$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa File: 2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa (raw, json) Hash identifier: jYCoYxbaLu5uYxvfA8fPnrhQ9b0DFo7gW8y1+uWaXM4= Subject key identifier: FA:C9:58:46:CB:75:A9:17:1C:77:CB:09:40:9E:7F:EC:97:95:AE:25 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD013F78E4B45CA2E6CC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d0:13:f7:8e:4b:45:ca:2e:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e62e2981-cfb1-406e-ace2-d3787a9d57b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b4:7d:68:49:29:d6:cf:16:c1:32:b5:2f:39: 4f:9e:88:cb:5e:c0:2a:d6:ba:dd:2a:76:5d:32:59: 6e:29:20:a2:55:17:3b:a5:91:df:e2:16:fc:ff:4b: 29:7c:81:14:6e:66:64:cd:44:fc:45:ce:47:01:fc: 06:9c:d0:bd:a7:5c:b3:bc:ca:9b:51:88:1b:b0:75: 12:4b:73:1e:8d:05:ff:d2:81:6d:86:8b:f2:5c:7b: c4:d7:0b:16:52:80:fa:54:ac:17:73:45:f4:13:3a: 95:82:1f:b6:8c:e0:72:1b:27:06:f0:53:0b:6e:77: 7c:e8:dc:8b:17:56:94:d0:70:4c:43:9d:cc:70:2d: c8:72:6f:b4:61:dc:f9:78:cf:9a:3f:6c:62:ec:06: ff:ad:55:5a:15:c3:75:3b:94:6b:29:4b:1f:eb:17: d9:4f:ff:da:ae:e6:4c:d7:b4:09:37:9e:47:a6:91: be:f3:63:eb:c2:16:f9:80:52:cd:1e:ff:b7:a4:c5: af:7b:25:dd:94:8e:3a:3b:87:0c:16:e2:a2:cd:78: 4c:06:75:56:94:77:b0:e4:61:d0:32:be:30:6c:a2: 95:50:ab:ff:8e:3d:b1:9b:bc:52:67:4c:4b:25:ae: 8d:ba:65:92:e3:57:17:b6:9e:6e:c2:33:01:71:44: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C9:58:46:CB:75:A9:17:1C:77:CB:09:40:9E:7F:EC:97:95:AE:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4e:0b:d1:0c:0e:79:8d:e1:96:8e:2d:4e:40:6a:ab:97:0f: 4a:e2:56:cd:b7:5c:16:78:b9:ee:18:bb:b4:80:e8:a8:e7:6e: 75:6d:eb:34:19:04:f9:f4:80:78:0f:5e:55:d8:84:e8:fd:7b: 3f:11:f8:2e:ff:59:23:0f:74:88:cc:f9:a7:6b:fe:8d:21:17: e1:58:24:9b:6b:a4:d7:85:75:57:e5:33:2c:f8:13:bf:f8:3d: d8:c8:51:85:0d:a0:ae:24:0d:e3:90:97:2f:3f:a0:58:44:31: 25:0a:8e:67:33:07:d9:59:55:d2:ce:ea:f7:f3:bc:f5:fe:85: 37:3f:f2:6d:66:5e:11:a2:80:3b:76:42:70:26:c8:46:4b:6b: d2:52:20:b7:5b:de:6b:50:72:38:bc:5d:24:ed:41:40:43:89: 2d:14:18:48:99:51:d8:4b:f1:5d:14:b9:5a:6c:56:d3:2b:cf: 7d:b4:77:70:b1:04:bd:64:0e:d4:94:c4:9a:e1:51:73:be:fe: ae:c4:90:18:3a:e8:08:30:c2:02:47:71:df:38:93:c8:31:2e: 2a:94:5e:1d:12:79:ac:84:a7:07:5b:2c:33:f8:66:04:0d:5c: 0e:57:22:6f:ae:b1:38:74:fa:be:24:8c:bd:31:ab:3e:7f:a3: 16:dc:d3:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutAT945LRcoubMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTYyZTI5ODEtY2ZiMS00MDZlLWFjZTItZDM3ODdhOWQ1N2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrR9aEkp1s8WwTK1LzlPnojLXsAq1rrdKnZd MlluKSCiVRc7pZHf4hb8/0spfIEUbmZkzUT8Rc5HAfwGnNC9p1yzvMqbUYgbsHUS S3MejQX/0oFthovyXHvE1wsWUoD6VKwXc0X0EzqVgh+2jOByGycG8FMLbnd86NyL F1aU0HBMQ53McC3Icm+0Ydz5eM+aP2xi7Ab/rVVaFcN1O5RrKUsf6xfZT//aruZM 17QJN55HppG+82Prwhb5gFLNHv+3pMWveyXdlI46O4cMFuKizXhMBnVWlHew5GHQ Mr4wbKKVUKv/jj2xm7xSZ0xLJa6NumWS41cXtp5uwjMBcUSDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrJWEbLdakXHHfLCUCef+yXla4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg4OWEzZWYtMjgxYS0z MDhlLWE4YjAtODJkOWI5YjJhMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdOC9EMDnmN4ZaOLU5AaquXD0riVs23XBZ4ue4Yu7SA6KjnbnVt6zQZ BPn0gHgPXlXYhOj9ez8R+C7/WSMPdIjM+adr/o0hF+FYJJtrpNeFdVflMyz4E7/4 PdjIUYUNoK4kDeOQly8/oFhEMSUKjmczB9lZVdLO6vfzvPX+hTc/8m1mXhGigDt2 QnAmyEZLa9JSILdb3mtQcji8XSTtQUBDiS0UGEiZUdhL8V0UuVpsVtMrz320d3Cx BL1kDtSUxJrhUXO+/q7EkBg66AgwwgJHcd84k8gxLiqUXh0SeayEpwdbLDP4ZgQN XA5XIm+usTh0+r4kjL0xqz5/oxbc03o= -----END CERTIFICATE-----Generated at Sat Apr 26 20:51:20 2025 by rpki-client