$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa File: fcffca7c-1a11-39cf-b450-a1243d10e54e.roa (raw, json) Hash identifier: snCh3umru6/FPiF4J7Xp4+K8eUvlE+650lTC1oWGhF8= Subject key identifier: 4A:B4:83:6D:87:73:DD:79:3F:7F:18:6B:F4:9F:B0:89:CE:9E:EF:A4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848DEA1251B4DF8E465336A9300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 15169 IP address blocks: 142.250.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:25:1b:4d:f8:e4:65:33:6a:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=5fa00052-d58e-4d54-8ef8-f2709fd73976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:8b:4c:66:fb:69:56:78:85:db:ec:a0:6c: 31:b1:fd:e5:f2:79:56:96:46:89:98:61:7a:75:95: e1:32:94:b2:92:8a:33:04:89:1e:8c:65:89:88:2f: 5a:dc:0b:2e:05:f5:ff:a7:33:00:75:96:58:98:93: 38:58:91:41:8b:ed:e4:e8:2b:da:84:2a:6d:f9:9b: 9e:72:63:1f:87:be:af:e0:d6:bc:87:90:53:20:76: a5:2e:7d:95:7f:a0:2f:2d:3a:e4:39:78:a5:2a:17: a3:4e:46:4e:d3:4c:67:c4:9a:ca:1f:da:70:41:3b: f0:f4:6f:89:0c:0c:66:7f:9f:95:65:05:c2:f5:3b: 50:96:ab:36:cd:87:20:be:49:de:85:99:ec:7c:3e: 2d:f7:e2:3a:04:eb:93:08:66:39:35:34:82:2f:bf: 49:87:46:64:ce:f3:cc:46:b9:5c:e7:bb:97:76:bd: 72:84:3a:f7:36:53:2e:a0:50:62:8f:bb:8f:c9:7a: 0c:20:da:26:e3:e0:54:ed:ec:88:84:71:19:0c:5d: 22:6f:0c:74:18:60:97:e1:ae:60:da:94:af:80:96: 08:94:12:32:4c:af:1f:b0:7f:ce:d6:e6:7e:ba:87: 23:9e:5f:6a:2c:5a:ca:74:71:a5:9d:f3:59:9a:51: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B4:83:6D:87:73:DD:79:3F:7F:18:6B:F4:9F:B0:89:CE:9E:EF:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:29:e3:54:5b:f2:dd:02:62:1b:18:dd:23:6f:8d:16:78:f2: df:cc:06:db:0a:3e:43:66:92:b3:44:c7:37:cd:e9:3b:ab:63: 92:9b:9a:ef:ef:5d:1d:21:0c:ef:a5:c9:0f:ec:fa:4e:6e:a5: 2b:f9:a1:d3:5a:a5:75:3e:0a:fa:dd:e8:a5:bd:e8:e5:8b:82: 4f:b3:37:6d:34:41:bd:41:2c:d8:9e:7e:7b:2f:61:07:6d:af: 6d:51:55:11:ac:73:02:58:42:4a:5d:bc:d3:0e:41:8d:7c:94: 4a:e8:b5:37:9c:d8:55:08:c0:57:52:f0:7e:5d:a2:67:71:6d: af:c8:78:f8:0b:54:13:23:98:02:c1:e0:b9:ca:9e:b0:9a:f6: 3f:9c:37:8f:e4:8e:9b:c6:e2:6c:8c:cb:65:c6:d3:f1:d3:8b: 92:05:7d:29:60:37:57:79:b5:0a:c5:a4:fb:19:83:01:57:95: 00:52:8e:f0:e5:a2:d2:15:3d:cb:7c:d7:ad:08:b1:83:c0:54: 9b:13:55:5f:4c:23:d2:58:3e:21:ad:ad:65:51:99:e9:cc:92: d7:2c:06:55:dc:91:3d:f8:3b:05:b8:b2:e9:75:74:7f:d5:53: a5:d5:5c:a2:21:aa:d4:38:3a:6a:67:79:dc:e1:1f:64:e5:07: d7:9c:e0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSUbTfjkZTNqkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk NWZhMDAwNTItZDU4ZS00ZDU0LThlZjgtZjI3MDlmZDczOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1WLTGb7aVZ4hdvsoGwxsf3l8nlWlkaJmGF6 dZXhMpSykoozBIkejGWJiC9a3AsuBfX/pzMAdZZYmJM4WJFBi+3k6CvahCpt+Zue cmMfh76v4Na8h5BTIHalLn2Vf6AvLTrkOXilKhejTkZO00xnxJrKH9pwQTvw9G+J DAxmf5+VZQXC9TtQlqs2zYcgvknehZnsfD4t9+I6BOuTCGY5NTSCL79Jh0ZkzvPM Rrlc57uXdr1yhDr3NlMuoFBij7uPyXoMINom4+BU7eyIhHEZDF0ibwx0GGCX4a5g 2pSvgJYIlBIyTK8fsH/O1uZ+uocjnl9qLFrKdHGlnfNZmlHcnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEq0g22Hc915P38Ya/SfsInOnu+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmNmZmNhN2MtMWExMS0z OWNmLWI0NTAtYTEyNDNkMTBlNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADop41Rb8t0CYhsY3SNvjRZ48t/MBtsKPkNmkrNExzfN6TurY5Kbmu/v XR0hDO+lyQ/s+k5upSv5odNapXU+Cvrd6KW96OWLgk+zN200Qb1BLNiefnsvYQdt r21RVRGscwJYQkpdvNMOQY18lErotTec2FUIwFdS8H5domdxba/IePgLVBMjmALB 4LnKnrCa9j+cN4/kjpvG4myMy2XG0/HTi5IFfSlgN1d5tQrFpPsZgwFXlQBSjvDl otIVPct8160IsYPAVJsTVV9MI9JYPiGtrWVRmenMktcsBlXckT34OwW4sul1dH/V U6XVXKIhqtQ4OmpnedzhH2TlB9ec4D0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:04 2025 by rpki-client