$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a25f6c11-5a00-3862-a54e-18e09c229720.roa File: a25f6c11-5a00-3862-a54e-18e09c229720.roa (raw, json) Hash identifier: OnvGpazGoRd7OMzbud+xC/v7fqpoMlQHZjMEUVtVETk= Subject key identifier: 64:07:AD:75:F9:74:1A:4D:A8:AE:22:91:60:DC:C5:52:2C:D3:F1:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD439F8D07E0666C88F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a25f6c11-5a00-3862-a54e-18e09c229720.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d4:39:f8:d0:7e:06:66:c8:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a0a95afc-c4ef-44ca-a58b-4218949c2835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:d3:a7:20:67:1f:95:13:46:56:0a:b1:fd: 52:38:d1:05:7e:d9:b6:8c:a5:5a:85:12:8b:7c:27: b7:59:b4:de:a1:ac:36:b7:eb:04:e7:a0:d4:f7:9d: 9f:c7:6e:a7:7c:6d:83:29:f6:a6:82:98:8e:51:5d: 24:a1:08:44:9b:77:d0:21:1c:57:34:ba:5c:48:75: e7:0a:4b:f1:50:fd:d8:d4:12:0b:56:d8:7e:e6:f5: ab:32:9a:13:78:dc:7c:5f:38:1d:47:c4:d4:34:b9: d7:81:9a:81:e9:25:2e:a6:b8:05:3d:96:0e:46:b7: 14:da:8d:cc:e3:7c:30:1b:74:94:a6:fe:78:56:a0: c1:e0:4a:ec:a5:f3:05:82:c7:bc:b3:ed:a2:9d:9f: b4:44:20:a4:38:cc:99:a9:43:03:57:de:60:dc:48: 25:d8:fb:0f:63:a6:65:14:7b:38:3a:01:e0:39:e3: 59:b8:ec:cf:3e:63:7c:95:6f:46:d2:60:ff:49:f3: 18:c8:ae:51:0d:76:4b:19:4f:fc:c5:c1:77:d1:30: dd:67:e4:61:80:e0:77:a9:12:27:72:54:30:b6:95: a1:1c:d0:db:76:81:63:08:ef:dd:1a:73:a8:32:33: c3:39:bc:5e:5a:80:0e:fa:f3:46:b1:21:89:12:18: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:07:AD:75:F9:74:1A:4D:A8:AE:22:91:60:DC:C5:52:2C:D3:F1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a25f6c11-5a00-3862-a54e-18e09c229720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:83:29:b6:e6:6d:3f:48:83:58:1c:03:86:3c:45:50:b4:00: cb:cb:b5:76:bc:63:2a:41:4f:49:01:c1:44:83:c0:59:d6:88: 59:39:bb:cc:b9:21:2a:6a:e7:e0:93:8b:b4:c2:ed:52:f7:92: 33:4e:5a:dc:0e:de:c4:81:16:35:02:5e:86:26:7a:b7:40:47: e0:6e:8e:30:32:3d:94:ed:7e:e3:fa:14:df:c2:06:cc:b4:b2: 41:3e:83:d3:e5:49:91:47:32:27:0d:73:1b:a5:73:55:07:51: 17:bd:0d:7a:71:0e:2c:b9:bb:7c:12:0f:21:10:38:d5:7a:d0: e3:68:f8:0e:dd:9f:8c:7d:59:80:2d:34:f9:67:cc:41:ae:a0: e2:16:99:fb:bd:29:36:da:01:02:fd:5e:86:60:a2:86:ca:3b: d8:68:0f:dd:ab:e5:42:2d:7d:d3:db:99:7c:d7:73:85:7f:f6: 06:e9:9c:b6:db:42:fe:09:ed:f2:bf:3b:a2:4e:45:c3:bf:28: b7:2b:e1:31:71:4d:32:4f:a5:00:92:5e:d2:53:18:2a:e5:0f: c0:97:34:0a:48:5b:df:2c:6e:40:a7:2c:ab:bd:7f:86:8b:f7: 7e:1e:9c:77:1f:1d:86:5e:76:3b:35:8d:dc:48:ee:99:12:46: eb:db:16:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutQ5+NB+BmbIj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTBhOTVhZmMtYzRlZi00NGNhLWE1OGItNDIxODk0OWMyODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5HTpyBnH5UTRlYKsf1SONEFftm2jKVahRKL fCe3WbTeoaw2t+sE56DU952fx26nfG2DKfamgpiOUV0koQhEm3fQIRxXNLpcSHXn CkvxUP3Y1BILVth+5vWrMpoTeNx8XzgdR8TUNLnXgZqB6SUuprgFPZYORrcU2o3M 43wwG3SUpv54VqDB4ErspfMFgse8s+2inZ+0RCCkOMyZqUMDV95g3Egl2PsPY6Zl FHs4OgHgOeNZuOzPPmN8lW9G0mD/SfMYyK5RDXZLGU/8xcF30TDdZ+RhgOB3qRIn clQwtpWhHNDbdoFjCO/dGnOoMjPDObxeWoAO+vNGsSGJEhiPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQHrXX5dBpNqK4ikWDcxVIs0/HoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTI1ZjZjMTEtNWEwMC0z ODYyLWE1NGUtMThlMDljMjI5NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvs2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaDKbbmbT9Ig1gcA4Y8RVC0AMvLtXa8YypBT0kBwUSDwFnWiFk5u8y5 ISpq5+CTi7TC7VL3kjNOWtwO3sSBFjUCXoYmerdAR+BujjAyPZTtfuP6FN/CBsy0 skE+g9PlSZFHMicNcxulc1UHURe9DXpxDiy5u3wSDyEQONV60ONo+A7dn4x9WYAt NPlnzEGuoOIWmfu9KTbaAQL9XoZgoobKO9hoD92r5UItfdPbmXzXc4V/9gbpnLbb Qv4J7fK/O6JORcO/KLcr4TFxTTJPpQCSXtJTGCrlD8CXNApIW98sbkCnLKu9f4aL 934enHcfHYZedjs1jdxI7pkSRuvbFgA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:06 2025 by rpki-client