$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/669b6401-1473-3b83-910f-6182f0a8d5ba.roa File: 669b6401-1473-3b83-910f-6182f0a8d5ba.roa (raw, json) Hash identifier: QGCj5iFGzFLt6ESYQ0L5wDbCmgi0K2z7n+RT6A6UfJk= Subject key identifier: 32:01:5A:61:C7:66:C0:8A:7E:E4:85:EC:B5:B2:67:6C:4B:A0:6C:CC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6D723B94D66AB3E31A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/669b6401-1473-3b83-910f-6182f0a8d5ba.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6d:72:3b:94:d6:6a:b3:e3:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5c5eaac4-f2dc-4555-8712-661c4125ce3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:21:64:62:da:cd:cb:b8:0e:b1:a6:75:87: 32:e4:e1:72:c5:1d:8e:e9:fb:4d:44:97:99:57:90: e1:9d:23:7d:b4:73:c8:45:74:78:9e:fc:b8:98:4a: fb:6f:e4:f6:f0:de:7c:63:40:f6:a6:6b:5b:ac:34: 95:0e:77:bd:d8:be:20:e2:4e:ca:57:a0:87:42:60: 70:67:cc:4b:73:c4:6b:dc:5f:be:28:1c:93:1a:c6: 0b:38:50:94:4e:13:eb:de:36:59:ed:cc:ae:59:b9: c6:80:51:8d:27:82:08:fe:32:bf:b8:09:60:fa:2b: 3d:02:c8:61:1d:1f:28:5a:56:4b:e8:14:c9:c3:85: c4:40:46:b3:c6:8e:1b:b4:e7:a1:6c:a5:cb:ad:e1: fb:bb:b5:89:8f:fb:f5:b8:c2:ab:95:21:79:e0:29: db:9f:eb:7d:f2:84:7f:83:5b:f9:71:aa:59:3e:03: fb:e5:55:f8:f1:90:b3:6a:20:27:d0:07:80:79:43: 6d:c3:32:cf:68:47:74:d8:68:79:77:9a:bb:96:81: 57:a9:80:46:45:7d:02:ae:69:da:bd:b1:13:36:7c: 01:dc:e7:c3:7a:be:e2:ac:35:b5:1d:72:ad:80:7e: fa:af:02:11:d5:66:31:f9:b4:1b:62:df:e6:6b:32: 55:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:01:5A:61:C7:66:C0:8A:7E:E4:85:EC:B5:B2:67:6C:4B:A0:6C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/669b6401-1473-3b83-910f-6182f0a8d5ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6b:5e:c1:6b:a7:10:b5:6f:1f:8e:32:5f:9e:e3:5c:74:85: 00:8a:0d:04:26:6b:2f:ee:35:5a:6e:91:d2:7c:49:64:f5:a5: d9:5d:b5:ab:01:34:7d:16:56:a1:5d:6d:32:7f:bd:5f:43:e0: 76:0b:32:7d:77:57:8b:b0:05:91:cf:2f:fd:f9:38:0d:22:bd: 7f:db:0b:23:07:d3:ba:8b:bc:d2:df:bb:f7:0d:18:b4:9e:aa: 88:6b:52:f0:56:3e:88:11:bc:d2:e4:ff:cb:2a:b7:54:c4:28: 5d:0b:9d:fa:63:b4:a4:50:c5:40:14:24:83:59:de:39:a8:3f: 60:e4:3e:d2:9f:b5:0f:05:28:66:56:d3:d4:b0:8a:6b:49:4a: 5c:23:d0:a6:85:a6:b5:a8:46:e6:e7:76:1f:dc:4d:c9:c2:90: 97:31:62:e0:dc:bb:0a:4f:65:86:bb:2a:c5:bb:41:44:35:11: ca:9c:79:61:49:1c:95:51:08:0a:3f:53:b3:49:87:35:57:c8: 91:81:e8:a3:d0:3a:6c:93:2e:c2:93:b8:3c:74:2b:cf:f3:ba: a8:07:13:84:02:f1:2d:8c:52:d6:6a:08:07:06:1e:0e:d2:ff: 83:13:9e:f3:c7:26:7c:e2:68:5f:36:8d:27:f9:d5:23:ba:0d: 52:3a:75:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku21yO5TWarPjGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWM1ZWFhYzQtZjJkYy00NTU1LTg3MTItNjYxYzQxMjVjZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoQhZGLazcu4DrGmdYcy5OFyxR2O6ftNRJeZ V5DhnSN9tHPIRXR4nvy4mEr7b+T28N58Y0D2pmtbrDSVDne92L4g4k7KV6CHQmBw Z8xLc8Rr3F++KByTGsYLOFCUThPr3jZZ7cyuWbnGgFGNJ4II/jK/uAlg+is9Ashh HR8oWlZL6BTJw4XEQEazxo4btOehbKXLreH7u7WJj/v1uMKrlSF54Cnbn+t98oR/ g1v5capZPgP75VX48ZCzaiAn0AeAeUNtwzLPaEd02Gh5d5q7loFXqYBGRX0Crmna vbETNnwB3OfDer7irDW1HXKtgH76rwIR1WYx+bQbYt/mazJVOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIBWmHHZsCKfuSF7LWyZ2xLoGzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjY5YjY0MDEtMTQ3My0z YjgzLTkxMGYtNjE4MmYwYThkNWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvszMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRrXsFrpxC1bx+OMl+e41x0hQCKDQQmay/uNVpukdJ8SWT1pdldtasB NH0WVqFdbTJ/vV9D4HYLMn13V4uwBZHPL/35OA0ivX/bCyMH07qLvNLfu/cNGLSe qohrUvBWPogRvNLk/8sqt1TEKF0LnfpjtKRQxUAUJINZ3jmoP2DkPtKftQ8FKGZW 09SwimtJSlwj0KaFprWoRubndh/cTcnCkJcxYuDcuwpPZYa7KsW7QUQ1EcqceWFJ HJVRCAo/U7NJhzVXyJGB6KPQOmyTLsKTuDx0K8/zuqgHE4QC8S2MUtZqCAcGHg7S /4MTnvPHJnziaF82jSf51SO6DVI6daQ= -----END CERTIFICATE-----Generated at Sun May 4 10:44:06 2025 by rpki-client