$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa File: b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa (raw, json) Hash identifier: s/PaC6p/0juUq8O1Gd4L7LVqJdHI6DU3Wd3tyRctj8c= Subject key identifier: EA:40:B7:6B:70:33:5D:AC:22:8E:6F:E1:02:2F:CE:53:CE:AD:5B:FA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA13089019A06D1AA64AA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:30:89:01:9a:06:d1:aa:64:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=82af8c89-ad60-4cc7-a5ff-533bc9ec8e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bc:fb:19:2d:c3:93:a4:eb:bb:9d:28:06:55: 2d:76:9b:d9:73:a3:8d:be:aa:46:47:06:3b:51:64: 17:12:9a:db:a8:5a:d9:06:34:85:0b:db:f9:80:d1: a0:24:6c:ed:9c:2a:e1:2b:8e:70:ee:d0:a7:11:26: 98:5b:cd:d0:22:74:87:86:bd:c2:86:80:21:7a:11: 65:a1:13:9c:d5:54:4d:f1:ca:b4:3f:e6:b9:65:2d: e7:f0:ab:40:a3:41:7f:4f:16:17:e4:43:eb:c7:f1: 29:21:a6:fa:bc:92:47:76:48:e5:4a:a2:0d:08:56: ed:26:b1:66:1d:1e:0c:72:ee:33:5d:05:53:8d:ec: 5f:a5:3b:2b:48:b3:94:ea:32:a7:3b:61:16:cf:27: 58:16:8e:a8:b4:5d:ee:88:2c:48:c0:60:a4:59:67: 24:41:ef:fd:35:86:21:6a:65:e6:b6:7f:86:02:a5: 48:6f:96:15:5f:00:91:1b:e7:cf:37:4c:89:75:51: a3:35:4d:de:be:77:33:05:75:8d:c7:72:42:47:b2: a2:29:bd:62:a7:5d:be:5c:7c:7f:44:8a:b3:b8:94: 11:45:20:e9:46:3e:37:c0:31:cd:53:98:14:0d:8d: a2:10:73:ea:30:83:6e:96:a4:8d:8e:71:b5:dc:14: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:40:B7:6B:70:33:5D:AC:22:8E:6F:E1:02:2F:CE:53:CE:AD:5B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b60034ad-a13e-3b84-8eed-3c4ee1fa8ed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b0:e0:a9:5e:ee:a8:be:10:f4:99:3a:b9:02:0a:97:35:f1: a9:da:5a:05:c9:08:d2:11:48:70:3b:5a:b6:e2:c6:82:a4:3e: 3b:68:08:e3:16:eb:d3:de:05:b3:2b:5e:85:08:80:83:02:ef: 3c:3f:99:e4:40:82:a6:23:2b:f7:fd:d2:5e:4a:91:ba:97:9d: 19:e2:71:33:5c:28:77:47:53:74:ca:51:9c:40:ff:85:c9:69: 50:28:90:62:30:44:da:46:04:ac:5f:fd:3d:66:da:de:91:f0: 68:30:7d:ef:96:bd:05:9c:46:28:3a:f4:1c:67:cd:42:ed:7f: 84:ef:86:3d:ac:6c:d7:d6:f9:2e:d8:82:53:47:d0:56:db:3d: cf:df:f7:ac:ba:bd:6a:f1:1c:6f:3e:91:0a:e8:74:92:88:d3: e3:f5:85:41:c8:ee:44:b6:2b:0c:94:c4:8d:a1:4e:4d:cf:2f: 32:ad:94:bd:a5:54:83:ec:51:e1:d8:1c:9d:73:f2:cc:3e:5c: 5c:0d:e1:ce:1a:24:4b:bd:13:e2:35:d7:b2:bd:78:57:cf:c6: ee:d5:76:12:47:5b:2c:fd:07:2b:ef:f7:1b:c2:00:08:a6:c2: b7:54:e5:f0:58:a1:5b:19:fe:2f:d2:72:28:f7:ba:f3:0e:d8: 47:9c:5a:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoTCJAZoG0apkqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk ODJhZjhjODktYWQ2MC00Y2M3LWE1ZmYtNTMzYmM5ZWM4ZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7z7GS3Dk6Tru50oBlUtdpvZc6ONvqpGRwY7 UWQXEprbqFrZBjSFC9v5gNGgJGztnCrhK45w7tCnESaYW83QInSHhr3ChoAhehFl oROc1VRN8cq0P+a5ZS3n8KtAo0F/TxYX5EPrx/EpIab6vJJHdkjlSqINCFbtJrFm HR4Mcu4zXQVTjexfpTsrSLOU6jKnO2EWzydYFo6otF3uiCxIwGCkWWckQe/9NYYh amXmtn+GAqVIb5YVXwCRG+fPN0yJdVGjNU3evnczBXWNx3JCR7KiKb1ip12+XHx/ RIqzuJQRRSDpRj43wDHNU5gUDY2iEHPqMINulqSNjnG13BTiSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpAt2twM12sIo5v4QIvzlPOrVv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjYwMDM0YWQtYTEzZS0z Yjg0LThlZWQtM2M0ZWUxZmE4ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+w4Kle7qi+EPSZOrkCCpc18anaWgXJCNIRSHA7WrbixoKkPjtoCOMW 69PeBbMrXoUIgIMC7zw/meRAgqYjK/f90l5KkbqXnRnicTNcKHdHU3TKUZxA/4XJ aVAokGIwRNpGBKxf/T1m2t6R8Ggwfe+WvQWcRig69BxnzULtf4Tvhj2sbNfW+S7Y glNH0FbbPc/f96y6vWrxHG8+kQrodJKI0+P1hUHI7kS2KwyUxI2hTk3PLzKtlL2l VIPsUeHYHJ1z8sw+XFwN4c4aJEu9E+I117K9eFfPxu7VdhJHWyz9Byvv9xvCAAim wrdU5fBYoVsZ/i/Scij3uvMO2EecWjs= -----END CERTIFICATE-----Generated at Sat Apr 26 21:47:19 2025 by rpki-client