$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa File: a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa (raw, json) Hash identifier: W9ujBNcXtRqyf97+A5hBpB3pVopbaXy0VZ90ulrlxf4= Subject key identifier: E7:2A:3A:3C:EA:A2:AD:A8:01:96:43:99:E7:9F:58:19:83:2F:1E:2A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD59571F7C28B46C6B700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d5:95:71:f7:c2:8b:46:c6:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=530ebc9b-0fe8-4fb3-9971-fbaaa6f425a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:43:ef:58:c3:b9:74:78:15:df:79:3e:1b:69: 8c:48:3e:7d:aa:da:c9:41:1d:77:58:ea:d9:35:8a: 17:1d:8a:e8:e1:9b:12:5f:b5:c9:3f:0c:09:7c:84: dc:87:ea:90:f8:e7:3b:fd:60:cf:df:80:56:84:ab: 91:9b:cf:ba:d9:a3:77:2b:7d:28:3d:0d:3c:42:ea: 9b:cd:7e:5c:5c:4e:e5:8d:7a:d8:26:c3:25:fe:37: aa:a1:16:7c:5e:8c:1e:3e:21:5d:df:06:a8:5e:e8: dd:0e:d7:29:69:b0:d3:ca:78:e8:02:65:d8:5c:9a: 25:be:cb:22:9f:ce:14:8c:9a:45:ba:b9:aa:65:e8: cc:3f:c8:12:28:a4:f0:3e:f9:d1:0f:3a:8d:bf:53: df:b8:01:d8:4a:0c:ab:fb:f8:da:4a:ee:c4:31:81: 56:3e:5c:5c:32:51:31:0d:78:c8:1a:5f:fb:41:ad: b8:66:f5:4e:09:d0:cc:3d:33:f0:60:6f:72:c0:97: d4:ae:51:80:73:3f:50:8c:2c:21:9c:bb:d6:7b:46: d2:6f:69:b4:47:ac:a8:69:35:64:52:24:95:34:9e: a5:5f:b8:51:98:8a:25:21:01:6e:ed:da:4b:b0:3a: 22:25:8a:66:4d:36:3f:db:19:7d:81:81:01:d3:2e: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2A:3A:3C:EA:A2:AD:A8:01:96:43:99:E7:9F:58:19:83:2F:1E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:be:f1:46:a7:ea:a1:8a:e3:39:87:ea:4b:d0:84:9f:65:75: 0e:58:3e:9a:1d:36:e6:de:41:27:b2:a3:e1:37:2a:6a:68:66: 15:56:1f:a2:c4:f3:f5:32:2c:2c:92:c0:71:06:49:95:0b:ee: 46:df:50:42:09:b0:87:bb:6b:24:7b:91:7a:82:33:55:10:f6: a6:c2:d4:70:cb:c1:4f:5f:83:9f:1a:b0:f7:c2:80:07:9d:e7: 0d:d4:a3:6b:78:0e:c5:85:f6:d6:e8:b7:2f:57:33:80:4b:e6: d9:05:ef:db:e6:bb:c6:02:0b:df:48:a6:8c:e6:e7:97:e9:4e: 85:51:93:cc:57:d5:ce:0d:ba:81:d9:03:48:1a:87:e8:8b:11: 05:7b:8c:65:29:10:2e:17:0b:24:8d:f9:de:9a:84:61:95:86: bc:eb:a7:9e:a6:e4:8f:d2:8d:24:5a:c7:23:87:dd:18:52:41: 11:de:33:3c:8c:5b:a7:06:20:d5:03:57:e6:39:01:0a:94:77: 86:af:d2:44:c1:46:a1:7d:5f:ff:03:e0:47:2d:2e:a2:7a:68: c0:96:3d:82:2b:01:08:2c:32:2a:05:eb:8e:47:27:97:c7:0a: ff:57:52:5f:99:d0:41:38:eb:f3:0a:cb:95:36:a0:7b:8b:4c: 2a:bd:fa:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutWVcffCi0bGtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTMwZWJjOWItMGZlOC00ZmIzLTk5NzEtZmJhYWE2ZjQyNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EPvWMO5dHgV33k+G2mMSD59qtrJQR13WOrZ NYoXHYro4ZsSX7XJPwwJfITch+qQ+Oc7/WDP34BWhKuRm8+62aN3K30oPQ08Quqb zX5cXE7ljXrYJsMl/jeqoRZ8XowePiFd3waoXujdDtcpabDTynjoAmXYXJolvssi n84UjJpFurmqZejMP8gSKKTwPvnRDzqNv1PfuAHYSgyr+/jaSu7EMYFWPlxcMlEx DXjIGl/7Qa24ZvVOCdDMPTPwYG9ywJfUrlGAcz9QjCwhnLvWe0bSb2m0R6yoaTVk UiSVNJ6lX7hRmIolIQFu7dpLsDoiJYpmTTY/2xl9gYEB0y7PeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcqOjzqoq2oAZZDmeefWBmDLx4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTU0ZjNmN2ItMzVjYy0z NTkyLTliOGItZjc5NjNiYTcwOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS+8Uan6qGK4zmH6kvQhJ9ldQ5YPpodNubeQSeyo+E3KmpoZhVWH6LE 8/UyLCySwHEGSZUL7kbfUEIJsIe7ayR7kXqCM1UQ9qbC1HDLwU9fg58asPfCgAed 5w3Uo2t4DsWF9tboty9XM4BL5tkF79vmu8YCC99Ipozm55fpToVRk8xX1c4NuoHZ A0gah+iLEQV7jGUpEC4XCySN+d6ahGGVhrzrp56m5I/SjSRaxyOH3RhSQRHeMzyM W6cGINUDV+Y5AQqUd4av0kTBRqF9X/8D4EctLqJ6aMCWPYIrAQgsMioF645HJ5fH Cv9XUl+Z0EE46/MKy5U2oHuLTCq9+jU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:34 2025 by rpki-client