$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bcbe160-b927-31fb-b886-cd2487caa7c7.roa File: 4bcbe160-b927-31fb-b886-cd2487caa7c7.roa (raw, json) Hash identifier: ZaC2EGTBA08Cr3B6wmOGamz/441VRAHrQnOt7OtymMI= Subject key identifier: 19:F3:36:CE:08:43:AD:63:16:0C:9C:14:A2:9E:6D:C7:63:CE:2A:10 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABC3F34E06B1890933500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bcbe160-b927-31fb-b886-cd2487caa7c7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bc:3f:34:e0:6b:18:90:93:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=55b2e005-97da-4ad7-91f1-6355b0c0fb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1d:43:50:9d:58:0f:93:36:67:a7:d3:1e:25: ad:6f:07:fe:99:f7:5a:4e:9c:41:3e:ee:b0:38:06: a3:c0:ec:e9:38:4f:28:ad:b8:aa:ac:3c:dd:91:a8: fd:98:97:42:69:b5:50:57:2c:fb:e8:52:54:90:65: da:4d:51:89:d5:b2:00:80:74:1e:f3:4c:39:aa:c8: c5:bc:a5:76:fe:7b:1b:40:dd:5b:50:57:e4:67:b2: 1d:0e:54:f2:b9:bc:b1:3f:33:d7:d6:a8:b0:46:49: fd:46:88:e7:9f:ef:0b:ce:47:6d:bb:3a:bd:a6:59: be:cb:47:ba:0a:44:5f:54:ec:23:7a:9a:47:92:48: 87:bd:98:88:8c:b6:5c:c1:73:90:50:a4:27:ed:cb: 52:ae:ac:35:29:91:9f:cc:d9:c4:6e:da:ba:99:2d: 02:d1:57:6d:7f:14:de:73:88:be:82:23:5a:e6:2d: 97:09:ad:94:6d:ad:44:f0:3f:17:bb:fa:d4:2d:60: d3:ea:8b:ad:27:a3:0f:33:48:50:df:0a:56:b6:71: 97:b6:7e:2d:79:85:a4:7b:b9:7f:8d:8f:06:4b:99: 1c:d9:e3:0a:35:70:2f:4a:97:90:42:2f:dd:f0:37: ae:6c:32:36:7b:49:f3:25:c1:76:b5:cc:a6:b7:58: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:36:CE:08:43:AD:63:16:0C:9C:14:A2:9E:6D:C7:63:CE:2A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bcbe160-b927-31fb-b886-cd2487caa7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f4:b0:28:e5:44:a1:40:78:5e:0a:ad:70:29:e0:4d:a1:54: d2:3a:42:d3:4b:d9:84:4a:5a:f7:03:0a:3f:87:57:3b:d4:4a: 3b:a1:d5:7b:c2:38:cc:94:3f:50:f1:cf:69:f7:aa:c8:5e:76: 7e:c4:25:e2:58:34:83:2f:ae:44:43:35:18:ba:e1:e2:69:d3: 35:39:a7:49:bb:e2:82:11:01:ec:84:c4:bf:a7:fd:d7:96:3d: 4a:5d:0a:73:1c:a1:b5:9e:db:45:7f:65:94:9b:1c:3b:fa:47: c6:b4:d9:2f:80:c4:18:47:a5:53:2c:fc:20:eb:4d:c9:a6:e6: 6b:ee:5d:2e:57:86:19:84:77:73:6f:22:0b:1f:4e:e9:b9:ae: 90:20:8c:7f:18:37:d4:98:2a:f6:08:5c:37:de:1e:f2:ac:bc: e3:5b:d4:76:e7:27:0c:f9:50:c5:b0:26:25:9f:b1:2c:10:62: 49:97:8d:a4:d2:8b:45:06:08:21:ec:2e:9b:d9:cc:3a:58:c8: 21:71:0c:b1:b7:c9:0b:86:79:55:ae:9d:5c:67:ba:9a:71:ef: eb:9f:4e:08:26:82:5e:df:a9:01:d2:e8:41:2b:cd:22:0d:25: 64:fd:a7:c2:c7:9e:47:59:b3:24:5e:8d:d2:22:84:09:65:71: 7b:3b:93:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurw/NOBrGJCTNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTViMmUwMDUtOTdkYS00YWQ3LTkxZjEtNjM1NWIwYzBmYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR1DUJ1YD5M2Z6fTHiWtbwf+mfdaTpxBPu6w OAajwOzpOE8orbiqrDzdkaj9mJdCabVQVyz76FJUkGXaTVGJ1bIAgHQe80w5qsjF vKV2/nsbQN1bUFfkZ7IdDlTyubyxPzPX1qiwRkn9Rojnn+8Lzkdtuzq9plm+y0e6 CkRfVOwjeppHkkiHvZiIjLZcwXOQUKQn7ctSrqw1KZGfzNnEbtq6mS0C0VdtfxTe c4i+giNa5i2XCa2Uba1E8D8Xu/rULWDT6outJ6MPM0hQ3wpWtnGXtn4teYWke7l/ jY8GS5kc2eMKNXAvSpeQQi/d8DeubDI2e0nzJcF2tcymt1hhnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnzNs4IQ61jFgycFKKebcdjzioQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGJjYmUxNjAtYjkyNy0z MWZiLWI4ODYtY2QyNDg3Y2FhN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz0sCjlRKFAeF4KrXAp4E2hVNI6QtNL2YRKWvcDCj+HVzvUSjuh1XvC OMyUP1Dxz2n3qshedn7EJeJYNIMvrkRDNRi64eJp0zU5p0m74oIRAeyExL+n/deW PUpdCnMcobWe20V/ZZSbHDv6R8a02S+AxBhHpVMs/CDrTcmm5mvuXS5XhhmEd3Nv IgsfTum5rpAgjH8YN9SYKvYIXDfeHvKsvONb1HbnJwz5UMWwJiWfsSwQYkmXjaTS i0UGCCHsLpvZzDpYyCFxDLG3yQuGeVWunVxnuppx7+ufTggmgl7fqQHS6EErzSIN JWT9p8LHnkdZsyRejdIihAllcXs7k5A= -----END CERTIFICATE-----Generated at Sun May 4 10:55:35 2025 by rpki-client