$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0db6d064-acdb-3ab9-ac6c-6b5952d692e3.roa File: 0db6d064-acdb-3ab9-ac6c-6b5952d692e3.roa (raw, json) Hash identifier: 2Zh41/dY8v+TAL4+PNwzrfo6FthGhtDtoc5CGlMM4AM= Subject key identifier: 5C:F6:E8:DC:CE:00:69:63:7F:FD:D7:6F:6E:42:CE:38:62:B0:FB:38 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841230FB46E20CBCD2675C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0db6d064-acdb-3ab9-ac6c-6b5952d692e3.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:30:fb:46:e2:0c:bc:d2:67:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ecf602bf-95b0-4eeb-83de-cb3fd9d468c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e6:0e:e9:f6:31:c5:45:e1:a7:04:88:62:54: 6d:0f:5b:04:6c:e3:47:a0:f3:17:07:2c:e0:21:25: 8d:2a:07:f2:34:44:73:ce:25:2e:f6:3f:1c:3c:3f: 05:32:bd:44:5e:b1:68:42:16:65:c9:c1:fc:1a:81: 3c:7b:2f:8c:77:92:66:f1:19:ee:46:d8:5b:c0:7c: 83:52:e5:37:10:7d:07:a2:34:a0:a2:f9:0e:60:13: 2e:a1:db:01:15:40:b9:32:5f:71:9c:6a:5b:3f:eb: 8b:28:f9:7b:8b:64:1d:01:e0:2a:ee:ac:b0:cc:9d: 58:e6:e9:24:b7:fd:7c:81:01:e5:b7:71:4e:3e:fc: 21:a4:e0:c0:3e:08:2f:b5:3b:d9:df:91:c0:9c:1c: d0:ac:e6:60:29:86:c8:01:07:44:54:96:98:ad:45: 55:a2:08:8e:f4:92:fb:af:96:31:46:af:f2:8e:01: b9:fa:cb:78:86:f1:f7:6b:97:bf:46:e5:de:69:89: e6:84:c4:64:6b:1f:0a:17:42:e2:78:e7:39:c5:47: 9c:cd:7d:c8:c3:98:38:f3:be:3b:7d:4e:66:ed:65: bb:41:cd:e9:da:20:f0:d4:dd:0c:d4:76:f0:8e:ee: a7:e1:6c:85:05:86:37:4e:71:f5:db:5f:8a:37:11: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:E8:DC:CE:00:69:63:7F:FD:D7:6F:6E:42:CE:38:62:B0:FB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0db6d064-acdb-3ab9-ac6c-6b5952d692e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2a:24:63:86:2d:64:a8:80:9f:27:6d:f4:12:bb:50:76:c6: c4:19:79:59:74:24:ee:27:d1:62:7b:eb:b1:0e:cd:a3:86:5a: bb:4d:79:10:8e:d9:a8:0a:27:50:0f:64:c2:99:dd:af:4b:59: d8:cf:b1:82:df:3b:7d:ea:5a:93:4c:42:d1:24:1f:70:5d:d8: bb:8f:a9:8c:41:b6:e9:e3:29:52:a5:18:75:14:e9:eb:9b:83: 33:13:33:3b:2c:8a:a8:ac:98:ec:89:14:1b:d2:f2:0f:74:27: 78:f4:dc:36:de:bf:01:1b:23:85:f2:b6:64:ef:31:30:06:01: a2:ff:f0:ba:08:ea:3b:d9:0f:80:73:15:69:b4:3e:3c:3d:fd: 49:e1:f8:9f:9b:4c:e0:31:2a:35:63:c0:d5:13:07:b9:62:81: fb:38:f7:fe:45:a8:79:ac:25:5d:3e:34:bd:d5:61:3a:02:08: e2:28:2f:1a:20:37:63:bb:dc:94:4f:ba:ac:f4:5d:55:94:57: 2a:6c:b0:f0:98:c9:20:3c:e0:f9:38:79:0d:53:00:35:11:1d: b9:58:ce:d5:b2:1c:df:9f:8f:cb:30:cd:87:47:3a:08:31:44: 9e:fc:33:d3:fd:8c:7e:51:3b:cf:e4:48:fe:6a:b3:c0:3b:26: fc:b6:d3:21 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqEEjD7RuIMvNJnXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWNmNjAyYmYtOTViMC00ZWViLTgzZGUtY2IzZmQ5ZDQ2OGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuYO6fYxxUXhpwSIYlRtD1sEbONHoPMXByzg ISWNKgfyNERzziUu9j8cPD8FMr1EXrFoQhZlycH8GoE8ey+Md5Jm8RnuRthbwHyD UuU3EH0HojSgovkOYBMuodsBFUC5Ml9xnGpbP+uLKPl7i2QdAeAq7qywzJ1Y5ukk t/18gQHlt3FOPvwhpODAPggvtTvZ35HAnBzQrOZgKYbIAQdEVJaYrUVVogiO9JL7 r5YxRq/yjgG5+st4hvH3a5e/RuXeaYnmhMRkax8KF0LieOc5xUeczX3Iw5g48747 fU5m7WW7Qc3p2iDw1N0M1Hbwju6n4WyFBYY3TnH121+KNxF/JwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFz26NzOAGljf/3Xb25CzjhisPs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGRiNmQwNjQtYWNkYi0z YWI5LWFjNmMtNmI1OTUyZDY5MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBjvowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUSokY4YtZKiAnydt9BK7UHbGxBl5WXQk7ifRYnvrsQ7No4Zau015EI7Z qAonUA9kwpndr0tZ2M+xgt87fepak0xC0SQfcF3Yu4+pjEG26eMpUqUYdRTp65uD MxMzOyyKqKyY7IkUG9LyD3QnePTcNt6/ARsjhfK2ZO8xMAYBov/wugjqO9kPgHMV abQ+PD39SeH4n5tM4DEqNWPA1RMHuWKB+zj3/kWoeawlXT40vdVhOgII4igvGiA3 Y7vclE+6rPRdVZRXKmyw8JjJIDzg+Th5DVMANREduVjO1bIc35+PyzDNh0c6CDFE nvwz0/2MflE7z+RI/mqzwDsm/LbTIQ== -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:15 2025 by rpki-client