$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa File: 98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa (raw, json) Hash identifier: SyKYx2qekOWosOweXHCgVZipRC9TTRWt2+lKiEX1dqM= Subject key identifier: 6D:FC:97:E0:7B:79:45:32:D7:94:B4:B7:15:03:D3:6D:F4:AC:02:55 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACE8C068CC21C91473300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ce:8c:06:8c:c2:1c:91:47:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ecbd4234-62c5-4808-95d6-0fd11e7b046e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:d4:d9:27:97:4f:73:f3:ac:64:4e:0f:db: a9:08:92:f9:36:cc:99:38:9d:41:7e:27:4f:6d:43: 00:ea:20:85:6a:da:0d:41:31:b0:6f:56:c4:99:99: 6c:52:89:e4:d2:43:8f:09:10:c9:c4:5d:32:24:e5: 39:5c:57:a8:f9:70:56:e6:f0:88:df:6d:6f:a8:f6: 9d:ec:67:7e:7b:d0:07:7b:9f:c2:72:f1:6e:95:60: fb:3e:8e:fc:ef:cd:ce:04:db:62:33:f9:9b:be:4f: e6:03:61:e9:8a:18:c3:b7:b8:b2:ae:2f:10:8c:2c: df:ba:18:72:dc:6e:ba:00:58:b0:ac:2c:7e:11:97: 6d:c8:d1:67:d0:9e:27:95:b9:2d:a2:59:d2:2e:c6: b8:77:56:63:6a:8a:52:17:44:3a:a7:0d:6e:21:2c: ad:dd:a4:dc:1c:1b:01:a8:fb:35:6c:5e:1a:e1:51: b8:a8:f2:e5:db:60:01:38:5f:94:0e:55:d1:9b:17: 07:fe:1f:e3:06:2c:07:d1:9d:db:6c:ad:f8:d5:48: a7:07:e1:6d:c1:ab:4d:81:83:cd:b9:17:fd:7e:f5: eb:9f:81:cd:d3:15:07:25:b8:38:79:7a:14:71:17: 2e:45:cd:ab:eb:d7:d9:02:92:7f:a6:24:1f:01:2d: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FC:97:E0:7B:79:45:32:D7:94:B4:B7:15:03:D3:6D:F4:AC:02:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98de07af-e8ba-3cde-b6ec-8c0162ea6141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ae:fc:87:d6:a3:53:8b:59:22:c3:d2:ef:88:3d:55:a4:6c: d8:75:9a:8a:5a:11:c0:3e:44:d5:bb:96:e5:89:9b:dc:43:8b: 69:6b:3f:cb:68:d6:e3:27:d1:ad:11:e8:be:5f:7c:10:f4:cb: 61:83:61:95:2d:26:d3:5f:bc:5c:27:c5:d2:9d:47:db:63:6e: 60:8a:d7:ba:8b:7d:ce:82:5d:3d:4a:80:54:2d:03:00:a5:6e: 47:42:1f:9d:58:f1:2e:b1:32:0f:95:92:9b:74:e7:2f:da:56: 24:b7:9e:22:4e:77:bc:ca:fc:12:83:a3:31:42:15:fc:56:0f: b4:4a:a5:e9:11:33:9b:69:14:17:1b:a6:f6:3e:c5:30:a3:3f: 63:78:c3:12:d3:3e:fb:be:a5:da:de:33:e3:d4:da:64:ae:7d: d2:8c:2d:eb:f0:4a:56:26:b6:92:e6:fd:eb:55:c0:e0:83:9f: ea:6f:0e:01:9b:50:71:62:dc:ae:98:ed:95:d8:88:7f:4d:05: 76:25:56:c7:00:69:25:1e:c8:ea:4a:66:0b:1d:e5:44:f9:53: d1:85:b8:f4:16:1b:83:69:49:50:43:f1:84:32:ad:d2:50:f1: 42:12:d7:40:c9:7b:58:75:2f:f0:66:ab:86:f3:b8:b8:e7:2a: 43:b6:d2:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus6MBozCHJFHMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWNiZDQyMzQtNjJjNS00ODA4LTk1ZDYtMGZkMTFlN2IwNDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyXU2SeXT3PzrGROD9upCJL5NsyZOJ1BfidP bUMA6iCFatoNQTGwb1bEmZlsUonk0kOPCRDJxF0yJOU5XFeo+XBW5vCI321vqPad 7Gd+e9AHe5/CcvFulWD7Po78783OBNtiM/mbvk/mA2HpihjDt7iyri8QjCzfuhhy 3G66AFiwrCx+EZdtyNFn0J4nlbktolnSLsa4d1ZjaopSF0Q6pw1uISyt3aTcHBsB qPs1bF4a4VG4qPLl22ABOF+UDlXRmxcH/h/jBiwH0Z3bbK341UinB+FtwatNgYPN uRf9fvXrn4HN0xUHJbg4eXoUcRcuRc2r69fZApJ/piQfAS0hswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG38l+B7eUUy15S0txUD0230rAJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOThkZTA3YWYtZThiYS0z Y2RlLWI2ZWMtOGMwMTYyZWE2MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKu/IfWo1OLWSLD0u+IPVWkbNh1mopaEcA+RNW7luWJm9xDi2lrP8to 1uMn0a0R6L5ffBD0y2GDYZUtJtNfvFwnxdKdR9tjbmCK17qLfc6CXT1KgFQtAwCl bkdCH51Y8S6xMg+Vkpt05y/aViS3niJOd7zK/BKDozFCFfxWD7RKpekRM5tpFBcb pvY+xTCjP2N4wxLTPvu+pdreM+PU2mSufdKMLevwSlYmtpLm/etVwOCDn+pvDgGb UHFi3K6Y7ZXYiH9NBXYlVscAaSUeyOpKZgsd5UT5U9GFuPQWG4NpSVBD8YQyrdJQ 8UIS10DJe1h1L/Bmq4bzuLjnKkO20mU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:34 2025 by rpki-client