$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b85bf151-1ace-3df7-bb1e-e89c34708210.roa File: b85bf151-1ace-3df7-bb1e-e89c34708210.roa (raw, json) Hash identifier: sX0oTYgrou7k5ApRemHOfTmKqNEDPmmOsOh2JGHA/10= Subject key identifier: F3:2A:B5:C1:22:47:74:4B:53:BF:6C:86:29:8D:21:81:60:F4:20:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB64701CE536E98001E700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b85bf151-1ace-3df7-bb1e-e89c34708210.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:64:70:1c:e5:36:e9:80:01:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b690a48b-6594-4500-b0fd-451c4f4d3ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0e:a3:f6:ce:5c:56:27:1a:cc:b5:ce:c2:b0: 51:a1:18:75:98:aa:1a:d0:9a:97:63:84:9d:4e:1e: 9e:fa:e2:c4:3d:0a:5d:e1:53:81:7e:94:bb:f4:6f: 47:b6:90:6f:6c:f0:4b:86:14:0b:50:90:2e:c3:a2: 25:3c:ae:73:cb:d6:9e:30:a6:0a:96:17:ac:bb:de: cd:70:8d:a5:63:5a:69:42:e2:d1:19:a7:9d:d2:6c: ac:90:48:bb:2e:a8:00:ca:33:af:95:db:31:8c:97: a7:7e:3d:95:3e:68:f2:91:b1:34:5c:82:f7:be:5e: 8b:2b:9d:94:63:5b:b5:b9:6d:9f:29:3f:b5:f2:87: ae:6a:3e:a9:2c:04:f2:bf:20:6b:3a:97:41:f6:b9: 17:b7:da:40:7a:73:70:6b:5a:d9:9d:78:1b:fa:2b: df:0d:b4:65:f3:f1:8e:33:6e:54:37:19:7a:11:1d: 4a:ef:8d:91:d1:0e:7b:15:eb:78:8f:7c:04:1c:8a: 51:d1:92:c9:2f:21:9e:35:9c:6d:bb:65:d7:92:4b: d2:93:cb:e9:f1:ae:c8:d7:ea:32:30:77:e9:d3:1e: 89:fd:cd:b5:33:e2:b4:08:3d:ba:a3:68:5c:e0:d6: 42:59:ef:f1:33:f4:c3:45:b9:f5:27:4a:ef:16:e0: bf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2A:B5:C1:22:47:74:4B:53:BF:6C:86:29:8D:21:81:60:F4:20:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b85bf151-1ace-3df7-bb1e-e89c34708210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:da:6a:fb:c7:67:1c:d1:48:10:da:55:aa:1f:17:c7:6a:07: 79:50:ee:96:19:00:70:d7:15:ef:94:2e:2d:de:0d:47:a4:5f: 84:9b:29:cf:39:b2:21:d0:16:55:78:f3:55:f0:55:8a:7d:4f: 5e:13:18:d9:ca:e7:42:16:9f:79:9e:9b:87:30:ea:1f:24:35: a6:7d:d0:4a:c2:96:40:20:df:3e:bf:91:b9:f6:41:a4:a2:3a: cb:12:7e:0f:38:91:05:ab:51:dd:7f:6c:bf:e2:4a:16:68:f7: e6:b2:76:39:a5:1a:bc:8f:ca:2c:65:bb:7a:80:37:41:43:7a: f2:0c:5a:35:ee:b4:35:f5:d7:1d:99:96:23:c4:14:cc:8e:55: de:ab:4f:5a:cf:3e:ec:3b:7c:45:da:4a:22:43:19:48:84:12: aa:99:6a:31:41:19:43:4c:87:f1:32:67:11:e0:ed:89:59:b5: 3c:a9:82:78:a5:dc:37:51:e2:f6:aa:52:2f:42:30:25:ad:54: 0a:1c:da:6b:77:e4:d9:0c:b9:0f:13:5a:c8:41:c3:e6:ef:c5: da:75:97:08:5c:c8:bb:27:dc:4a:ce:38:a7:9e:20:c9:5a:ae: 75:5c:bc:e5:55:7f:d6:52:66:72:b5:8b:1f:88:69:7b:0d:91: 80:ce:a6:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2RwHOU26YAB5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjY5MGE0OGItNjU5NC00NTAwLWIwZmQtNDUxYzRmNGQzZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw6j9s5cVicazLXOwrBRoRh1mKoa0JqXY4Sd Th6e+uLEPQpd4VOBfpS79G9HtpBvbPBLhhQLUJAuw6IlPK5zy9aeMKYKlhesu97N cI2lY1ppQuLRGaed0myskEi7LqgAyjOvldsxjJenfj2VPmjykbE0XIL3vl6LK52U Y1u1uW2fKT+18oeuaj6pLATyvyBrOpdB9rkXt9pAenNwa1rZnXgb+ivfDbRl8/GO M25UNxl6ER1K742R0Q57Fet4j3wEHIpR0ZLJLyGeNZxtu2XXkkvSk8vp8a7I1+oy MHfp0x6J/c21M+K0CD26o2hc4NZCWe/xM/TDRbn1J0rvFuC/IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMqtcEiR3RLU79shimNIYFg9CDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjg1YmYxNTEtMWFjZS0z ZGY3LWJiMWUtZTg5YzM0NzA4MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvurMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDaavvHZxzRSBDaVaofF8dqB3lQ7pYZAHDXFe+ULi3eDUekX4SbKc85 siHQFlV481XwVYp9T14TGNnK50IWn3mem4cw6h8kNaZ90ErClkAg3z6/kbn2QaSi OssSfg84kQWrUd1/bL/iShZo9+aydjmlGryPyixlu3qAN0FDevIMWjXutDX11x2Z liPEFMyOVd6rT1rPPuw7fEXaSiJDGUiEEqqZajFBGUNMh/EyZxHg7YlZtTypgnil 3DdR4vaqUi9CMCWtVAoc2mt35NkMuQ8TWshBw+bvxdp1lwhcyLsn3ErOOKeeIMla rnVcvOVVf9ZSZnK1ix+IaXsNkYDOpq0= -----END CERTIFICATE-----Generated at Sun May 4 10:57:59 2025 by rpki-client