$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ece85742-0ed4-3250-bc23-bd37778ba20c.roa File: ece85742-0ed4-3250-bc23-bd37778ba20c.roa (raw, json) Hash identifier: OgvMl/YmgDQyYqgIvGmUwvBI/OwHSKhoVjqqmRC5T+Y= Subject key identifier: 37:29:3C:6D:80:B5:ED:A6:0F:4D:4C:10:0E:12:D7:9E:96:5A:01:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACAEB707D4C8E5AD98880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ece85742-0ed4-3250-bc23-bd37778ba20c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ca:eb:70:7d:4c:8e:5a:d9:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2478ff2d-eb3e-4e44-968a-2202cdd45b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:a5:eb:c0:3a:59:21:81:82:3e:5e:12:1a: 7a:77:50:1a:cc:27:96:17:17:0b:d6:63:d2:1f:26: 22:92:7e:55:35:ab:31:33:0e:c8:4d:8f:a5:3f:11: 1d:19:9f:55:04:f1:87:2d:ac:a4:5f:c8:7a:39:e8: 66:7b:f6:8d:31:df:1a:40:e9:7a:a7:d8:17:49:c9: 53:15:11:c1:eb:39:32:52:e7:0b:17:b3:16:2a:fa: 78:03:77:dd:4e:c0:57:32:c8:88:2d:ba:06:c6:06: 4e:60:54:7a:72:41:ce:d3:1f:c7:9b:e3:ea:9b:bd: 34:68:12:ab:49:a9:a1:e9:46:04:dc:b0:d6:6e:b3: 63:27:9e:bc:83:b8:03:85:50:09:69:56:cd:8c:99: 80:81:53:62:1a:e3:7b:d2:b9:86:c5:47:f7:6c:14: 0c:96:93:6d:5b:1b:b4:85:27:80:86:cc:ba:11:2c: 0d:74:96:f6:d2:d7:77:13:5c:21:ed:94:a3:9c:ff: ef:86:c6:0d:57:74:79:51:a5:a6:ec:e6:87:74:42: 76:5d:fd:75:60:63:c6:08:e3:83:35:76:4e:7c:bd: 23:e2:be:3a:de:d4:4e:ea:36:bb:e2:ea:fb:09:00: f4:d7:46:0e:da:f3:bd:a6:e5:e8:74:42:b9:51:50: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:29:3C:6D:80:B5:ED:A6:0F:4D:4C:10:0E:12:D7:9E:96:5A:01:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ece85742-0ed4-3250-bc23-bd37778ba20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:cb:a3:83:13:40:5f:12:cd:2e:be:11:6c:f5:ac:b1:66:6f: 5f:96:1e:44:b0:1c:4f:51:db:d2:e5:a1:cd:54:78:11:e2:9f: 71:dc:74:94:bc:bb:e8:47:d9:49:1c:bb:31:00:20:4e:77:5a: 9c:05:b8:9e:1f:a1:62:01:a7:06:66:b5:77:ec:d4:4f:51:d6: 6b:7b:3a:99:20:08:f6:01:43:23:4e:3e:b3:00:0f:ee:5e:22: 29:ff:b5:99:c3:61:db:0b:31:9d:11:97:2b:ce:8d:9d:cc:ab: af:c2:dc:f7:cc:d6:bd:45:4f:e6:7f:bf:ff:02:5a:a2:4d:8e: bb:5c:27:52:38:46:8b:b4:cd:56:c9:ae:89:45:4a:54:f6:19: 2e:7b:13:09:33:66:9b:c3:e3:3b:c6:13:d1:d1:b2:7b:a8:30: d4:03:e9:2a:9d:6e:b6:f1:c8:86:5a:34:53:5c:43:ab:08:e6: 2a:3e:2c:57:cc:24:90:61:bc:c2:cd:2c:84:95:e2:d5:ba:52: 25:9e:ee:17:05:03:09:c9:9b:df:c7:e8:44:1e:cf:3e:7e:bf: 60:f1:64:31:8d:11:b1:65:a3:43:a9:75:2c:c1:e6:8d:6a:8e: eb:ff:6e:21:87:97:b3:d5:49:20:90:41:73:46:71:98:e6:20: 93:a6:34:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusrrcH1MjlrZiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjQ3OGZmMmQtZWIzZS00ZTQ0LTk2OGEtMjIwMmNkZDQ1YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEml68A6WSGBgj5eEhp6d1AazCeWFxcL1mPS HyYikn5VNasxMw7ITY+lPxEdGZ9VBPGHLaykX8h6Oehme/aNMd8aQOl6p9gXSclT FRHB6zkyUucLF7MWKvp4A3fdTsBXMsiILboGxgZOYFR6ckHO0x/Hm+Pqm700aBKr Samh6UYE3LDWbrNjJ568g7gDhVAJaVbNjJmAgVNiGuN70rmGxUf3bBQMlpNtWxu0 hSeAhsy6ESwNdJb20td3E1wh7ZSjnP/vhsYNV3R5UaWm7OaHdEJ2Xf11YGPGCOOD NXZOfL0j4r463tRO6ja74ur7CQD010YO2vO9puXodEK5UVBKMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcpPG2Ate2mD01MEA4S156WWgGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWNlODU3NDItMGVkNC0z MjUwLWJjMjMtYmQzNzc3OGJhMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXLo4MTQF8SzS6+EWz1rLFmb1+WHkSwHE9R29Lloc1UeBHin3HcdJS8 u+hH2UkcuzEAIE53WpwFuJ4foWIBpwZmtXfs1E9R1mt7OpkgCPYBQyNOPrMAD+5e Iin/tZnDYdsLMZ0RlyvOjZ3Mq6/C3PfM1r1FT+Z/v/8CWqJNjrtcJ1I4Rou0zVbJ rolFSlT2GS57EwkzZpvD4zvGE9HRsnuoMNQD6SqdbrbxyIZaNFNcQ6sI5io+LFfM JJBhvMLNLISV4tW6UiWe7hcFAwnJm9/H6EQezz5+v2DxZDGNEbFlo0OpdSzB5o1q juv/biGHl7PVSSCQQXNGcZjmIJOmNJ8= -----END CERTIFICATE-----Generated at Sun May 4 13:32:21 2025 by rpki-client