$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec58919-3d48-3039-a44a-4b9d5a500ded.roa File: 4ec58919-3d48-3039-a44a-4b9d5a500ded.roa (raw, json) Hash identifier: +K6edYCSTXjrB2yLqDoL3JBRVvGIedLfatFY8WFwM0M= Subject key identifier: 16:D2:A6:83:4A:13:35:29:9C:F7:BB:20:9B:3E:19:98:FE:66:4C:A3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6E440727DCA8ED4B7900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec58919-3d48-3039-a44a-4b9d5a500ded.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6e:44:07:27:dc:a8:ed:4b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=98ec6cac-2a01-405f-b535-33fea5b85725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f2:37:8f:ab:f4:1f:4e:06:f0:7b:f5:65:d0: 70:35:ef:20:c7:23:e3:7f:6d:df:8e:86:da:25:2b: c0:2c:59:3f:3c:3f:40:23:b8:ca:8c:f4:05:5c:c5: be:6d:13:51:03:70:5c:3e:96:29:f1:ed:2e:53:6e: 4d:4f:ee:2e:ce:2f:12:9f:45:7c:b2:a8:77:7e:66: 05:d3:34:08:b0:e4:d8:9f:05:65:ec:3b:1b:90:e9: ad:96:c4:7e:11:50:d5:52:d6:ef:c2:83:ca:d1:c0: d7:87:48:b9:ec:e1:c3:74:46:25:72:c0:d0:73:0e: c7:8b:44:e0:dc:03:35:1e:bb:c5:48:33:81:4d:be: b1:2c:a0:7e:e2:18:47:5d:27:74:0d:50:92:ed:88: 38:22:67:6c:88:53:1f:a6:1b:93:61:6a:14:53:60: 58:99:ff:e0:20:99:24:d8:b9:d3:28:d3:6c:ba:7b: 6e:48:e5:2a:a5:7d:dc:1e:80:2b:f3:bc:ad:24:78: 12:89:60:8b:51:26:89:12:7f:de:d5:3e:d0:45:5f: 81:a0:fe:df:74:10:a3:cb:d2:c5:a0:70:d8:eb:30: f7:50:56:d0:25:96:f4:72:59:3a:af:2c:ba:e6:07: a6:fe:13:a5:86:8b:52:04:3d:2e:04:91:06:15:35: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D2:A6:83:4A:13:35:29:9C:F7:BB:20:9B:3E:19:98:FE:66:4C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec58919-3d48-3039-a44a-4b9d5a500ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a8:a0:65:ed:8c:fb:77:65:52:4c:4b:97:93:09:25:3d:fa: e6:63:0c:8d:62:42:8f:68:f1:d3:bb:2a:82:a4:9c:3f:40:0a: 97:b2:cb:98:eb:b2:bf:af:53:3e:dc:19:c3:57:ea:6e:6d:20: 5e:0d:39:2d:13:f4:76:64:12:16:14:ed:af:89:d5:74:0f:22: a4:ec:cc:b6:11:d0:1c:9d:8d:9e:ff:16:17:79:42:03:d3:d8: 59:85:26:fe:85:e3:92:86:ed:3f:70:0a:e5:c3:ad:cf:a2:3e: 10:4c:29:be:47:9e:c3:65:47:d5:bf:1d:f5:60:a0:9b:3f:4d: af:c5:1a:d1:94:17:78:10:7a:97:dd:40:6b:93:21:4e:1b:07: 4b:c4:e4:3c:b9:13:16:d3:34:bd:a1:69:16:e6:31:54:c2:fa: 76:91:d5:37:32:9c:2e:9f:77:80:f6:6e:eb:02:cf:f0:3a:01: 36:03:c7:ab:ee:7f:f2:90:54:4a:cd:41:c3:a3:df:cc:ff:0a: fc:c1:76:42:53:ab:d7:1e:b9:54:c4:70:7d:21:a3:75:b6:c5: 21:2c:a7:33:27:1f:5d:b9:c9:1e:7c:1f:5e:0b:cb:a3:9c:c2: 11:0e:11:e9:f9:c0:35:9f:35:0e:5f:8f:4a:9b:9b:63:9d:59: 65:0f:7f:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku25EByfcqO1LeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OThlYzZjYWMtMmEwMS00MDVmLWI1MzUtMzNmZWE1Yjg1NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fI3j6v0H04G8Hv1ZdBwNe8gxyPjf23fjoba JSvALFk/PD9AI7jKjPQFXMW+bRNRA3BcPpYp8e0uU25NT+4uzi8Sn0V8sqh3fmYF 0zQIsOTYnwVl7DsbkOmtlsR+EVDVUtbvwoPK0cDXh0i57OHDdEYlcsDQcw7Hi0Tg 3AM1HrvFSDOBTb6xLKB+4hhHXSd0DVCS7Yg4ImdsiFMfphuTYWoUU2BYmf/gIJkk 2LnTKNNsuntuSOUqpX3cHoAr87ytJHgSiWCLUSaJEn/e1T7QRV+BoP7fdBCjy9LF oHDY6zD3UFbQJZb0clk6ryy65gem/hOlhotSBD0uBJEGFTXnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbSpoNKEzUpnPe7IJs+GZj+ZkyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGVjNTg5MTktM2Q0OC0z MDM5LWE0NGEtNGI5ZDVhNTAwZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6ooGXtjPt3ZVJMS5eTCSU9+uZjDI1iQo9o8dO7KoKknD9ACpeyy5jr sr+vUz7cGcNX6m5tIF4NOS0T9HZkEhYU7a+J1XQPIqTszLYR0BydjZ7/Fhd5QgPT 2FmFJv6F45KG7T9wCuXDrc+iPhBMKb5HnsNlR9W/HfVgoJs/Ta/FGtGUF3gQepfd QGuTIU4bB0vE5Dy5ExbTNL2haRbmMVTC+naR1TcynC6fd4D2busCz/A6ATYDx6vu f/KQVErNQcOj38z/CvzBdkJTq9ceuVTEcH0ho3W2xSEspzMnH125yR58H14Ly6Oc whEOEen5wDWfNQ5fj0qbm2OdWWUPf9w= -----END CERTIFICATE-----Generated at Sun May 4 11:01:21 2025 by rpki-client