$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25483ce1-289a-3987-973e-237a84ba075f.roa File: 25483ce1-289a-3987-973e-237a84ba075f.roa (raw, json) Hash identifier: qlfEKDOMHgFQ7U9SY71rvyDaquV0aZdQ3rwQzZP28us= Subject key identifier: 6C:A8:72:40:2F:6C:2E:81:36:EA:8D:7D:3F:80:16:FA:BE:99:C5:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122876673197D4FDA04080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25483ce1-289a-3987-973e-237a84ba075f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:28:76:67:31:97:d4:fd:a0:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=12f69131-7232-4a46-b471-31f62c593615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:08:20:b5:67:2d:7d:fc:76:d4:21:97:cd:28: 50:92:5e:b5:8a:5f:ad:85:3f:fa:95:50:60:80:58: 84:ad:08:f5:2d:c2:79:a3:fb:2d:0c:86:b6:17:20: cc:6b:3c:6b:27:61:9d:ed:e0:b5:4d:58:3e:02:f8: ff:5b:18:6e:a2:08:45:f4:70:7f:21:16:64:1f:68: 0f:19:9b:7c:57:38:39:3e:1c:a2:2f:7a:ea:97:d4: 4c:60:1c:e8:33:45:28:ec:bc:70:9a:ef:71:e4:1e: ae:9a:a7:8a:a4:a5:a2:7d:26:26:64:56:74:67:5a: 09:07:69:e9:76:b5:a5:b3:aa:c0:0d:10:df:0c:8e: fb:3f:71:ae:ce:4d:c1:78:c3:17:c6:75:0e:37:30: d5:bd:4d:cf:ab:52:a6:a3:9d:71:ff:f4:8c:5f:29: 9a:5c:8c:c1:06:51:c0:3b:8a:2f:af:82:0a:f4:8c: fb:84:fe:cf:94:d0:d0:66:e0:1b:c9:8e:9c:0c:6b: d5:05:6f:c6:87:ef:b1:32:08:9f:3f:6b:5b:3c:0f: 98:77:a2:65:38:55:cc:42:62:a7:58:52:03:1f:59: ea:3b:fb:1f:8c:af:33:35:99:b8:98:39:6e:85:f1: c4:a8:d4:68:de:2b:ff:07:a7:59:a8:a1:34:0c:9a: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A8:72:40:2F:6C:2E:81:36:EA:8D:7D:3F:80:16:FA:BE:99:C5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25483ce1-289a-3987-973e-237a84ba075f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b4:dc:6d:9f:d0:ab:d0:f9:76:93:dd:a4:c8:fd:a2:4d:24: ac:21:4b:46:4d:c2:6a:83:96:87:d9:6e:fc:ba:d8:d1:1c:1c: b2:e8:51:d0:35:b1:b0:98:a9:3a:20:34:7d:96:8d:30:0f:95: e7:f8:c7:5a:41:57:ed:08:9a:6b:a5:82:40:9f:ff:40:77:87: c9:88:22:c0:02:0c:ae:56:33:ce:86:84:d9:d1:cf:9f:7a:d4: 26:17:27:1d:e8:cd:7a:9c:82:73:29:73:2b:28:52:b4:e5:88: af:7a:01:26:f6:ae:28:50:99:53:1e:67:e2:7d:f8:e7:63:08: 20:7c:bf:42:d8:99:19:b4:e7:77:91:68:45:fc:fc:7f:95:b5: 6a:82:2f:06:a4:cb:c3:0a:13:87:8c:be:81:25:02:bc:e1:5b: 97:c2:a0:04:01:f5:be:b4:ff:06:57:76:3a:54:29:32:1b:af: 36:fa:fd:83:f5:a8:4f:24:cc:c8:fb:28:10:f5:a7:b7:3f:ec: 28:7f:13:c7:d8:58:8f:33:27:ac:ae:4b:d3:c8:8f:a6:5f:bf: 31:be:13:6f:5e:f7:90:43:7a:f8:e3:3c:d7:2c:88:dd:3f:2a: 8d:cd:ea:35:80:05:24:52:3e:57:34:c6:29:5f:10:83:bf:a1: 2b:65:5e:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEih2ZzGX1P2gQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTJmNjkxMzEtNzIzMi00YTQ2LWI0NzEtMzFmNjJjNTkzNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QggtWctffx21CGXzShQkl61il+thT/6lVBg gFiErQj1LcJ5o/stDIa2FyDMazxrJ2Gd7eC1TVg+Avj/WxhuoghF9HB/IRZkH2gP GZt8Vzg5PhyiL3rql9RMYBzoM0Uo7Lxwmu9x5B6umqeKpKWifSYmZFZ0Z1oJB2np drWls6rADRDfDI77P3Guzk3BeMMXxnUONzDVvU3Pq1Kmo51x//SMXymaXIzBBlHA O4ovr4IK9Iz7hP7PlNDQZuAbyY6cDGvVBW/Gh++xMgifP2tbPA+Yd6JlOFXMQmKn WFIDH1nqO/sfjK8zNZm4mDluhfHEqNRo3iv/B6dZqKE0DJq42wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyockAvbC6BNuqNfT+AFvq+mcVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjU0ODNjZTEtMjg5YS0z OTg3LTk3M2UtMjM3YTg0YmEwNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm03G2f0KvQ+XaT3aTI/aJNJKwhS0ZNwmqDlofZbvy62NEcHLLoUdA1 sbCYqTogNH2WjTAPlef4x1pBV+0ImmulgkCf/0B3h8mIIsACDK5WM86GhNnRz596 1CYXJx3ozXqcgnMpcysoUrTliK96ASb2rihQmVMeZ+J9+OdjCCB8v0LYmRm053eR aEX8/H+VtWqCLwaky8MKE4eMvoElArzhW5fCoAQB9b60/wZXdjpUKTIbrzb6/YP1 qE8kzMj7KBD1p7c/7Ch/E8fYWI8zJ6yuS9PIj6ZfvzG+E29e95BDevjjPNcsiN0/ Ko3N6jWABSRSPlc0xilfEIO/oStlXtE= -----END CERTIFICATE-----Generated at Wed Aug 6 13:07:35 2025 by rpki-client