$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa File: bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa (raw, json) Hash identifier: J5v+4iKoygvlQPu8lGDja6eSB+Ol/ynLvHMIp+qRm2g= Subject key identifier: 9D:D0:D4:1C:29:A5:DA:F1:C7:F3:62:06:9B:6A:08:C3:63:FE:41:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC93D87F4FB8A510B29C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c9:3d:87:f4:fb:8a:51:0b:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7babc620-28a9-4a78-87b7-f50bf7286383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:b5:a8:69:07:c4:bf:89:52:39:98:88:98: f8:f7:f5:91:d5:2e:61:5e:85:f0:68:eb:d1:9e:a6: a4:59:68:5f:e2:14:82:15:5d:34:1c:2b:c9:62:c7: 2f:61:3d:92:dd:40:77:55:97:c4:d9:ee:f8:c4:73: 93:b7:67:f2:9b:8a:13:0e:1f:6a:a8:c7:1e:7c:77: 2d:86:b8:da:d3:88:5a:71:a0:de:80:d8:dd:ca:3b: 06:d4:47:7e:3d:26:5b:80:fa:6e:d9:0f:9a:08:70: 9a:c3:2c:6d:77:ec:5d:50:b4:c6:1d:68:64:40:72: 24:15:39:dd:5b:80:61:03:c9:7b:32:62:b8:ab:29: 6f:89:10:48:fd:94:3f:44:a0:6a:0b:a9:82:41:27: 1b:fe:74:72:62:8e:68:4a:fa:79:39:9e:5d:1c:ab: c2:d1:b9:e4:60:89:5e:78:38:f6:0c:a6:5e:b2:16: 62:b1:d4:c7:49:20:59:12:a0:b3:7c:59:75:92:c0: 47:52:ac:7a:8d:f0:76:88:a4:5b:2f:32:a8:bc:5e: 47:3d:5e:89:92:3c:f2:35:7b:50:20:42:6f:d5:d2: c0:d2:ec:b7:4d:73:74:8a:7b:32:9c:72:e7:86:8a: 92:00:33:6c:f4:15:02:7c:07:cf:27:e7:8e:9c:dd: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D0:D4:1C:29:A5:DA:F1:C7:F3:62:06:9B:6A:08:C3:63:FE:41:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e0:a0:59:01:6a:ad:56:d7:d5:87:81:03:3e:f9:0a:d8:f9: b8:fe:80:d7:12:59:a9:a8:0a:98:23:30:ec:56:94:e4:72:ec: 78:b0:5a:fa:77:95:31:07:da:26:60:ad:0d:bb:52:d7:43:90: 2b:bd:2e:11:d9:e9:0e:5f:e4:e7:f3:59:08:4a:60:51:f2:fe: 7e:65:be:47:95:dc:3e:c4:1b:b3:a7:7c:22:d1:70:11:c0:b1: fc:13:46:02:d0:7b:28:6e:57:b3:a9:57:2f:51:42:85:71:13: 86:e8:fc:2a:70:9a:2a:ce:91:96:1b:4c:26:2e:3b:8d:2c:d4: 55:93:c4:d4:32:2d:89:bf:35:db:62:3c:b7:44:14:6b:a1:e0: ff:d6:29:57:22:e7:cf:54:f1:56:b5:e1:79:fb:13:e5:d5:3b: 25:a3:31:dc:b4:60:1c:01:2d:67:70:86:71:6c:a5:15:8b:d0: 6d:8a:fb:25:10:7d:5e:7c:fa:aa:0f:6c:dd:18:98:8f:13:a4: 6d:be:a5:b0:29:6e:79:68:71:91:92:46:de:6c:ce:3f:61:cd: a9:5e:49:00:e8:9f:d6:23:e6:29:cb:b5:63:32:92:42:34:9e: c0:61:b8:89:42:d0:cf:9d:21:31:00:1d:c3:a0:81:61:6f:46: c9:a5:03:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusk9h/T7ilELKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2JhYmM2MjAtMjhhOS00YTc4LTg3YjctZjUwYmY3Mjg2MzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQK1qGkHxL+JUjmYiJj49/WR1S5hXoXwaOvR nqakWWhf4hSCFV00HCvJYscvYT2S3UB3VZfE2e74xHOTt2fym4oTDh9qqMcefHct hrja04hacaDegNjdyjsG1Ed+PSZbgPpu2Q+aCHCawyxtd+xdULTGHWhkQHIkFTnd W4BhA8l7MmK4qylviRBI/ZQ/RKBqC6mCQScb/nRyYo5oSvp5OZ5dHKvC0bnkYIle eDj2DKZeshZisdTHSSBZEqCzfFl1ksBHUqx6jfB2iKRbLzKovF5HPV6JkjzyNXtQ IEJv1dLA0uy3TXN0insynHLnhoqSADNs9BUCfAfPJ+eOnN0i0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3Q1Bwppdrxx/NiBptqCMNj/kGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmY0ZjQ2ZDEtYWQ2YS0z MDdjLWFkYmItZWQ4ZmJhZTliZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHgoFkBaq1W19WHgQM++QrY+bj+gNcSWamoCpgjMOxWlORy7HiwWvp3 lTEH2iZgrQ27UtdDkCu9LhHZ6Q5f5OfzWQhKYFHy/n5lvkeV3D7EG7OnfCLRcBHA sfwTRgLQeyhuV7OpVy9RQoVxE4bo/CpwmirOkZYbTCYuO40s1FWTxNQyLYm/Ndti PLdEFGuh4P/WKVci589U8Va14Xn7E+XVOyWjMdy0YBwBLWdwhnFspRWL0G2K+yUQ fV58+qoPbN0YmI8TpG2+pbApbnlocZGSRt5szj9hzaleSQDon9Yj5inLtWMykkI0 nsBhuIlC0M+dITEAHcOggWFvRsmlA3A= -----END CERTIFICATE-----Generated at Sun Apr 27 08:48:08 2025 by rpki-client