$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa File: 9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa (raw, json) Hash identifier: uD3JMA8BTIqyJ+arhQyYZZkLBh0gjenjpkFcNrUExmM= Subject key identifier: 13:B3:1F:94:A4:63:71:F2:1F:14:DD:E9:D8:7A:51:A9:B7:C7:2C:2A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858495ABEC4E2120F721A9FEEEE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 15169 IP address blocks: 142.251.123.0/24 maxlen: 24 142.251.124.0/24 maxlen: 24 142.251.125.0/24 maxlen: 24 142.251.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c4:e2:12:0f:72:1a:9f:ee:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=fe0d50aa-0ff6-4bac-ba81-ada1962db552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:f9:c5:1b:81:c0:da:5c:ed:b6:1c:da:08: 6a:b4:07:94:86:a9:2e:ae:67:56:52:dc:35:de:e9: d0:e6:8b:74:94:82:c8:5b:f4:fa:d8:a8:ce:e7:82: 65:b4:ea:70:20:63:74:5b:08:82:7c:e0:bc:11:84: 62:1c:16:8b:c6:27:53:2e:59:21:8f:75:94:92:ce: b1:c3:8a:de:e5:f5:04:62:30:a3:33:6c:77:e2:eb: 96:97:b7:19:d5:13:de:4c:fe:f5:4c:ed:9f:aa:b8: a4:d3:a9:a0:b8:d7:24:f5:ff:6b:0f:e8:6d:f3:cc: dd:74:69:73:eb:10:e6:a6:db:ca:b0:ed:b1:65:c7: 18:c6:db:db:c8:90:86:5a:ad:5d:91:88:d5:ed:cf: 58:5b:70:ca:12:35:f6:e7:8e:31:59:75:eb:f7:a1: 57:d7:5d:39:de:de:e2:b8:4c:ba:18:c0:cc:2b:9d: ac:9e:54:68:20:53:df:1b:d5:16:3c:84:3a:b7:5a: 30:46:34:b6:46:e0:38:36:63:cf:b4:f6:ef:9c:e8: 10:2a:c9:05:c8:a3:6f:45:84:cc:aa:13:db:94:d3: aa:5d:49:26:ff:27:df:73:14:0c:09:04:47:27:35: 1f:42:57:30:f9:af:d4:ec:71:6e:89:3a:e6:81:54: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B3:1F:94:A4:63:71:F2:1F:14:DD:E9:D8:7A:51:A9:B7:C7:2C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.123.0-142.251.126.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b8:b5:4f:bb:9e:31:49:bb:2b:35:86:ba:40:5e:8d:6f:aa: 38:9f:50:89:2e:ab:78:c7:f0:1a:84:33:cc:a9:fe:d9:4c:91: 94:e8:ac:de:1f:c9:af:60:f6:2c:e1:ff:3a:46:e7:c4:28:98: 24:51:c3:ba:7d:bd:f2:de:a7:0d:13:10:90:ce:87:00:57:36: e6:d1:51:c1:79:72:1e:5e:32:38:ab:66:8d:82:7f:8a:a1:80: 80:2d:53:ea:74:d5:44:3d:70:7e:3b:a0:fe:c3:9e:21:3c:30: f7:d9:6c:21:9f:8c:ad:55:f0:2e:07:40:dd:fa:c5:12:29:26: fb:c7:8e:65:5e:cc:94:0a:b9:25:07:99:98:da:77:05:5c:a8: 45:46:1f:47:4b:bb:b8:84:4d:67:d5:63:83:d6:74:ca:52:f2: 3f:ab:a5:36:6d:7e:a3:fe:00:15:d6:44:49:35:71:af:20:56: 05:d4:ee:24:90:2a:95:11:65:e8:7c:53:e3:9c:11:01:fe:b9: a1:6b:e0:5d:32:e4:74:93:0e:0f:d6:15:a7:e7:0b:b9:aa:aa: 3a:1f:dc:e5:98:62:c6:7a:72:8f:ea:81:f1:20:17:ae:8d:db: ae:3e:ee:1a:96:fc:27:af:ef:3d:27:35:6d:db:43:e1:9c:03: 41:b3:8c:a8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElavsTiEg9yGp/u7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZmUwZDUwYWEtMGZmNi00YmFjLWJhODEtYWRhMTk2MmRiNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoST5xRuBwNpc7bYc2ghqtAeUhqkurmdWUtw1 3unQ5ot0lILIW/T62KjO54JltOpwIGN0WwiCfOC8EYRiHBaLxidTLlkhj3WUks6x w4re5fUEYjCjM2x34uuWl7cZ1RPeTP71TO2fqrik06mguNck9f9rD+ht88zddGlz 6xDmptvKsO2xZccYxtvbyJCGWq1dkYjV7c9YW3DKEjX2544xWXXr96FX11053t7i uEy6GMDMK52snlRoIFPfG9UWPIQ6t1owRjS2RuA4NmPPtPbvnOgQKskFyKNvRYTM qhPblNOqXUkm/yffcxQMCQRHJzUfQlcw+a/U7HFuiTrmgVTBFQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBOzH5SkY3HyHxTd6dh6Uam3xywqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWYyOTlmZDItMWE3OC0z OWY2LTlmYjMtNTY3YTZiMDBhZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACO+3sD BACO+34wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAMLi1T7ueMUm7KzWGukBejW+qOJ9QiS6reMfwGoQzzKn+ 2UyRlOis3h/Jr2D2LOH/OkbnxCiYJFHDun298t6nDRMQkM6HAFc25tFRwXlyHl4y OKtmjYJ/iqGAgC1T6nTVRD1wfjug/sOeITww99lsIZ+MrVXwLgdA3frFEikm+8eO ZV7MlAq5JQeZmNp3BVyoRUYfR0u7uIRNZ9Vjg9Z0ylLyP6ulNm1+o/4AFdZESTVx ryBWBdTuJJAqlRFl6HxT45wRAf65oWvgXTLkdJMOD9YVp+cLuaqqOh/c5Zhixnpy j+qB8SAXro3brj7uGpb8J6/vPSc1bdtD4ZwDQbOMqA== -----END CERTIFICATE-----Generated at Mon Apr 28 00:37:29 2025 by rpki-client