$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa File: 574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa (raw, json) Hash identifier: CRKluW2vTcomgay17zrvUW8WLc8RYYbT1oplA03/hAM= Subject key identifier: 1A:C2:43:37:F0:0F:73:32:45:F0:B2:C1:B6:4D:C7:74:F1:A9:0D:15 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ECEB36590723DAD519540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 142.251.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:ce:b3:65:90:72:3d:ad:51:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=91d31af8-1761-4a07-afed-098a3d5fd68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:18:6c:07:c5:d0:b1:d7:3f:23:d4:57:4c:fb: 26:e4:8b:ff:91:4f:a8:9f:59:ea:07:2e:b3:2d:b2: 3e:68:c9:a2:c7:53:0e:a5:08:4f:37:fc:c9:e7:0a: 95:2a:d4:d0:bd:0b:a1:b4:49:f9:e0:1d:1e:f6:47: 52:f2:93:4d:23:7a:c1:38:8f:cf:1f:24:31:12:ad: a3:94:e5:0b:c0:22:69:7d:cd:9e:46:85:49:29:62: 1d:e9:21:df:4c:0c:73:1b:69:85:7c:d8:cb:8a:69: b8:19:c0:12:82:fa:ac:cf:78:30:d5:e1:29:8d:7a: c0:9d:68:c5:7a:f0:12:78:b4:47:1b:0f:83:7b:4b: 01:e0:7f:b6:50:e0:d8:ae:74:28:bd:39:d9:cb:dd: 61:d3:cd:a6:61:d9:d4:79:4a:05:d4:60:bb:e9:80: be:61:25:36:e9:94:68:21:a9:f1:dc:02:74:6a:12: 65:14:76:00:dc:aa:a0:21:ef:41:6d:12:13:7f:57: a8:c6:ab:59:b7:89:20:f7:ba:2d:80:04:88:71:27: 7b:15:be:e3:ee:0d:0a:fc:25:9d:ec:47:56:6a:66: fa:d7:ff:9b:02:50:d2:d2:e3:71:4d:6b:d8:63:09: 38:72:e6:cf:5e:a7:a1:4f:5b:60:e0:64:e9:9b:d1: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C2:43:37:F0:0F:73:32:45:F0:B2:C1:B6:4D:C7:74:F1:A9:0D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:53:4f:b1:9c:62:34:34:c3:fa:ab:0a:af:6c:e1:8c:66:68: f8:ee:b5:4c:c4:12:91:72:d0:44:42:25:e8:3b:c6:c1:29:20: 4d:f4:a8:a4:3b:1c:61:63:53:8b:33:e9:6f:1c:c6:c1:2d:b4: 0c:8a:67:f9:7c:88:2e:50:18:6b:43:29:7c:38:18:6f:57:39: 05:95:35:76:07:45:08:01:c0:94:7a:2f:37:fa:3d:cf:c3:fa: 73:8d:bf:3c:43:d4:b2:2d:c7:69:2b:87:c0:42:92:96:87:42: f7:cb:2b:62:8e:77:26:ee:35:0d:f1:4c:bf:f1:fd:88:02:e2: b4:86:0d:78:eb:55:13:b9:98:ad:50:45:92:f3:00:0b:4e:77: 77:0e:b3:21:3d:1a:86:25:96:9b:db:91:26:37:cf:95:66:98: 34:e9:c8:b4:05:88:30:aa:fa:9c:eb:58:dc:3f:d4:e0:a3:24: 37:d4:a8:b2:eb:e4:e6:bb:47:11:35:5c:97:6f:3a:50:86:d0: 42:fe:94:d5:0f:73:28:53:f3:f4:cf:31:74:5a:e4:bd:2b:eb: b2:66:84:e0:bc:00:82:0b:28:8f:c9:0b:a1:fe:4c:65:2d:8c: 0f:d9:97:ca:2f:66:ea:a4:fb:b8:a3:70:b0:e5:a6:0c:0a:f2: 26:03:e4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHs6zZZByPa1RlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk OTFkMzFhZjgtMTc2MS00YTA3LWFmZWQtMDk4YTNkNWZkNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxhsB8XQsdc/I9RXTPsm5Iv/kU+on1nqBy6z LbI+aMmix1MOpQhPN/zJ5wqVKtTQvQuhtEn54B0e9kdS8pNNI3rBOI/PHyQxEq2j lOULwCJpfc2eRoVJKWId6SHfTAxzG2mFfNjLimm4GcASgvqsz3gw1eEpjXrAnWjF evASeLRHGw+De0sB4H+2UODYrnQovTnZy91h082mYdnUeUoF1GC76YC+YSU26ZRo Ianx3AJ0ahJlFHYA3KqgIe9BbRITf1eoxqtZt4kg97otgASIcSd7Fb7j7g0K/CWd 7EdWamb61/+bAlDS0uNxTWvYYwk4cubPXqehT1tg4GTpm9Ei9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrCQzfwD3MyRfCywbZNx3TxqQ0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTc0ZDQyYjgtNmJhNi0z ZDI4LThiZmEtM2IxOGE4ZTkxMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvu/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlTT7GcYjQ0w/qrCq9s4YxmaPjutUzEEpFy0ERCJeg7xsEpIE30qKQ7 HGFjU4sz6W8cxsEttAyKZ/l8iC5QGGtDKXw4GG9XOQWVNXYHRQgBwJR6Lzf6Pc/D +nONvzxD1LItx2krh8BCkpaHQvfLK2KOdybuNQ3xTL/x/YgC4rSGDXjrVRO5mK1Q RZLzAAtOd3cOsyE9GoYllpvbkSY3z5VmmDTpyLQFiDCq+pzrWNw/1OCjJDfUqLLr 5Oa7RxE1XJdvOlCG0EL+lNUPcyhT8/TPMXRa5L0r67JmhOC8AIILKI/JC6H+TGUt jA/Zl8ovZuqk+7ijcLDlpgwK8iYD5GQ= -----END CERTIFICATE-----Generated at Sun May 4 12:19:07 2025 by rpki-client