$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d05495e1-37ad-3544-920d-93adc921c846.roa File: d05495e1-37ad-3544-920d-93adc921c846.roa (raw, json) Hash identifier: nZfuE/PKtLlRNZ0yCqGR+XkbsM19j91w7pDy0S6zF1E= Subject key identifier: 80:7E:21:58:06:CC:FF:9C:0E:34:C9:2C:51:4E:D2:CB:7C:F2:8D:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA3871A1A6A2B91A5DBF40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d05495e1-37ad-3544-920d-93adc921c846.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:38:71:a1:a6:a2:b9:1a:5d:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=f486b550-9950-473e-b617-48bc502a0132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3b:22:e5:4f:d6:d8:5c:2f:e0:7a:bf:b1:cd: 65:db:06:6a:df:36:06:95:d9:07:45:1a:4a:2e:17: 0b:45:de:10:4d:29:00:ce:4c:98:49:5b:86:62:3b: 49:07:a8:d6:81:0f:5b:4e:d2:01:b7:a6:cf:3a:99: 1e:b9:d0:4f:97:01:e3:34:09:cb:c5:3b:3a:e1:f8: a9:9d:cc:f8:8d:bd:5d:bc:a3:13:ab:16:1e:47:3c: b4:e9:9d:31:8e:c6:95:8d:ff:b2:b9:43:7c:05:b6: dd:2e:08:2f:50:c8:5c:53:cb:bf:7e:56:e1:5e:1e: 3a:31:56:77:1a:e4:67:01:03:3a:e4:96:ae:7d:43: 01:0e:4c:d5:b0:ac:c2:dc:8f:9a:4f:73:cd:84:cd: 0f:4a:27:56:01:c8:4d:4d:59:25:a1:0d:53:ea:e3: 8f:9c:ae:c1:e5:96:c2:e7:4e:62:e7:98:03:db:75: cb:e2:cf:d5:d0:b4:13:10:d8:d4:69:60:c0:1c:5a: 83:5e:7f:00:63:07:75:5f:54:00:fa:98:c8:e6:3b: a6:4b:f9:72:f9:e9:6b:e2:c4:98:23:3a:37:c5:e3: e4:b8:fa:ca:18:9f:98:d6:00:2a:ed:a6:6a:d0:8d: d2:4d:b2:b6:38:e6:65:a1:7d:46:53:70:c0:43:5d: a4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7E:21:58:06:CC:FF:9C:0E:34:C9:2C:51:4E:D2:CB:7C:F2:8D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d05495e1-37ad-3544-920d-93adc921c846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:15:bf:1b:a6:47:b9:4e:e8:27:22:fd:82:da:16:73:01:14: 17:f0:89:9b:e5:56:fb:b0:f2:96:ca:34:8a:ec:b6:fc:55:dd: c5:ac:9c:cf:38:5c:c1:3a:c7:c5:86:7f:1f:49:ad:01:34:45: d0:9a:3e:9b:97:56:bd:67:a2:2a:32:ca:27:dc:a5:0f:3d:fa: 80:92:a1:87:97:56:67:fe:fa:69:50:5f:9c:67:31:b1:42:04: 13:ff:d5:44:75:0c:05:43:02:97:00:90:cd:b6:85:d4:f6:b2: c8:7c:6f:65:0b:a9:42:73:e8:4f:24:dd:81:c4:39:ed:17:9f: 2b:25:47:e0:76:68:7c:48:66:b8:c3:7a:95:f4:6c:0c:10:c0: 24:6e:d1:3b:aa:98:c5:7a:8d:3b:b7:1c:42:57:81:25:69:44: 79:00:fa:77:d2:dd:d4:41:5a:23:2b:fc:92:19:c7:54:b7:f3: 56:b9:0f:56:ff:23:c1:5a:de:ed:0d:b9:93:86:00:bd:eb:3d: d8:e6:29:3f:26:e2:92:ca:e1:e6:ba:c5:ec:4f:ac:81:9e:4e: f7:0f:ce:a1:14:50:bf:71:4b:30:4e:f3:78:b3:1f:0a:34:8f: 65:b8:2a:0b:63:c8:3f:e5:ea:12:fa:f1:df:34:fa:55:97:36: 7a:7d:0f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jhxoaaiuRpdv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZjQ4NmI1NTAtOTk1MC00NzNlLWI2MTctNDhiYzUwMmEwMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjsi5U/W2Fwv4Hq/sc1l2wZq3zYGldkHRRpK LhcLRd4QTSkAzkyYSVuGYjtJB6jWgQ9bTtIBt6bPOpkeudBPlwHjNAnLxTs64fip ncz4jb1dvKMTqxYeRzy06Z0xjsaVjf+yuUN8BbbdLggvUMhcU8u/flbhXh46MVZ3 GuRnAQM65JaufUMBDkzVsKzC3I+aT3PNhM0PSidWAchNTVkloQ1T6uOPnK7B5ZbC 505i55gD23XL4s/V0LQTENjUaWDAHFqDXn8AYwd1X1QA+pjI5jumS/ly+elr4sSY Izo3xePkuPrKGJ+Y1gAq7aZq0I3STbK2OOZloX1GU3DAQ12kCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB+IVgGzP+cDjTJLFFO0st88o2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA1NDk1ZTEtMzdhZC0z NTQ0LTkyMGQtOTNhZGM5MjFjODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQVvxumR7lO6Cci/YLaFnMBFBfwiZvlVvuw8pbKNIrstvxV3cWsnM84 XME6x8WGfx9JrQE0RdCaPpuXVr1noioyyifcpQ89+oCSoYeXVmf++mlQX5xnMbFC BBP/1UR1DAVDApcAkM22hdT2ssh8b2ULqUJz6E8k3YHEOe0XnyslR+B2aHxIZrjD epX0bAwQwCRu0TuqmMV6jTu3HEJXgSVpRHkA+nfS3dRBWiMr/JIZx1S381a5D1b/ I8Fa3u0NuZOGAL3rPdjmKT8m4pLK4ea6xexPrIGeTvcPzqEUUL9xSzBO83izHwo0 j2W4KgtjyD/l6hL68d80+lWXNnp9D6c= -----END CERTIFICATE-----Generated at Mon Jun 16 04:18:56 2025 by rpki-client