$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa File: f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa (raw, json) Hash identifier: FQjFvtG0Ko+sj4Tdi2k655vAkRPBchHS6/TsIe9ZKLs= Subject key identifier: AE:A4:00:A2:4A:D2:9F:5B:F0:C3:52:54:87:FC:10:86:59:24:25:50 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABDBC502E1B1A8384C800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bd:bc:50:2e:1b:1a:83:84:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3d878086-bd21-46ad-8a07-5fca6b529ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:5a:80:0c:08:13:60:e7:09:f3:df:60:38: 38:26:ba:ef:8a:7f:20:b8:c9:e9:a9:13:62:c6:d7: 74:b3:d4:a4:e2:3b:bb:da:2b:a6:20:f8:f6:bc:5e: 73:67:61:07:2b:71:2c:0c:c2:66:15:4b:1d:3a:10: c3:ad:17:5b:57:db:65:4f:52:28:12:83:7e:f8:99: b6:c6:0d:91:9f:91:36:b0:5e:a9:e5:78:2c:15:f7: c7:d9:dc:cf:4d:01:eb:f3:7c:05:1d:05:a5:99:58: 08:41:43:ae:e8:bb:f3:c3:34:ea:06:91:e8:89:ee: c0:3b:7b:d5:19:47:cd:cb:b9:aa:72:3e:b1:35:45: fc:c6:c2:af:8e:1d:3e:3e:a9:e2:42:a5:1e:be:a6: 42:74:6c:9c:cf:a1:55:be:7f:d9:dd:1d:e2:fd:8f: f8:4f:30:18:19:3e:cd:f3:a6:c7:2c:3b:07:ca:27: 3c:5c:02:77:22:18:de:40:41:50:59:cc:9d:cf:b5: bf:0c:15:2a:f0:97:a5:1f:73:76:7a:6d:d6:e3:5c: 2a:01:ad:88:de:4a:5d:3c:2c:99:ad:f5:b4:85:0e: 8b:e2:9d:44:d4:bb:d7:c8:dd:bb:ac:4f:66:44:3a: ba:32:5a:54:6e:c7:a2:a3:6e:f9:83:f8:0a:d7:54: 65:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A4:00:A2:4A:D2:9F:5B:F0:C3:52:54:87:FC:10:86:59:24:25:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9a:0b:16:b4:f0:f6:3c:7d:99:41:43:9a:f4:9e:a5:58:e0: 45:d5:f4:f5:91:56:29:65:28:b0:4f:a1:9f:5f:03:0d:71:9f: 8a:3c:7b:ed:18:fc:0d:4b:97:a3:b7:cb:eb:78:58:23:65:45: 80:b9:05:5a:dc:60:cb:44:6b:5c:42:56:6e:92:a6:37:e8:52: 3f:0b:8a:39:b2:cd:ac:83:97:e4:0f:af:b2:8a:01:92:af:b0: 72:4d:bb:3b:7b:1a:46:db:ff:f0:66:18:fb:f4:25:f1:eb:30: 51:aa:ad:21:e1:03:71:fb:f5:46:b8:b8:b8:6d:02:78:b1:b0: 73:15:ee:4d:ca:46:42:43:fa:be:da:32:b9:f7:c3:3c:9f:fd: 96:10:42:78:69:bf:b2:1b:09:51:08:b4:26:1b:01:6a:60:54: 38:9f:cf:d0:f2:3a:4d:51:cd:8a:8d:bc:1a:eb:05:4a:f7:3b: 2b:0a:c6:6c:4a:c6:04:19:42:a9:5a:80:87:a2:d8:c2:5e:18: ee:8a:dc:ce:8c:15:1f:64:5f:39:db:13:52:19:e2:7d:43:9c: 35:24:47:dc:af:bc:80:bf:a7:cf:02:ff:81:0a:b9:51:0c:80: b4:7b:33:4a:bc:2d:52:da:76:74:af:0f:3d:b3:c1:33:a7:c4: 7d:5c:06:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkur28UC4bGoOEyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2Q4NzgwODYtYmQyMS00NmFkLThhMDctNWZjYTZiNTI5ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx9agAwIE2DnCfPfYDg4Jrrvin8guMnpqRNi xtd0s9Sk4ju72iumIPj2vF5zZ2EHK3EsDMJmFUsdOhDDrRdbV9tlT1IoEoN++Jm2 xg2Rn5E2sF6p5XgsFffH2dzPTQHr83wFHQWlmVgIQUOu6LvzwzTqBpHoie7AO3vV GUfNy7mqcj6xNUX8xsKvjh0+PqniQqUevqZCdGycz6FVvn/Z3R3i/Y/4TzAYGT7N 86bHLDsHyic8XAJ3IhjeQEFQWcydz7W/DBUq8JelH3N2em3W41wqAa2I3kpdPCyZ rfW0hQ6L4p1E1LvXyN27rE9mRDq6MlpUbseio275g/gK11RlWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6kAKJK0p9b8MNSVIf8EIZZJCVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjQwM2RlZTItNzBhZS0z Y2ZjLThiMzktN2VkZTU5ZjQ0N2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCaCxa08PY8fZlBQ5r0nqVY4EXV9PWRVillKLBPoZ9fAw1xn4o8e+0Y /A1Ll6O3y+t4WCNlRYC5BVrcYMtEa1xCVm6SpjfoUj8LijmyzayDl+QPr7KKAZKv sHJNuzt7Gkbb//BmGPv0JfHrMFGqrSHhA3H79Ua4uLhtAnixsHMV7k3KRkJD+r7a Mrn3wzyf/ZYQQnhpv7IbCVEItCYbAWpgVDifz9DyOk1RzYqNvBrrBUr3OysKxmxK xgQZQqlagIei2MJeGO6K3M6MFR9kXznbE1IZ4n1DnDUkR9yvvIC/p88C/4EKuVEM gLR7M0q8LVLadnSvDz2zwTOnxH1cBog= -----END CERTIFICATE-----Generated at Sun Apr 27 03:20:15 2025 by rpki-client