$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/96971fca-3c93-39fd-ae6a-cbc5c80eeab9.roa File: 96971fca-3c93-39fd-ae6a-cbc5c80eeab9.roa (raw, json) Hash identifier: gZVRSM/+w55qwQB9eqkdYB3arlhAAO7CVdcy3fr6I8c= Subject key identifier: 7B:C4:B6:D8:5F:CC:44:EF:CA:78:42:A2:E7:8D:8C:53:E9:A8:49:38 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB76885AEE77E3E697C920 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/96971fca-3c93-39fd-ae6a-cbc5c80eeab9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:76:88:5a:ee:77:e3:e6:97:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=04d3a809-5090-4b42-bdb7-7c4c428185a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:53:5c:b7:c5:70:6a:fb:07:74:1f:f0:63:98: fd:6d:58:fd:26:24:7c:aa:ef:38:0c:e9:2c:f2:55: 9c:1c:a9:f8:d3:0d:78:a4:4b:ed:af:86:7b:04:a3: f7:27:1f:90:9b:4b:75:af:6e:e6:be:97:f6:f6:f8: 7e:7c:e1:94:f1:47:27:4a:5e:0f:70:de:db:1f:cc: 55:3c:5b:46:73:68:1c:6a:e1:e9:3e:3d:b3:c5:75: 02:eb:9e:31:79:e0:b5:21:61:f5:db:2c:29:e2:b5: c3:e4:c4:0d:3c:99:24:d6:c8:e0:d8:61:bd:95:70: 72:af:00:4e:04:8b:4f:70:15:bc:b1:7a:cd:b4:ba: bc:72:1f:4d:27:06:58:4b:34:42:bf:2f:85:6e:9e: 38:f4:44:2b:78:d1:69:24:f5:d9:12:49:23:3f:19: 4f:b2:0a:ce:56:d2:20:93:5f:fd:28:66:f9:00:13: 28:37:69:f0:0c:24:a0:22:65:14:4e:5b:b0:4d:58: 3d:d4:f3:73:19:10:51:72:f6:78:69:f4:54:56:a1: e2:81:21:ca:00:32:d6:15:80:dd:30:a9:c0:0f:9c: 8c:c2:a3:1e:32:41:b7:82:c0:62:a2:ab:1a:28:b4: a7:14:b7:52:54:c8:d3:49:9c:41:c1:5b:ec:78:52: d0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C4:B6:D8:5F:CC:44:EF:CA:78:42:A2:E7:8D:8C:53:E9:A8:49:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/96971fca-3c93-39fd-ae6a-cbc5c80eeab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ea:cf:00:a4:66:28:b8:f4:a8:3c:0d:8c:04:d9:df:6a:e1: 55:c4:6c:05:da:08:7d:84:56:45:2d:f0:45:ac:f2:69:a3:94: d2:64:d4:f1:57:cc:39:1b:55:43:9c:5a:6f:25:e2:a8:8d:f6: 57:49:25:b8:d1:d3:b9:1a:0c:1b:d9:c2:f3:77:ca:6a:bd:cf: ec:04:a2:41:e8:f2:b2:68:bd:d4:04:4a:b8:58:d5:71:fa:6a: 4c:87:3b:4c:9f:5b:4b:c9:4c:11:c1:b9:c5:74:30:95:04:36: 0d:9e:1d:c4:98:81:32:e7:0b:43:17:c2:e1:f9:d5:e2:a0:9b: 30:26:b6:b9:fb:ed:ae:ba:94:dd:36:e9:53:04:54:8b:3f:e7: 5f:4d:fd:d9:37:36:a2:90:76:0f:d0:ad:fb:99:d2:fb:b4:a8: 19:af:7c:99:77:21:da:77:cb:92:60:b6:68:0d:6a:cb:4f:81: 3f:5a:10:07:74:33:d4:00:5e:70:98:95:7f:1b:f3:da:0f:7b: ed:88:9b:09:c5:13:c3:27:fa:f8:04:a5:2f:42:4d:29:67:ac: 8b:6e:c3:f8:cd:3c:01:72:f2:03:85:14:13:74:8b:29:3c:0f: e6:ed:d7:34:65:36:fb:71:2f:48:46:34:b1:87:d2:93:74:1a: f0:a7:79:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3aIWu534+aXySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDRkM2E4MDktNTA5MC00YjQyLWJkYjctN2M0YzQyODE4NWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilNct8VwavsHdB/wY5j9bVj9JiR8qu84DOks 8lWcHKn40w14pEvtr4Z7BKP3Jx+Qm0t1r27mvpf29vh+fOGU8UcnSl4PcN7bH8xV PFtGc2gcauHpPj2zxXUC654xeeC1IWH12ywp4rXD5MQNPJkk1sjg2GG9lXByrwBO BItPcBW8sXrNtLq8ch9NJwZYSzRCvy+Fbp449EQreNFpJPXZEkkjPxlPsgrOVtIg k1/9KGb5ABMoN2nwDCSgImUUTluwTVg91PNzGRBRcvZ4afRUVqHigSHKADLWFYDd MKnAD5yMwqMeMkG3gsBioqsaKLSnFLdSVMjTSZxBwVvseFLQVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvEtthfzETvynhCoueNjFPpqEk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTY5NzFmY2EtM2M5My0z OWZkLWFlNmEtY2JjNWM4MGVlYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvs1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3qzwCkZii49Kg8DYwE2d9q4VXEbAXaCH2EVkUt8EWs8mmjlNJk1PFX zDkbVUOcWm8l4qiN9ldJJbjR07kaDBvZwvN3ymq9z+wEokHo8rJovdQESrhY1XH6 akyHO0yfW0vJTBHBucV0MJUENg2eHcSYgTLnC0MXwuH51eKgmzAmtrn77a66lN02 6VMEVIs/519N/dk3NqKQdg/QrfuZ0vu0qBmvfJl3Idp3y5JgtmgNastPgT9aEAd0 M9QAXnCYlX8b89oPe+2ImwnFE8Mn+vgEpS9CTSlnrItuw/jNPAFy8gOFFBN0iyk8 D+bt1zRlNvtxL0hGNLGH0pN0GvCneV4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:58:12 2025 by rpki-client