$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa File: b3713e25-419a-33c8-af5b-3cb02587140b.roa (raw, json) Hash identifier: cmBqYYHdZ79CNwKv37yQGYud3Kq4W+NFE7at85oph6M= Subject key identifier: 32:5B:55:52:25:4E:F9:20:56:8E:27:F9:33:DF:43:07:51:43:7D:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC67423126BF551306080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 11344 IP address blocks: 142.250.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c6:74:23:12:6b:f5:51:30:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a9bee618-4528-4af5-940f-28c446469706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:62:78:ad:6f:1d:26:06:9e:4d:a6:82:a7:2e: 60:be:da:f5:ef:b6:01:04:df:b9:7c:35:25:6e:c5: 4d:b1:29:ea:84:b3:aa:89:35:63:e4:78:85:d8:d6: 1d:68:15:9d:90:35:54:06:2f:4e:8c:b7:c0:7d:5a: 9e:6d:0a:92:4c:44:5f:82:f5:0f:f2:5b:f5:0d:f2: bd:94:2a:87:e6:0c:a9:65:c1:ac:1d:dd:1f:ca:7f: 80:e8:ad:be:d4:10:e1:53:22:2b:d5:5f:cc:b0:02: 35:96:8c:f7:8c:07:36:da:c3:7f:0c:13:75:06:28: 56:c1:30:b8:4f:23:d7:ec:58:1e:de:91:ee:2d:ef: 3d:14:7e:aa:dc:9a:ee:6a:58:14:93:09:bc:4e:d0: d6:38:bf:54:1e:1e:af:0e:d0:af:e1:4d:1c:04:31: 01:8a:a8:f8:f6:4e:75:bf:5f:9e:85:cb:5a:b1:b2: 32:8d:fd:59:90:b8:dc:b9:86:d8:fe:54:c1:c2:f0: 7c:89:20:7d:b6:ab:db:ff:96:21:fc:0e:13:a1:43: 8c:1b:1f:f8:0d:ee:02:83:34:4f:da:70:a5:48:19: 47:6e:b6:99:2a:f4:b8:f9:6f:08:5f:4a:a9:6a:1c: 3f:4e:5a:11:3e:c9:2a:c9:e3:70:20:ea:83:cb:e7: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5B:55:52:25:4E:F9:20:56:8E:27:F9:33:DF:43:07:51:43:7D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ce:b2:86:e1:ba:c8:12:18:35:30:66:0d:cd:15:97:d6:82: fa:9e:16:7a:e0:ab:13:9b:d9:4b:dd:00:81:8d:d3:2e:92:9a: a6:6e:bf:1f:1c:67:dc:2d:26:ba:bc:1c:51:84:76:0c:d7:6e: 66:0b:69:36:3b:bf:e7:65:d6:34:52:dc:4c:8a:29:3c:d4:b2: ae:29:5a:2b:05:c0:89:75:93:d4:0a:f8:9e:7f:c4:e1:16:da: 6e:1a:20:96:44:70:80:21:0f:f2:73:34:8b:b7:0b:63:9e:cc: b9:27:d2:9d:df:7c:5b:67:0e:40:ad:11:3f:1e:50:46:71:6d: bc:f6:d0:8c:28:3c:6f:0a:65:b8:0d:1d:08:a2:c1:75:6c:54: 0c:6c:cd:96:6b:65:1c:aa:78:ee:d1:8c:2e:f6:a5:b1:2d:2d: 5b:a4:b2:fe:85:db:90:8e:08:65:15:39:4d:cd:e5:4e:42:30: e9:0c:e4:3a:58:2f:6d:ac:48:a4:29:5c:5e:03:d6:78:a4:f1: a8:ab:ee:e7:ae:80:2f:2f:0b:1d:e8:87:4d:e9:e5:81:15:d5: 50:0d:fb:b0:7a:60:00:ae:7e:19:8d:0f:65:5c:75:f7:b1:71: 59:ba:ea:fe:74:ed:29:94:ef:c6:d2:92:ae:21:1a:1f:79:4e: fb:59:55:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusZ0IxJr9VEwYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTliZWU2MTgtNDUyOC00YWY1LTk0MGYtMjhjNDQ2NDY5NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WJ4rW8dJgaeTaaCpy5gvtr177YBBN+5fDUl bsVNsSnqhLOqiTVj5HiF2NYdaBWdkDVUBi9OjLfAfVqebQqSTERfgvUP8lv1DfK9 lCqH5gypZcGsHd0fyn+A6K2+1BDhUyIr1V/MsAI1loz3jAc22sN/DBN1BihWwTC4 TyPX7Fge3pHuLe89FH6q3JrualgUkwm8TtDWOL9UHh6vDtCv4U0cBDEBiqj49k51 v1+ehctasbIyjf1ZkLjcuYbY/lTBwvB8iSB9tqvb/5Yh/A4ToUOMGx/4De4CgzRP 2nClSBlHbraZKvS4+W8IX0qpahw/TloRPskqyeNwIOqDy+eyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJbVVIlTvkgVo4n+TPfQwdRQ332MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjM3MTNlMjUtNDE5YS0z M2M4LWFmNWItM2NiMDI1ODcxNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjOsobhusgSGDUwZg3NFZfWgvqeFnrgqxOb2UvdAIGN0y6SmqZuvx8c Z9wtJrq8HFGEdgzXbmYLaTY7v+dl1jRS3EyKKTzUsq4pWisFwIl1k9QK+J5/xOEW 2m4aIJZEcIAhD/JzNIu3C2OezLkn0p3ffFtnDkCtET8eUEZxbbz20IwoPG8KZbgN HQiiwXVsVAxszZZrZRyqeO7RjC72pbEtLVuksv6F25COCGUVOU3N5U5CMOkM5DpY L22sSKQpXF4D1nik8air7ueugC8vCx3oh03p5YEV1VAN+7B6YACufhmND2Vcdfex cVm66v507SmU78bSkq4hGh95TvtZVb0= -----END CERTIFICATE-----Generated at Sun Apr 27 01:04:17 2025 by rpki-client