$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa File: e5178a4c-dbdb-35df-8402-ea056b4cb828.roa (raw, json) Hash identifier: K30eUJDFp24D8Iu2iktxT+FNywZGdPbn17ocb8mMr10= Subject key identifier: B6:30:15:4F:0C:F4:5C:FF:7A:14:29:38:EF:B2:45:88:CC:3F:6A:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2D7D5EF005E0690A0700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2d:7d:5e:f0:05:e0:69:0a:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=447f1a29-9c46-4da6-abad-ab4d3532832e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:68:48:82:57:b0:d2:74:d7:76:7d:e4:62:50: 20:95:ee:45:ff:6f:36:f3:61:aa:8c:9c:06:05:e6: 02:7f:2d:c1:11:d9:43:11:53:50:1d:01:50:1e:61: 2f:b9:87:e3:fc:34:b7:34:09:54:5f:80:e1:1e:d6: 15:9b:07:9b:a4:e1:f4:46:a1:78:dd:a1:af:5b:5c: d2:2a:d3:35:89:cb:df:6a:54:0d:92:a3:8d:43:4c: a6:59:0c:47:43:a7:b2:76:10:87:13:46:34:fa:7d: ef:db:e0:7a:34:ec:5c:64:dd:34:6c:f4:81:59:0a: 6b:39:53:ab:9b:8b:b3:9a:9f:66:dc:99:90:b9:9d: 77:38:af:fd:cc:32:72:62:01:9f:c6:ea:6e:e2:de: e8:52:80:3a:c4:33:6f:bd:06:99:f0:13:ab:9b:c3: 2f:3b:8a:b7:e4:be:59:c0:06:38:b2:56:9c:bb:71: 91:0d:64:4f:12:ca:11:0b:05:83:34:7a:3f:42:9e: 7b:1d:dd:09:ce:70:b3:c4:16:6a:c3:23:d3:ac:8b: 74:cd:f4:53:24:b9:5a:d7:bf:ac:7c:35:8c:76:ec: 43:9c:86:d4:5d:a1:ef:4e:43:28:f2:3d:5b:68:08: 43:61:f0:4b:4f:c8:89:3d:8e:df:46:14:da:19:8c: 6d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:30:15:4F:0C:F4:5C:FF:7A:14:29:38:EF:B2:45:88:CC:3F:6A:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:23:86:eb:4e:c7:c7:04:2d:48:fe:99:ff:0d:ce:94:c3:c6: 19:6c:d5:c5:c4:c8:45:cc:62:8a:61:67:52:2c:73:e7:15:dd: 48:2b:42:ae:c9:dc:24:d3:4e:06:75:dc:95:e3:8a:ff:e7:26: a1:83:78:e3:37:13:1b:04:94:5f:a4:69:7b:88:2d:b2:69:3f: 38:94:6a:fa:42:73:b1:da:c4:d5:3a:69:0a:14:cc:9a:e0:bc: 6e:a5:83:3a:f6:2c:69:63:fd:22:9a:4c:f6:51:77:02:50:27: d9:25:42:46:57:72:9e:6c:61:6c:d4:d0:69:2e:e6:18:47:95: cc:84:03:0f:a9:81:aa:5f:24:10:90:0f:be:c8:07:7c:a0:7d: b1:48:b4:aa:26:07:2d:75:60:d6:68:94:1f:79:d8:58:b4:25: 80:98:f7:7b:05:a6:a7:77:a9:fb:3f:4a:6c:c3:42:19:21:b9: 4f:ba:6e:70:ed:de:16:03:09:ae:f9:2f:c9:ec:8e:eb:ad:02: e1:e7:34:87:23:57:2d:1e:59:3a:23:b9:6f:84:01:68:c0:36: 9a:7b:b5:c6:ea:47:d0:f5:c3:10:0d:a9:70:18:e7:72:2d:6f: b4:a4:a0:41:3f:e6:f4:a2:fc:bd:58:90:8b:99:78:7b:ba:ee: fb:d2:01:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i19XvAF4GkKBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NDQ3ZjFhMjktOWM0Ni00ZGE2LWFiYWQtYWI0ZDM1MzI4MzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GhIglew0nTXdn3kYlAgle5F/28282GqjJwG BeYCfy3BEdlDEVNQHQFQHmEvuYfj/DS3NAlUX4DhHtYVmwebpOH0RqF43aGvW1zS KtM1icvfalQNkqONQ0ymWQxHQ6eydhCHE0Y0+n3v2+B6NOxcZN00bPSBWQprOVOr m4uzmp9m3JmQuZ13OK/9zDJyYgGfxupu4t7oUoA6xDNvvQaZ8BOrm8MvO4q35L5Z wAY4slacu3GRDWRPEsoRCwWDNHo/Qp57Hd0JznCzxBZqwyPTrIt0zfRTJLla17+s fDWMduxDnIbUXaHvTkMo8j1baAhDYfBLT8iJPY7fRhTaGYxtoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYwFU8M9Fz/ehQpOO+yRYjMP2oYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTUxNzhhNGMtZGJkYi0z NWRmLTg0MDItZWEwNTZiNGNiODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYjhutOx8cELUj+mf8NzpTDxhls1cXEyEXMYophZ1Isc+cV3UgrQq7J 3CTTTgZ13JXjiv/nJqGDeOM3ExsElF+kaXuILbJpPziUavpCc7HaxNU6aQoUzJrg vG6lgzr2LGlj/SKaTPZRdwJQJ9klQkZXcp5sYWzU0Gku5hhHlcyEAw+pgapfJBCQ D77IB3ygfbFItKomBy11YNZolB952Fi0JYCY93sFpqd3qfs/SmzDQhkhuU+6bnDt 3hYDCa75L8nsjuutAuHnNIcjVy0eWTojuW+EAWjANpp7tcbqR9D1wxANqXAY53It b7SkoEE/5vSi/L1YkIuZeHu67vvSAcA= -----END CERTIFICATE-----Generated at Mon Jun 16 00:04:53 2025 by rpki-client