e0:a7:1d:7e:4b: 5c:8a:8e:a9:71:c1:63:43:d8:69:4c:96:3b:93:76:5c:af:aa: 3f:29:2d:66:7f:98:e0:eb:68:6c:5b:98:1e:82:77:31:55:20: 65:77:56:32:f0:e7:df:62:ae:ed:3f:28:48:9b:bd:69:6f:da: 64:79:97:da:ef:a6:1a:01:ca:94:2d:8e:55:aa:4c:81:0a:dd: 6f:60:88:af:e9:d9:7b:62:ce:c2:8e:be:4a:06:5b:08:db:35: b2:c9:ec:c9:b6:86:56:a6:de:9e:df:e2:44:33:08:9a:2d:a5: ed:30:82:a8:95:0c:15:1a:32:d9:ab:45:bd:3a:47:73:84:25: 2d:e8:64:18:76:25:2c:e9:24:68:2d:ee:dc:bb:06:9f:c4:b7: 56:82:ba:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusdCJBcWVKUQwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGNlMzM4NDctMzU2NS00NzUyLTlkNTMtZDczZjY3YWZiZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1fOJEVkjzGSTk9wPR3kNhe8A/qrfaNVn+yJ AdQGsSZLZPVG7dIbRnbr9HUSsnjqDPzcL9DytEODwTNk50xp9qSNyQuXftCaF5yg oKwNdNshkEDRQuT2aDSev279w3BWvh7ZaeOuHV6FpO0Q488iKSKYhztp8UknmS91 zod8NvBz7hNnmn5d7kZD4qOlbzBoZA0BZqWWqbyT5nbnTfwTGuQt+Acz5ANnSwH+ PD2QT9942amoRCQrrXGrWzXgm13UExz7JMrLDi/786gJuMaDXLaU4K+R6ni8VaEZ aZ0cT5xNyS3LDc+49UbPycDombLkg03skrrXEXHx6T/Na5+sRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUwkjjXxAZgEhKRCXRKhGx+vzgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTYyYmY3ZGUtMGM5Yy0z ZWZmLWE1YjUtOTUyNDIxZmRhNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKFwdakL+dzVuXHcy8CU7xQVHCjUc6rMF9zbiKXCHeeIp3MnjLW+eiZ cVR0EAWKxTJ3E08tYjXA8PE3BeWBUnSEKvZOrIPgEjpX5q17i1uDP4A4/Wl2CP3C Z0GTl5KCROQvJJpxgLPgpx1+S1yKjqlxwWND2GlMljuTdlyvqj8pLWZ/mODraGxb mB6CdzFVIGV3VjLw599iru0/KEibvWlv2mR5l9rvphoBypQtjlWqTIEK3W9giK/p 2XtizsKOvkoGWwjbNbLJ7Mm2hlam3p7f4kQzCJotpe0wgqiVDBUaMtmrRb06R3OE JS3oZBh2JSzpJGgt7ty7Bp/Et1aCuk0= -----END CERTIFICATE-----Generated at Sat Apr 26 23:43:10 2025 by rpki-client