$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa File: 5ea868a1-53fa-343b-8393-c4b366e016ff.roa (raw, json) Hash identifier: ypfhio1G61AWs5PFOjsQODHfPnZdJK7gtBiphDoC/mc= Subject key identifier: F1:6D:EB:55:C7:60:83:24:C2:13:93:A7:C8:20:B2:8F:90:7C:48:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAB90ECB3701D066625900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b9:0e:cb:37:01:d0:66:62:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a0ce568c-265c-4118-a7c5-db66be09d9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:dd:a4:e3:06:20:fa:b0:4f:39:01:f2:76: 3e:45:31:fe:ac:81:22:29:a8:59:68:5e:a8:e2:6d: d9:69:f1:8a:e5:26:f1:5c:96:75:82:bd:3e:06:69: ed:91:93:c5:b3:56:39:7b:2b:44:be:52:b8:0f:37: f7:ee:61:f1:5d:fd:fc:40:65:d2:33:a8:8c:1d:6a: 6b:d4:8f:05:a0:71:0b:f4:a5:aa:d5:15:52:81:1a: 6b:12:eb:06:b9:7e:68:f4:5f:39:32:75:6c:3d:e1: e5:08:27:bd:5f:62:d4:00:0e:77:30:dd:56:fe:23: 86:22:4e:34:0b:54:24:fd:79:80:de:c6:bb:00:ce: 09:5e:bc:20:e4:e9:4c:28:a1:39:e8:b6:15:e5:fc: 3b:77:4e:82:0f:7b:82:15:97:66:93:60:af:65:be: c8:54:ed:69:af:9c:33:21:42:90:fc:87:4d:c8:d8: 99:6b:29:fe:d3:af:b9:64:34:66:5f:e8:04:d7:5c: 27:b9:a1:44:ea:a9:d7:f6:6c:8d:62:2f:3d:ad:5b: 4d:67:c7:8f:20:88:3c:b4:86:91:fd:f5:34:44:61: de:94:7a:59:43:88:e3:34:34:42:fe:91:31:9b:41: 70:6e:dd:33:d1:5e:ba:72:09:09:b3:52:a5:af:9e: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6D:EB:55:C7:60:83:24:C2:13:93:A7:C8:20:B2:8F:90:7C:48:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e7:95:d3:c2:b4:e4:b6:26:25:29:72:35:42:04:77:e9:a5: 75:b1:d2:9f:c1:88:1a:0b:ee:ec:11:64:52:d9:ea:e6:f5:ed: 48:6e:a4:d8:c3:7e:6b:07:16:4f:43:fd:4d:bb:3b:e6:45:a9: a1:c3:64:e0:ac:6b:a8:21:fe:ee:85:51:9f:a4:6e:a2:99:aa: db:32:13:2a:0c:39:76:d7:a1:3c:10:10:0c:f7:d4:83:0c:8a: 39:b9:80:f0:47:87:d9:e9:23:78:0b:8e:9d:3a:b8:84:7b:ac: 80:da:8f:8f:26:31:f6:4b:00:7a:e8:5b:e0:f0:10:04:ab:41: ca:7e:d2:9b:bb:3e:67:7e:ae:fb:69:b8:b0:34:03:07:4e:24: 27:9a:8d:c3:c6:58:d4:8a:20:c6:2f:22:99:a4:15:71:47:82: 73:29:80:b7:eb:a6:60:91:c1:9a:dc:29:10:74:97:73:b7:52: e3:c0:b9:77:fc:2a:c9:72:b7:e3:3d:a4:77:c2:2d:ed:59:3e: 38:5c:7b:af:d7:c1:ff:42:4d:dd:1d:77:6a:7f:7f:51:7b:61: f8:91:fd:8c:9e:0d:e9:7d:92:ef:59:4d:05:27:bd:6b:c8:93: 76:fd:b8:52:be:ee:63:28:75:af:03:19:1a:3d:e4:56:b5:6b: 8c:5d:fa:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurkOyzcB0GZiWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTBjZTU2OGMtMjY1Yy00MTE4LWE3YzUtZGI2NmJlMDlkOWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6rdpOMGIPqwTzkB8nY+RTH+rIEiKahZaF6o 4m3ZafGK5SbxXJZ1gr0+BmntkZPFs1Y5eytEvlK4Dzf37mHxXf38QGXSM6iMHWpr 1I8FoHEL9KWq1RVSgRprEusGuX5o9F85MnVsPeHlCCe9X2LUAA53MN1W/iOGIk40 C1Qk/XmA3sa7AM4JXrwg5OlMKKE56LYV5fw7d06CD3uCFZdmk2CvZb7IVO1pr5wz IUKQ/IdNyNiZayn+06+5ZDRmX+gE11wnuaFE6qnX9myNYi89rVtNZ8ePIIg8tIaR /fU0RGHelHpZQ4jjNDRC/pExm0Fwbt0z0V66cgkJs1Klr562JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFt61XHYIMkwhOTp8ggso+QfEi0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWVhODY4YTEtNTNmYS0z NDNiLTgzOTMtYzRiMzY2ZTAxNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3nldPCtOS2JiUpcjVCBHfppXWx0p/BiBoL7uwRZFLZ6ub17UhupNjD fmsHFk9D/U27O+ZFqaHDZOCsa6gh/u6FUZ+kbqKZqtsyEyoMOXbXoTwQEAz31IMM ijm5gPBHh9npI3gLjp06uIR7rIDaj48mMfZLAHroW+DwEASrQcp+0pu7Pmd+rvtp uLA0AwdOJCeajcPGWNSKIMYvIpmkFXFHgnMpgLfrpmCRwZrcKRB0l3O3UuPAuXf8 Kslyt+M9pHfCLe1ZPjhce6/Xwf9CTd0dd2p/f1F7YfiR/YyeDel9ku9ZTQUnvWvI k3b9uFK+7mModa8DGRo95Fa1a4xd+j8= -----END CERTIFICATE-----Generated at Sun May 4 10:46:50 2025 by rpki-client