$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa File: 2496aed2-6643-3205-9f31-bcdb349f0efa.roa (raw, json) Hash identifier: KJNiUMMu+U+1n5a2hMiVBfpqakDYZ4V1qTCnQGXp9qM= Subject key identifier: 64:B3:02:D1:AD:56:D1:27:4B:4E:84:F6:B4:E4:AF:E3:C8:9E:E0:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F8E4D5FBA0EB01739AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f8:e4:d5:fb:a0:eb:01:73:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=0e6b4e44-0beb-4339-bc3b-9891b0ec3c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b8:32:02:34:9f:b5:58:40:c3:c0:94:5a:bb: 6d:7e:39:1c:f9:ef:4b:1d:c6:d4:f8:bf:f2:b5:36: c9:2b:3a:af:5d:28:4e:a6:31:fb:f7:78:48:59:c9: e4:63:91:77:e2:03:54:e5:c2:8b:65:ca:71:03:5b: 05:3c:0b:36:57:e1:42:d3:c3:4e:f7:e8:fa:ef:e4: 46:af:6d:a6:6f:6d:5e:78:85:d9:b0:87:73:0b:67: ca:5d:0e:f4:aa:82:5a:b3:56:25:64:f4:ba:7f:9c: cc:ca:79:3d:dc:d9:f6:c1:dd:1d:09:79:6d:d7:d8: 4d:a4:9b:69:b0:71:4b:96:26:a4:46:5c:91:15:01: d6:5d:c3:4e:53:cb:41:8f:d2:29:4a:3d:f2:be:bb: 53:22:df:de:a4:a5:76:96:05:46:86:fd:ea:5e:f8: 67:ea:3b:99:d4:23:ae:c1:1a:3b:1f:5b:b4:e5:57: 7e:1a:e4:77:3e:c0:9d:ef:27:01:1d:dd:77:21:95: 22:d5:12:51:f6:db:c2:1d:30:8e:96:a4:17:ba:bc: 0f:3e:fc:7c:47:12:2b:b2:ad:5c:c6:fa:55:c8:a6: 3b:85:97:bf:ff:34:61:9c:20:ac:e1:c7:cb:6d:9a: b3:79:5e:af:95:29:b8:3c:c4:54:b3:f6:ab:76:2c: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B3:02:D1:AD:56:D1:27:4B:4E:84:F6:B4:E4:AF:E3:C8:9E:E0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:48:92:97:28:68:1e:c8:a5:9c:02:30:da:79:9f:3e:8c:1a: 6d:78:d1:74:4f:19:f3:be:96:98:36:44:ed:6a:a1:a4:06:56: a0:6d:ee:80:8d:51:e6:21:ae:cb:07:e1:1a:6d:bc:b3:7c:41: a7:1a:6d:83:17:be:f0:16:39:48:71:12:20:df:f8:f9:87:3d: c2:90:d2:20:d3:01:cd:ec:1a:48:a9:30:cb:26:92:b3:60:ea: 70:a6:d9:34:de:2d:f2:48:70:45:8f:25:78:45:cb:a5:0f:6d: 45:92:62:f5:b8:99:63:ff:ff:03:8e:4f:b3:de:69:63:4d:21: d2:20:82:3f:e2:7f:2d:db:77:73:ea:0c:5b:0c:84:8e:1c:cc: 79:32:d4:a1:c0:61:26:52:7b:97:1c:63:b6:1f:0e:e6:a2:44: 3e:38:d6:42:92:82:82:29:b7:fb:93:ff:3c:d1:57:d1:55:c9: 15:c0:a1:be:6e:35:e5:79:b3:91:1b:36:15:7d:a5:59:0d:06: 85:3f:0c:5e:0f:10:b7:4a:2a:28:8f:7e:02:80:f5:f5:ea:22: 15:45:59:73:bd:fb:1c:7a:5d:b6:ff:ff:08:08:6f:a9:ed:1e: 34:91:3f:8a:f6:82:08:0b:25:e3:35:d1:92:8e:6f:84:25:d2: 8e:93:97:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPjk1fug6wFzmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MGU2YjRlNDQtMGJlYi00MzM5LWJjM2ItOTg5MWIwZWMzYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7gyAjSftVhAw8CUWrttfjkc+e9LHcbU+L/y tTbJKzqvXShOpjH793hIWcnkY5F34gNU5cKLZcpxA1sFPAs2V+FC08NO9+j67+RG r22mb21eeIXZsIdzC2fKXQ70qoJas1YlZPS6f5zMynk93Nn2wd0dCXlt19hNpJtp sHFLliakRlyRFQHWXcNOU8tBj9IpSj3yvrtTIt/epKV2lgVGhv3qXvhn6juZ1COu wRo7H1u05Vd+GuR3PsCd7ycBHd13IZUi1RJR9tvCHTCOlqQXurwPPvx8RxIrsq1c xvpVyKY7hZe//zRhnCCs4cfLbZqzeV6vlSm4PMRUs/ardiykTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSzAtGtVtEnS06E9rTkr+PInuC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjQ5NmFlZDItNjY0My0z MjA1LTlmMzEtYmNkYjM0OWYwZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdIkpcoaB7IpZwCMNp5nz6MGm140XRPGfO+lpg2RO1qoaQGVqBt7oCN UeYhrssH4RptvLN8QacabYMXvvAWOUhxEiDf+PmHPcKQ0iDTAc3sGkipMMsmkrNg 6nCm2TTeLfJIcEWPJXhFy6UPbUWSYvW4mWP//wOOT7PeaWNNIdIggj/ify3bd3Pq DFsMhI4czHky1KHAYSZSe5ccY7YfDuaiRD441kKSgoIpt/uT/zzRV9FVyRXAob5u NeV5s5EbNhV9pVkNBoU/DF4PELdKKiiPfgKA9fXqIhVFWXO9+xx6Xbb//wgIb6nt HjSRP4r2gggLJeM10ZKOb4Ql0o6Tl5I= -----END CERTIFICATE-----Generated at Mon Aug 4 19:10:30 2025 by rpki-client