$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/291a6980-503a-3d70-9c3c-ec4fb58601db.roa File: 291a6980-503a-3d70-9c3c-ec4fb58601db.roa (raw, json) Hash identifier: S1gSCB0YNc6akHl8vMpdDLsTJbYFvpyrZrCjNyatcL8= Subject key identifier: 21:BF:88:F1:96:AC:37:8C:AE:E5:2F:38:C5:D6:D4:23:65:E7:10:47 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5FD73122006915DC6C88 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/291a6980-503a-3d70-9c3c-ec4fb58601db.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5f:d7:31:22:00:69:15:dc:6c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d7b61d62-e51a-44aa-ab7b-1a6f9a43e7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b2:5b:f2:6f:13:27:c5:dd:e8:62:11:3b:f2: f3:a5:b1:68:b7:42:5b:9e:20:26:92:0b:fd:a2:2f: 16:30:8d:a9:01:05:e4:64:36:12:b3:3d:ad:7b:37: 6a:7f:43:42:42:91:5e:3e:26:03:27:32:d8:fa:d6: c5:fb:f6:3c:e2:e2:13:3a:1b:ea:07:77:88:40:c8: b8:4b:29:20:cf:16:ef:62:c0:94:49:3b:8e:f3:63: 69:ec:d9:3d:fc:1e:99:bf:fa:54:6a:18:61:bb:76: d2:6a:bc:43:1a:43:37:f5:0c:f8:dc:f0:0c:42:84: 63:92:26:32:1a:31:ec:2f:82:0d:9d:c1:f9:75:c3: 20:02:a0:09:b0:aa:cf:12:ac:0c:78:ae:04:27:ed: bb:c7:e6:7c:b6:f6:ad:7b:82:28:29:be:49:09:67: 5d:73:99:9b:31:f4:11:f9:e7:30:ef:ad:c6:88:2a: 74:e8:9e:5d:8b:78:ba:35:af:a1:3b:31:8c:d6:39: f9:ff:aa:fc:ca:36:3d:8a:59:d3:18:01:27:83:4e: 0d:6b:6a:db:94:5f:75:7f:78:8a:90:e3:b7:65:bb: b1:a9:32:08:13:f0:2f:53:3b:6e:b2:38:dc:f8:51: dc:f9:ac:66:59:d0:46:79:1f:dd:5a:fa:9d:b8:0f: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BF:88:F1:96:AC:37:8C:AE:E5:2F:38:C5:D6:D4:23:65:E7:10:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/291a6980-503a-3d70-9c3c-ec4fb58601db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:54:0b:6d:54:a9:f0:86:c7:2d:26:ed:7e:db:d2:f0:f7:65: c8:85:21:01:b2:2c:05:f3:f2:6d:6e:e1:b7:45:c2:31:2b:43: 1a:4a:28:dd:ae:b4:d1:06:90:97:b0:98:69:e3:ff:56:25:fa: 04:e6:70:5f:96:64:d7:9c:08:f2:2a:ff:47:89:d1:16:76:7e: 37:58:49:14:a5:d1:e6:5f:f9:4b:d1:0d:09:b8:3e:fd:c7:0b: 7e:8d:93:f3:f0:c1:1b:f4:1f:16:1b:b6:0d:0b:91:ed:73:c7: f2:e7:b3:67:ae:10:70:0b:a8:55:af:cf:df:75:e3:6f:10:53: 35:73:2b:c0:2c:8c:7b:66:c5:b0:d5:d9:58:3c:ed:3b:b8:1f: 72:b0:90:ad:6f:a1:89:19:a2:59:49:60:3f:67:9d:c0:fa:ec: 77:1b:47:62:77:62:04:81:53:4e:5c:8a:b8:44:c8:23:f4:4a: 39:d4:e6:aa:c4:f1:9c:5f:c9:39:57:ac:2e:1d:7b:12:5b:fd: 18:1f:dc:43:ac:9e:8a:b5:b1:a2:9b:8a:46:95:16:96:9c:72: 27:eb:6c:49:29:bc:eb:7e:03:38:53:e9:f3:a4:9a:43:4a:cc: c3:c1:b2:d4:77:10:f7:22:26:ad:41:68:4d:c9:10:8d:52:9a: 7e:56:84:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1/XMSIAaRXcbIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDdiNjFkNjItZTUxYS00NGFhLWFiN2ItMWE2ZjlhNDNlN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LJb8m8TJ8Xd6GIRO/LzpbFot0JbniAmkgv9 oi8WMI2pAQXkZDYSsz2tezdqf0NCQpFePiYDJzLY+tbF+/Y84uITOhvqB3eIQMi4 SykgzxbvYsCUSTuO82Np7Nk9/B6Zv/pUahhhu3bSarxDGkM39Qz43PAMQoRjkiYy GjHsL4INncH5dcMgAqAJsKrPEqwMeK4EJ+27x+Z8tvate4IoKb5JCWddc5mbMfQR +ecw763GiCp06J5di3i6Na+hOzGM1jn5/6r8yjY9ilnTGAEng04Na2rblF91f3iK kOO3ZbuxqTIIE/AvUztusjjc+FHc+axmWdBGeR/dWvqduA9rAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG/iPGWrDeMruUvOMXW1CNl5xBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjkxYTY5ODAtNTAzYS0z ZDcwLTljM2MtZWM0ZmI1ODYwMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFUC21UqfCGxy0m7X7b0vD3ZciFIQGyLAXz8m1u4bdFwjErQxpKKN2u tNEGkJewmGnj/1Yl+gTmcF+WZNecCPIq/0eJ0RZ2fjdYSRSl0eZf+UvRDQm4Pv3H C36Nk/PwwRv0HxYbtg0Lke1zx/Lns2euEHALqFWvz991428QUzVzK8AsjHtmxbDV 2Vg87Tu4H3KwkK1voYkZollJYD9nncD67HcbR2J3YgSBU05cirhEyCP0SjnU5qrE 8ZxfyTlXrC4dexJb/Rgf3EOsnoq1saKbikaVFpaccifrbEkpvOt+AzhT6fOkmkNK zMPBstR3EPciJq1BaE3JEI1Smn5WhLs= -----END CERTIFICATE-----Generated at Sun May 4 10:37:01 2025 by rpki-client