$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/411f3d4b-7409-3c60-9628-71e475898228.roa File: 411f3d4b-7409-3c60-9628-71e475898228.roa (raw, json) Hash identifier: 92iSzepNs+xmFm9+FMAcnZaYvqiNHWieLHC/w/+ueV0= Subject key identifier: B1:BB:F8:7B:FA:23:DC:45:68:DE:A0:5A:7C:F4:20:F7:AE:C3:E4:CA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB72BA369752062F6BA140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/411f3d4b-7409-3c60-9628-71e475898228.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:72:ba:36:97:52:06:2f:6b:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=91cb5db8-f905-4e12-a43f-5308fbd80558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:46:f1:ea:b0:70:c4:a0:80:4b:4c:78:7a: 00:bf:3b:30:4f:02:34:49:35:4f:01:75:4a:18:d3: 0b:2d:59:0d:89:39:5f:34:fc:4c:45:94:bb:99:4f: 80:20:50:a9:01:9d:88:73:09:c0:c9:e0:89:5b:0b: f3:74:e0:0b:2e:2a:38:c5:d3:d6:56:05:ff:15:de: 1c:15:aa:60:0f:4e:65:46:a3:0e:5f:11:37:c9:68: 9e:c5:63:4e:a8:f1:2a:a0:c5:50:8c:27:ef:06:21: 5c:ef:99:be:62:b6:dd:75:0f:b0:30:b7:cc:a7:db: 21:bc:39:49:ae:e4:60:a6:1e:42:cc:a5:c2:0b:51: 12:35:01:5e:e6:bf:a9:34:1e:d2:f7:9b:c4:1a:ff: 81:2e:61:9d:82:78:d0:7e:f0:cb:96:25:d9:8d:0d: 80:51:91:0a:b7:f7:54:1a:8f:f5:78:46:23:31:b8: 90:64:42:a6:56:4e:43:0b:ec:f2:dc:f5:c3:b1:9c: 96:d0:c2:16:0d:8e:bf:a7:0c:f9:7a:ec:97:a5:3a: a6:13:15:f5:53:52:65:58:fb:2f:65:02:0b:e0:8c: fd:2f:fc:01:d1:48:27:96:d0:9a:17:1a:e9:41:aa: f5:af:69:ee:c0:cd:44:7d:3c:a8:2c:04:c0:06:79: 71:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BB:F8:7B:FA:23:DC:45:68:DE:A0:5A:7C:F4:20:F7:AE:C3:E4:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/411f3d4b-7409-3c60-9628-71e475898228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:17:e6:88:e3:2e:42:3a:37:96:c6:82:64:5f:02:6b:8f:f6: bb:9d:13:c4:20:3d:5d:34:a6:13:1f:86:17:8c:34:56:09:95: 24:21:02:03:27:5e:99:3e:1f:4c:6f:d8:d8:d4:16:fd:78:31: e2:c5:48:1c:87:de:df:7f:c9:74:17:1e:09:c1:0c:aa:dc:e1: 22:08:3e:80:5b:8d:28:80:c9:1d:c6:12:93:ba:28:1b:3d:a9: 19:95:0d:65:7c:c4:8d:fb:0e:07:c4:c0:40:cd:9a:38:b5:ab: 21:2e:ba:2d:f1:5c:77:9c:b9:e2:d6:7b:f4:10:e7:65:bd:06: 0c:b8:56:33:6a:da:0a:48:54:9f:19:c5:80:52:21:e5:50:47: 3b:2a:a8:92:9b:5e:88:fc:ac:a6:4c:af:f1:48:9b:77:27:b3: 33:b2:85:d6:b0:3b:20:ad:b2:74:34:10:ab:91:a8:2d:10:4a: a1:df:aa:0b:05:e1:97:41:46:8a:1f:a9:c2:4e:8a:9b:7d:58: 98:49:ea:04:ec:e5:71:b6:7e:02:f0:b7:a4:1d:29:c9:f2:65: e5:bb:8c:d1:3f:76:b5:2b:d1:6e:02:5d:0a:50:84:10:5f:36: d6:3b:86:33:a4:78:cd:46:87:1a:6a:89:50:aa:dc:2d:b7:ec: 4b:3a:ff:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3K6NpdSBi9roUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTFjYjVkYjgtZjkwNS00ZTEyLWE0M2YtNTMwOGZiZDgwNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0RG8eqwcMSggEtMeHoAvzswTwI0STVPAXVK GNMLLVkNiTlfNPxMRZS7mU+AIFCpAZ2IcwnAyeCJWwvzdOALLio4xdPWVgX/Fd4c FapgD05lRqMOXxE3yWiexWNOqPEqoMVQjCfvBiFc75m+YrbddQ+wMLfMp9shvDlJ ruRgph5CzKXCC1ESNQFe5r+pNB7S95vEGv+BLmGdgnjQfvDLliXZjQ2AUZEKt/dU Go/1eEYjMbiQZEKmVk5DC+zy3PXDsZyW0MIWDY6/pwz5euyXpTqmExX1U1JlWPsv ZQIL4Iz9L/wB0UgnltCaFxrpQar1r2nuwM1EfTyoLATABnlxkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG7+Hv6I9xFaN6gWnz0IPeuw+TKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDExZjNkNGItNzQwOS0z YzYwLTk2MjgtNzFlNDc1ODk4MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUX5ojjLkI6N5bGgmRfAmuP9rudE8QgPV00phMfhheMNFYJlSQhAgMn Xpk+H0xv2NjUFv14MeLFSByH3t9/yXQXHgnBDKrc4SIIPoBbjSiAyR3GEpO6KBs9 qRmVDWV8xI37DgfEwEDNmji1qyEuui3xXHecueLWe/QQ52W9Bgy4VjNq2gpIVJ8Z xYBSIeVQRzsqqJKbXoj8rKZMr/FIm3cnszOyhdawOyCtsnQ0EKuRqC0QSqHfqgsF 4ZdBRoofqcJOipt9WJhJ6gTs5XG2fgLwt6QdKcnyZeW7jNE/drUr0W4CXQpQhBBf NtY7hjOkeM1GhxpqiVCq3C237Es6//g= -----END CERTIFICATE-----Generated at Sun May 4 11:14:24 2025 by rpki-client