$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7b5371a-d045-3315-a2a1-56e23167a78e.roa File: e7b5371a-d045-3315-a2a1-56e23167a78e.roa (raw, json) Hash identifier: jMrw7pNwkBKwwkXqmw/tY7DskP8Q2WdN5A9cjqZT9NA= Subject key identifier: A4:DA:D3:DE:D3:20:C0:37:BF:29:FC:CB:B9:D2:E0:5C:10:9D:86:39 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB656158BA426E4EF4CE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7b5371a-d045-3315-a2a1-56e23167a78e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:65:61:58:ba:42:6e:4e:f4:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b6aafc20-dd0c-43f1-93c4-250609eff5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:a8:4a:fb:ff:f0:53:8c:79:c4:c5:3b:33: 5d:07:e6:c0:8a:0f:07:d2:bd:ef:47:95:0b:2e:8f: 5b:c3:57:44:d2:48:61:7f:76:5e:f2:bc:b1:91:c2: a0:0a:56:08:b9:d3:39:13:f8:84:f3:88:49:aa:62: be:7f:44:4a:ca:8a:04:8c:c4:f5:d1:07:c4:65:85: ba:6e:14:9c:93:ef:4f:e8:23:3a:31:7a:c7:be:83: d9:61:ef:74:ab:7d:d5:26:21:62:b7:ba:a5:cb:61: 6b:9b:28:58:d9:a1:fd:e9:84:78:08:72:42:a0:27: bf:60:52:2e:54:4c:39:0a:63:95:bf:71:ae:b8:f6: 48:a1:64:fd:d0:df:3c:0a:0e:fa:07:2c:77:58:62: ae:34:bf:ed:2c:1a:d8:75:b5:eb:c0:95:84:5c:c0: bd:09:9f:fa:7d:ef:f9:09:50:18:5b:df:c6:cf:e8: 9f:84:3e:a8:bd:5b:db:ab:7f:3f:3a:66:60:a3:e0: ef:eb:d3:35:cd:f5:1e:43:9e:6f:06:3a:61:7b:a8: 9f:fd:a6:76:49:4d:f9:c7:4e:d2:07:bd:db:d0:0a: 76:5e:d0:6f:76:31:0f:48:41:35:f0:a2:21:f2:32: 76:bb:77:57:e3:d1:18:42:bb:dd:62:e3:97:f5:fc: 9e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DA:D3:DE:D3:20:C0:37:BF:29:FC:CB:B9:D2:E0:5C:10:9D:86:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7b5371a-d045-3315-a2a1-56e23167a78e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:19:89:6d:24:e5:e6:ac:1a:d4:8c:ba:30:4a:53:4c:cc:b2: 0a:28:52:98:68:2f:d8:e5:fc:9b:d7:21:93:96:cf:b0:10:59: 6e:e3:b0:b8:1c:ba:c3:10:cd:1c:45:f1:34:2f:ee:8c:d0:63: 93:49:30:f7:34:b8:61:6a:a3:48:b3:b2:15:29:6b:d2:dc:6f: 39:93:c7:9a:82:99:6f:35:35:c9:16:d1:a2:9d:6c:6c:7f:17: 91:38:07:00:ef:0c:7e:b0:ee:41:c8:c9:42:cc:60:ad:e4:81: f6:bb:51:79:bd:a4:90:d6:2b:bb:50:54:e3:49:7e:9a:d8:fb: 53:12:db:a8:7b:65:75:70:9b:9b:e1:8d:fa:28:d7:94:fa:c3: a1:f6:e1:7f:26:f0:89:5c:ab:38:32:d7:cc:e0:c1:3c:31:37: ed:b7:a1:8a:d1:7c:d8:54:13:a8:ae:f1:1b:2c:89:9b:85:20: 59:96:4f:29:69:ee:3a:9b:e5:42:ba:96:da:c7:78:9b:02:92: ad:ff:76:a9:f1:5d:95:ba:ba:18:c1:54:3f:c2:16:d6:79:85: 85:9f:d1:23:47:97:85:d7:ea:9b:94:e1:b5:9c:80:12:da:b4: 0f:e4:b9:36:63:f8:eb:f6:92:f4:87:9c:4f:bb:a1:6b:2f:9d: 77:64:83:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2VhWLpCbk70zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjZhYWZjMjAtZGQwYy00M2YxLTkzYzQtMjUwNjA5ZWZmNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD+oSvv/8FOMecTFOzNdB+bAig8H0r3vR5UL Lo9bw1dE0khhf3Ze8ryxkcKgClYIudM5E/iE84hJqmK+f0RKyooEjMT10QfEZYW6 bhSck+9P6CM6MXrHvoPZYe90q33VJiFit7qly2FrmyhY2aH96YR4CHJCoCe/YFIu VEw5CmOVv3GuuPZIoWT90N88Cg76Byx3WGKuNL/tLBrYdbXrwJWEXMC9CZ/6fe/5 CVAYW9/Gz+ifhD6ovVvbq38/OmZgo+Dv69M1zfUeQ55vBjphe6if/aZ2SU35x07S B73b0Ap2XtBvdjEPSEE18KIh8jJ2u3dX49EYQrvdYuOX9fyeWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTa097TIMA3vyn8y7nS4FwQnYY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdiNTM3MWEtZDA0NS0z MzE1LWEyYTEtNTZlMjMxNjdhNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvupMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcZiW0k5easGtSMujBKU0zMsgooUphoL9jl/JvXIZOWz7AQWW7jsLgc usMQzRxF8TQv7ozQY5NJMPc0uGFqo0izshUpa9LcbzmTx5qCmW81NckW0aKdbGx/ F5E4BwDvDH6w7kHIyULMYK3kgfa7UXm9pJDWK7tQVONJfprY+1MS26h7ZXVwm5vh jfoo15T6w6H24X8m8Ilcqzgy18zgwTwxN+23oYrRfNhUE6iu8RssiZuFIFmWTylp 7jqb5UK6ltrHeJsCkq3/dqnxXZW6uhjBVD/CFtZ5hYWf0SNHl4XX6puU4bWcgBLa tA/kuTZj+Ov2kvSHnE+7oWsvnXdkg6c= -----END CERTIFICATE-----Generated at Sat Apr 26 20:55:10 2025 by rpki-client