$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa File: 21c30bc2-e254-3dfc-8044-27631c929828.roa (raw, json) Hash identifier: W/V+Vc3sBHThJETFN05sZizx2mgDbIhdgrjZli6zTJA= Subject key identifier: 73:FC:F8:40:E2:2C:08:51:A8:CC:DE:C6:72:D1:BA:87:C2:89:55:6D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841234D9A4E048731D42F9A8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:34:d9:a4:e0:48:73:1d:42:f9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d1548a55-bb07-477e-b1a8-4f952a487aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2a:a8:d1:58:6e:53:6d:16:93:49:5a:ca:52: 7b:06:04:97:0d:76:23:1f:c9:36:bf:92:73:31:39: 47:58:ca:b9:cb:8b:d0:73:4e:2b:90:43:d1:ab:1f: d1:c7:7b:37:7a:f7:96:60:f3:ad:3f:f3:8a:7f:41: 47:fd:d2:81:34:d9:98:2e:94:3b:b5:78:9e:8e:8b: 87:d0:18:ad:5c:b3:e3:ce:4a:4c:3f:b7:30:59:71: cf:78:55:75:cb:59:41:ab:b6:47:7b:58:de:e1:da: 3d:f5:72:dc:2b:0f:84:af:10:f2:9f:11:5d:7c:38: fa:64:2c:10:e2:2c:86:02:44:db:97:53:ff:44:c0: 41:25:c8:78:4d:78:ba:31:d1:a4:9b:d9:34:a8:f3: 71:a3:64:fa:da:b4:c0:79:44:25:28:6f:43:dc:11: 66:96:12:03:6e:98:5d:01:23:5f:74:f0:b8:c7:3d: d2:a0:19:15:40:55:82:a5:ca:75:87:ff:a6:3e:d6: e3:be:5f:ae:8b:48:d7:5c:df:bf:4a:86:61:51:4f: c9:e8:09:14:b2:5a:7a:51:56:29:2b:fe:0a:82:f4: ca:c1:db:8e:bf:5f:52:61:b2:45:c8:d3:7d:f1:22: 06:44:c5:a8:8c:11:e9:65:99:8e:37:26:d3:a2:e3: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FC:F8:40:E2:2C:08:51:A8:CC:DE:C6:72:D1:BA:87:C2:89:55:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:49:5e:0c:e1:5b:75:12:39:5f:f3:5d:01:ef:23:7e:79:3a: 73:d2:04:cd:78:6d:bb:3c:42:98:00:94:c3:9e:89:30:69:ee: 48:48:1b:a3:2a:d4:15:19:5b:d2:80:fe:fb:a9:41:87:15:2c: db:55:d5:21:84:39:c8:69:7f:a2:f6:f8:05:72:ce:57:84:cf: 9b:f6:0a:ba:55:7c:da:d7:8f:51:ad:7c:c6:6a:2e:a7:5f:ac: fa:f5:b6:b8:be:e6:86:f7:f5:00:9a:fa:94:47:ad:fd:1c:94: 62:6a:84:e3:cf:91:dd:87:22:b5:f4:db:43:35:8b:15:72:2f: f5:b1:31:c2:cd:b5:27:5f:c6:60:a3:ca:8b:02:9a:89:88:57: bd:ce:24:24:43:a5:28:1e:49:4c:e1:32:e1:c5:ae:8d:89:05: 5a:bd:cc:38:53:82:8f:04:a3:d4:00:f6:ac:b7:ed:30:ff:54: fa:bf:5b:df:0e:b2:19:d8:f4:de:04:4e:a7:99:e7:22:46:d0: 1f:0c:4b:55:a4:26:0f:21:20:d2:4e:43:10:17:cd:1b:bc:97: df:57:5f:6a:58:2d:31:5f:c8:a9:47:e3:a3:78:b2:c0:79:6d: 7f:2e:11:1d:f3:da:ce:6b:47:47:5e:69:91:b9:b7:d2:43:a1: ef:2a:a1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjTZpOBIcx1C+agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDE1NDhhNTUtYmIwNy00NzdlLWIxYTgtNGY5NTJhNDg3YWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiqo0VhuU20Wk0laylJ7BgSXDXYjH8k2v5Jz MTlHWMq5y4vQc04rkEPRqx/Rx3s3eveWYPOtP/OKf0FH/dKBNNmYLpQ7tXiejouH 0BitXLPjzkpMP7cwWXHPeFV1y1lBq7ZHe1je4do99XLcKw+ErxDynxFdfDj6ZCwQ 4iyGAkTbl1P/RMBBJch4TXi6MdGkm9k0qPNxo2T62rTAeUQlKG9D3BFmlhIDbphd ASNfdPC4xz3SoBkVQFWCpcp1h/+mPtbjvl+ui0jXXN+/SoZhUU/J6AkUslp6UVYp K/4KgvTKwduOv19SYbJFyNN98SIGRMWojBHpZZmONybTouN3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP8+EDiLAhRqMzexnLRuofCiVVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjFjMzBiYzItZTI1NC0z ZGZjLTgwNDQtMjc2MzFjOTI5ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhJXgzhW3USOV/zXQHvI355OnPSBM14bbs8QpgAlMOeiTBp7khIG6Mq 1BUZW9KA/vupQYcVLNtV1SGEOchpf6L2+AVyzleEz5v2CrpVfNrXj1GtfMZqLqdf rPr1tri+5ob39QCa+pRHrf0clGJqhOPPkd2HIrX020M1ixVyL/WxMcLNtSdfxmCj yosCmomIV73OJCRDpSgeSUzhMuHFro2JBVq9zDhTgo8Eo9QA9qy37TD/VPq/W98O shnY9N4ETqeZ5yJG0B8MS1WkJg8hINJOQxAXzRu8l99XX2pYLTFfyKlH46N4ssB5 bX8uER3z2s5rR0deaZG5t9JDoe8qoQk= -----END CERTIFICATE-----Generated at Mon Aug 4 15:33:05 2025 by rpki-client