$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa File: 637ba1ea-5a50-309e-a538-fe7efd71cc38.roa (raw, json) Hash identifier: okRxk2Og5a2wv5WnaUO0im1JrtBvsQXtBixZItdSYXM= Subject key identifier: 42:EA:A6:34:43:8E:F2:E8:9C:32:B6:9A:0C:74:6C:F1:8D:BA:0A:D3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA31047F82A46B448A7200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:31:04:7f:82:a4:6b:44:8a:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=d39d35a6-53f9-4500-92a6-a47a657047e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:87:99:9f:fe:85:0b:fc:9b:71:a1:ed:4b: 4c:44:8d:98:74:26:31:5e:97:4f:4f:fc:f0:a9:c6: f5:18:8a:14:44:b7:c0:62:04:79:8c:9d:25:76:6e: 49:83:ef:fc:f5:6f:f4:aa:c4:0e:a1:60:be:bc:66: cc:df:75:b6:96:16:99:38:39:65:86:58:2d:f1:c0: f5:ba:2e:27:b4:f0:d4:60:b7:cf:0d:69:3a:fc:33: df:b5:df:8d:bc:8a:0d:66:77:e9:46:6f:22:d9:d5: ff:5e:57:bd:80:ff:af:d0:24:44:62:dd:5c:0a:78: b8:d1:d7:83:b0:c0:c8:7a:72:ea:44:57:2e:c8:4b: 6e:1b:06:c1:2e:69:c1:c2:37:01:01:9a:a2:c9:10: d9:35:1f:b1:29:5a:9b:d1:e4:36:9e:8a:3e:aa:b2: e7:aa:dd:04:63:09:95:ae:66:a1:7a:b5:df:0d:f3: 0f:ef:4e:3c:55:ef:39:53:50:da:71:f1:09:b4:77: 4e:09:fd:41:57:dc:4b:1d:37:11:75:a3:f5:66:29: 02:f5:46:8d:2d:75:26:a9:e5:21:7e:dc:98:a3:f7: 3f:26:6b:08:69:c8:8f:ae:1c:df:bb:c0:cc:f9:d9: 9e:6d:00:a6:8d:d8:cc:fb:44:b8:a1:4c:e4:b7:09: 4e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EA:A6:34:43:8E:F2:E8:9C:32:B6:9A:0C:74:6C:F1:8D:BA:0A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5b:29:f3:83:05:f2:ed:60:d4:4a:b4:41:3a:6d:d2:1e:0a: 50:f4:86:c4:4d:3b:61:ca:ce:cc:dc:6a:f0:ba:2f:19:c1:3d: b7:15:33:3c:ff:c1:42:4a:ab:42:bc:5d:d6:26:66:df:6e:8e: 5c:4f:cc:96:78:a5:f6:93:ce:6e:86:47:d6:a6:55:d9:d1:44: 90:17:2d:98:bd:6d:50:fa:bf:f5:cc:d6:3a:5f:4b:ea:40:af: f8:71:40:1c:9f:b6:b4:9f:a0:cf:9d:da:d5:b4:4a:49:4a:fc: b7:72:f0:9d:3a:76:17:dd:b9:28:f4:ac:6b:a2:78:87:31:e9: 51:fb:d7:e1:fc:59:14:49:8f:27:5e:4c:d6:3d:c5:4f:4e:59: 39:78:94:b1:c3:02:67:4a:1b:a3:71:8d:8d:bf:b1:ec:a6:4a: 5b:e4:8c:e0:35:f6:c9:0f:97:7c:00:59:8d:5a:48:b3:34:ae: 18:0c:e4:42:5a:dd:d7:2d:89:9b:a8:25:5f:03:4f:2b:70:a7: 2c:7e:11:63:45:6c:e9:72:52:68:51:ba:2d:9d:6d:33:66:e6: ec:75:a5:1b:31:2d:60:97:bf:98:b2:e0:b4:1c:37:51:bc:25: b4:60:29:cc:2f:ce:df:90:87:39:88:67:fc:62:b8:54:51:de: 76:05:c5:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jEEf4Kka0SKcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZDM5ZDM1YTYtNTNmOS00NTAwLTkyYTYtYTQ3YTY1NzA0N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKyHmZ/+hQv8m3Gh7UtMRI2YdCYxXpdPT/zw qcb1GIoURLfAYgR5jJ0ldm5Jg+/89W/0qsQOoWC+vGbM33W2lhaZODllhlgt8cD1 ui4ntPDUYLfPDWk6/DPftd+NvIoNZnfpRm8i2dX/Xle9gP+v0CREYt1cCni40deD sMDIenLqRFcuyEtuGwbBLmnBwjcBAZqiyRDZNR+xKVqb0eQ2noo+qrLnqt0EYwmV rmaherXfDfMP7048Ve85U1DacfEJtHdOCf1BV9xLHTcRdaP1ZikC9UaNLXUmqeUh ftyYo/c/JmsIaciPrhzfu8DM+dmebQCmjdjM+0S4oUzktwlO8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELqpjRDjvLonDK2mgx0bPGNugrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjM3YmExZWEtNWE1MC0z MDllLWE1MzgtZmU3ZWZkNzFjYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5bKfODBfLtYNRKtEE6bdIeClD0hsRNO2HKzszcavC6LxnBPbcVMzz/ wUJKq0K8XdYmZt9ujlxPzJZ4pfaTzm6GR9amVdnRRJAXLZi9bVD6v/XM1jpfS+pA r/hxQByftrSfoM+d2tW0SklK/Ldy8J06dhfduSj0rGuieIcx6VH71+H8WRRJjyde TNY9xU9OWTl4lLHDAmdKG6NxjY2/seymSlvkjOA19skPl3wAWY1aSLM0rhgM5EJa 3dctiZuoJV8DTytwpyx+EWNFbOlyUmhRui2dbTNm5ux1pRsxLWCXv5iy4LQcN1G8 JbRgKcwvzt+QhzmIZ/xiuFRR3nYFxTU= -----END CERTIFICATE-----Generated at Sun May 4 14:55:53 2025 by rpki-client