$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa File: 237250b7-86de-3771-94f1-0e5037bc3109.roa (raw, json) Hash identifier: xz1Y+ypPcZ1tQbWT1mIPFmkW5zCqn6V4wF+Rl9UqAmY= Subject key identifier: E1:46:13:BA:6B:56:1F:10:7F:86:F7:42:AC:4F:99:EF:77:35:11:D8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841223840CBE3CFB305F7580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:23:84:0c:be:3c:fb:30:5f:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d551da94-7599-48d0-b021-781e6f34e783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a1:ee:1f:a8:bd:87:21:d2:5c:1f:d0:c2:6c: 5f:29:6d:60:9e:e7:fc:ee:6f:da:2a:6c:87:de:38: 3f:ce:51:63:3e:8c:ff:ae:9b:09:f5:d1:40:8d:c4: ce:45:cd:09:b0:bd:e7:33:7b:a7:a2:22:cd:b2:15: 49:4b:c1:c4:52:39:07:20:e0:80:ec:22:3e:94:03: 3e:a8:d9:21:b2:b5:81:93:38:13:2e:e4:3d:f8:aa: db:05:4f:18:37:97:e7:94:0a:15:5a:46:68:97:b1: 48:4c:fb:c2:90:62:c9:12:1c:75:1e:0c:a8:23:fa: f8:6b:a5:92:6d:df:f3:ba:1f:b0:3d:7e:1e:d3:71: a3:26:58:84:97:f3:20:81:97:96:89:10:ea:ba:df: 8e:5f:72:34:37:83:e4:da:ba:57:c7:a4:38:c6:72: dd:5d:7d:6a:9d:d1:ad:06:3e:29:fa:f9:05:b2:d0: ff:1f:99:10:e1:f8:a0:18:2c:60:85:c1:0b:2c:87: ce:39:0b:49:e3:63:30:51:11:bd:16:4a:7d:d6:67: 0b:34:03:32:c2:f3:54:22:16:ba:09:af:15:c5:9b: fd:12:b9:c8:08:45:0b:4c:9e:52:1c:a4:ca:5e:10: f6:78:c0:6a:99:9f:0f:44:d6:ee:d9:c7:39:b0:b5: fc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:46:13:BA:6B:56:1F:10:7F:86:F7:42:AC:4F:99:EF:77:35:11:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3e:f1:de:ab:ac:70:0c:b8:22:9c:fc:d2:49:3b:f2:77:dc: bc:9a:41:6f:61:76:5c:4b:6b:70:42:5f:bd:cd:2a:a1:1e:1a: 94:2d:db:05:b9:cd:90:2b:64:35:a4:7a:75:0a:ce:bd:2c:b2: af:c7:c6:b5:03:17:54:f9:56:17:d7:b8:1b:4f:4d:88:4f:e9: e3:b1:ac:e8:b7:9c:bb:16:67:a9:06:84:31:44:c3:46:05:c2: a6:4f:72:bc:7d:7b:28:2b:a0:37:63:2d:bc:e1:30:51:81:58: 94:d3:5a:c1:65:b6:35:15:c5:9f:24:33:6f:8f:67:15:9e:a9: 96:15:db:54:ef:bc:7c:e7:dc:ae:ef:f6:6c:f4:5e:54:68:21: f1:5d:5b:0a:5e:59:6c:82:a5:15:54:36:ba:6a:83:e7:69:2b: 65:c2:46:0d:09:28:fa:4a:c2:82:59:6d:fe:6c:2e:bd:eb:8e: 01:30:9d:aa:ba:29:94:ab:e9:91:4b:aa:a8:05:dc:04:df:1e: d0:bc:9c:82:03:06:6e:50:e2:69:60:cf:63:b2:11:c2:cd:b4: c0:5b:45:93:3a:97:fb:55:6c:2b:c7:b5:ad:75:d1:ea:f0:7c: 9f:bb:4c:af:b6:0a:67:18:c7:8b:a6:6d:46:ea:5f:5a:d7:40: 17:84:49:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiOEDL48+zBfdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDU1MWRhOTQtNzU5OS00OGQwLWIwMjEtNzgxZTZmMzRlNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKHuH6i9hyHSXB/QwmxfKW1gnuf87m/aKmyH 3jg/zlFjPoz/rpsJ9dFAjcTORc0JsL3nM3unoiLNshVJS8HEUjkHIOCA7CI+lAM+ qNkhsrWBkzgTLuQ9+KrbBU8YN5fnlAoVWkZol7FITPvCkGLJEhx1HgyoI/r4a6WS bd/zuh+wPX4e03GjJliEl/MggZeWiRDqut+OX3I0N4Pk2rpXx6Q4xnLdXX1qndGt Bj4p+vkFstD/H5kQ4figGCxghcELLIfOOQtJ42MwURG9Fkp91mcLNAMywvNUIha6 Ca8VxZv9ErnICEULTJ5SHKTKXhD2eMBqmZ8PRNbu2cc5sLX8+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFGE7prVh8Qf4b3QqxPme93NRHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjM3MjUwYjctODZkZS0z NzcxLTk0ZjEtMGU1MDM3YmMzMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA+8d6rrHAMuCKc/NJJO/J33LyaQW9hdlxLa3BCX73NKqEeGpQt2wW5 zZArZDWkenUKzr0ssq/HxrUDF1T5VhfXuBtPTYhP6eOxrOi3nLsWZ6kGhDFEw0YF wqZPcrx9eygroDdjLbzhMFGBWJTTWsFltjUVxZ8kM2+PZxWeqZYV21TvvHzn3K7v 9mz0XlRoIfFdWwpeWWyCpRVUNrpqg+dpK2XCRg0JKPpKwoJZbf5sLr3rjgEwnaq6 KZSr6ZFLqqgF3ATfHtC8nIIDBm5Q4mlgz2OyEcLNtMBbRZM6l/tVbCvHta110erw fJ+7TK+2CmcYx4umbUbqX1rXQBeESaI= -----END CERTIFICATE-----Generated at Mon Aug 4 16:15:03 2025 by rpki-client