$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa File: fa32539a-0dbd-3810-a010-b81c403c8b41.roa (raw, json) Hash identifier: tylW5LDs2ec/j0HuvQLHK9q8yjbUcSFhnfhomCCcPnM= Subject key identifier: 1D:1B:E2:AB:52:52:45:45:B4:99:6E:CC:38:72:4B:EC:AD:F3:49:A3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABCB078CC31DDA33F5468 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bc:b0:78:cc:31:dd:a3:3f:54:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=96023eb4-8056-4801-a7e2-43d329e2be26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:1e:07:88:71:21:2e:f5:47:cb:09:b0:41: 0a:3c:41:93:f8:43:a6:c3:2a:4e:06:0d:04:5f:01: b7:d5:c4:0d:01:d6:38:19:db:b6:0d:b9:73:8c:69: c3:17:a4:2b:99:e0:6c:4f:69:93:16:91:72:07:ac: 2a:c8:be:48:97:03:38:e8:be:53:a5:e4:7e:de:17: b7:6c:7a:a9:f2:35:99:c5:cd:2c:32:b1:47:d5:d4: eb:4d:18:aa:6f:76:ee:55:c5:01:de:cd:44:bb:3e: 15:b2:8e:d5:c8:50:ac:0b:63:4e:e6:ed:a6:3e:eb: 3f:f4:af:07:07:46:be:36:6c:33:45:cd:e2:cf:87: a0:27:f0:4a:4f:93:58:20:07:bd:8a:1b:d4:ef:33: 01:bd:94:2b:cf:09:0c:c3:8b:41:a5:b2:35:87:e2: c9:a2:9f:8d:e5:91:d9:8f:16:61:eb:f5:e1:a1:69: cb:a1:9a:63:09:c4:e0:a8:ec:06:01:d3:34:bb:76: 98:5c:bd:21:25:08:e9:21:ed:8b:c7:ca:ce:ff:7a: b2:89:0b:78:c7:ae:cb:5e:5f:0d:a1:71:0c:d8:ae: 8c:7e:32:d9:b6:ad:42:74:bc:a6:3a:c5:3a:cc:d5: dd:b4:4d:e4:aa:c1:e3:26:e7:7c:46:d6:ea:8d:97: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1B:E2:AB:52:52:45:45:B4:99:6E:CC:38:72:4B:EC:AD:F3:49:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e7:32:5f:e0:b7:f1:b9:33:ba:3a:ba:46:80:77:95:21:2a: ca:51:eb:d1:c1:1b:56:5d:a9:68:c0:0e:2e:25:08:93:9d:ed: ce:22:10:e5:cb:f0:0c:25:b5:d8:ca:d9:ed:9f:d7:1d:96:90: ad:3a:78:6d:c9:c2:c1:4c:22:e5:ae:be:60:5f:87:95:97:c6: 6d:58:8b:b0:33:66:a2:66:25:a2:aa:77:5b:f6:5d:0a:9f:98: fa:ba:68:c7:77:3e:f1:9b:c0:04:fa:e0:ef:38:81:c2:a4:44: a1:2f:2a:4b:1d:60:2c:ad:0d:96:c4:b9:2b:23:e8:de:ce:25: 3d:fe:a1:f2:63:59:90:8a:8a:bc:05:b9:8b:02:4e:25:5c:60: 03:99:63:e2:e8:94:a6:82:f6:52:2d:02:d7:e1:e2:d8:21:fe: 60:3c:ff:5f:7a:aa:cb:fa:e6:32:d5:7a:ca:e8:b9:b2:ed:6d: 43:75:55:ec:f9:ad:92:ed:1e:a7:26:0f:90:d6:bd:3e:4f:e5: 5e:6c:94:37:a1:81:6e:07:27:fb:e9:ae:34:5a:fa:69:74:a6: e3:2a:d6:a4:93:88:10:b7:e2:c7:10:45:cb:91:e3:fe:4e:b2: 7d:85:b1:4d:49:b1:c8:3f:e5:fa:ba:4f:e7:d2:51:c4:0e:27: fc:42:d1:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuryweMwx3aM/VGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTYwMjNlYjQtODA1Ni00ODAxLWE3ZTItNDNkMzI5ZTJiZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6keB4hxIS71R8sJsEEKPEGT+EOmwypOBg0E XwG31cQNAdY4Gdu2DblzjGnDF6QrmeBsT2mTFpFyB6wqyL5IlwM46L5TpeR+3he3 bHqp8jWZxc0sMrFH1dTrTRiqb3buVcUB3s1Euz4Vso7VyFCsC2NO5u2mPus/9K8H B0a+NmwzRc3iz4egJ/BKT5NYIAe9ihvU7zMBvZQrzwkMw4tBpbI1h+LJop+N5ZHZ jxZh6/XhoWnLoZpjCcTgqOwGAdM0u3aYXL0hJQjpIe2Lx8rO/3qyiQt4x67LXl8N oXEM2K6MfjLZtq1CdLymOsU6zNXdtE3kqsHjJud8RtbqjZc46wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0b4qtSUkVFtJluzDhyS+yt80mjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmEzMjUzOWEtMGRiZC0z ODEwLWEwMTAtYjgxYzQwM2M4YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnnMl/gt/G5M7o6ukaAd5UhKspR69HBG1ZdqWjADi4lCJOd7c4iEOXL 8AwltdjK2e2f1x2WkK06eG3JwsFMIuWuvmBfh5WXxm1Yi7AzZqJmJaKqd1v2XQqf mPq6aMd3PvGbwAT64O84gcKkRKEvKksdYCytDZbEuSsj6N7OJT3+ofJjWZCKirwF uYsCTiVcYAOZY+LolKaC9lItAtfh4tgh/mA8/196qsv65jLVesroubLtbUN1Vez5 rZLtHqcmD5DWvT5P5V5slDehgW4HJ/vprjRa+ml0puMq1qSTiBC34scQRcuR4/5O sn2FsU1Jscg/5fq6T+fSUcQOJ/xC0es= -----END CERTIFICATE-----Generated at Sun May 4 13:25:18 2025 by rpki-client