$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24e5aa84-4bc4-32d3-a298-7375942417e0.roa File: 24e5aa84-4bc4-32d3-a298-7375942417e0.roa (raw, json) Hash identifier: iaPD9J5lR3SA9oITG+INWqgm1XPx4uka6kZpvqZEdt4= Subject key identifier: D2:A9:D9:A4:5F:84:98:ED:D3:FB:91:39:EE:82:56:5A:AD:B2:8F:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5AF49A8EBE7948746C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24e5aa84-4bc4-32d3-a298-7375942417e0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5a:f4:9a:8e:be:79:48:74:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6da6093e-a14d-450e-b9b3-79874e33f386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:bd:fa:59:20:52:49:78:3a:6e:fb:9c:2c: 60:65:5d:b1:f1:ef:38:28:16:7c:33:20:8f:e1:cc: 87:9d:19:5a:c5:81:c2:0f:07:86:30:7c:29:c1:f5: d2:16:27:7e:aa:17:55:f0:a4:bd:b5:a5:99:af:1f: ed:fe:8a:8e:ca:68:eb:23:a5:2c:3b:8d:7a:05:a7: fa:1a:ab:cc:0d:09:58:60:ff:4f:fe:b7:e7:55:55: dd:de:e7:2f:db:94:cd:e6:69:bd:03:94:f7:e1:8a: 89:52:61:94:ef:66:14:72:20:c8:6b:11:f8:e5:a9: 53:53:22:d1:68:5f:3e:b4:b1:4f:7a:66:b9:9e:a0: 46:d1:45:2c:8b:42:f4:5f:43:56:80:04:e1:1a:5e: ec:7b:1a:b9:95:e6:01:49:a6:cd:75:86:b6:f4:81: 6d:1f:c4:ab:26:76:ff:e4:f3:f7:8b:b1:c2:d0:77: c9:94:bb:47:51:2d:ec:fc:19:5e:26:77:8a:9e:80: a1:68:32:10:4a:e6:cd:08:67:68:a9:b2:da:1b:bf: 18:4b:fe:40:c9:9d:e7:27:ef:75:c4:db:8e:09:db: 6c:8d:63:b5:1e:a8:db:41:88:89:c7:3f:68:a2:ec: c1:b5:39:3d:fc:ce:a2:55:d2:dd:71:b1:52:f0:91: 83:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A9:D9:A4:5F:84:98:ED:D3:FB:91:39:EE:82:56:5A:AD:B2:8F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24e5aa84-4bc4-32d3-a298-7375942417e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:34:15:fd:f5:ba:5b:ea:98:69:52:48:bc:99:74:4e:69:9b: b3:74:68:07:9e:5b:05:4c:54:4a:78:da:0f:4c:25:d0:9c:5a: 76:94:f1:3a:73:91:be:b4:4e:37:9b:a3:2b:38:ff:4e:4b:e2: 13:93:d2:c5:db:a8:cd:45:bd:1b:51:f1:f1:de:50:28:eb:74: 39:4d:4f:3f:01:a7:4f:18:85:f9:ae:e3:35:8b:ad:54:b4:29: 3c:57:6e:5e:53:c9:64:42:7f:50:55:69:8c:81:fe:2d:fe:fd: dc:ac:f9:5c:fb:38:6e:33:6d:38:0c:1e:92:64:73:dd:4e:88: b9:5c:5b:11:91:dd:f4:32:0a:da:50:03:b2:7e:4e:d5:cb:cd: 85:5d:13:24:47:35:fa:b7:3b:c2:f7:6a:4a:c5:16:fb:d7:8d: ed:9c:7f:29:e2:e0:43:23:64:5a:af:50:41:34:3c:83:73:bf: f9:cf:54:61:cc:81:bf:4c:6f:83:e1:6f:ef:f7:d0:65:f1:e0: a1:8d:92:9a:83:3d:dc:3e:b0:4a:1e:56:6b:31:a0:5b:54:37: b1:ba:e5:1a:22:4a:da:dd:e5:f2:d6:ba:4a:37:05:e2:4a:12: be:e5:40:9c:03:e3:7a:ff:47:0e:d7:f2:21:3a:d8:08:99:ce: 2b:a7:3d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1r0mo6+eUh0bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmRhNjA5M2UtYTE0ZC00NTBlLWI5YjMtNzk4NzRlMzNmMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhi9+lkgUkl4Om77nCxgZV2x8e84KBZ8MyCP 4cyHnRlaxYHCDweGMHwpwfXSFid+qhdV8KS9taWZrx/t/oqOymjrI6UsO416Baf6 GqvMDQlYYP9P/rfnVVXd3ucv25TN5mm9A5T34YqJUmGU72YUciDIaxH45alTUyLR aF8+tLFPema5nqBG0UUsi0L0X0NWgAThGl7sexq5leYBSabNdYa29IFtH8SrJnb/ 5PP3i7HC0HfJlLtHUS3s/BleJneKnoChaDIQSubNCGdoqbLaG78YS/5AyZ3nJ+91 xNuOCdtsjWO1HqjbQYiJxz9oouzBtTk9/M6iVdLdcbFS8JGDyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKp2aRfhJjt0/uROe6CVlqtso8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjRlNWFhODQtNGJjNC0z MmQzLWEyOTgtNzM3NTk0MjQxN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM0Ff31ulvqmGlSSLyZdE5pm7N0aAeeWwVMVEp42g9MJdCcWnaU8Tpz kb60Tjeboys4/05L4hOT0sXbqM1FvRtR8fHeUCjrdDlNTz8Bp08Yhfmu4zWLrVS0 KTxXbl5TyWRCf1BVaYyB/i3+/dys+Vz7OG4zbTgMHpJkc91OiLlcWxGR3fQyCtpQ A7J+TtXLzYVdEyRHNfq3O8L3akrFFvvXje2cfyni4EMjZFqvUEE0PINzv/nPVGHM gb9Mb4Phb+/30GXx4KGNkpqDPdw+sEoeVmsxoFtUN7G65RoiStrd5fLWuko3BeJK Er7lQJwD43r/Rw7X8iE62AiZziunPYs= -----END CERTIFICATE-----Generated at Sun May 4 11:14:23 2025 by rpki-client