$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa File: 2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa (raw, json) Hash identifier: Cg0UVzi1QvPBgKpORbiBOToO0pjtfZQg7QgTzMU6uLU= Subject key identifier: 6A:16:CB:7B:F0:8D:A7:E7:AC:CF:42:4A:EC:78:E3:F8:ED:56:54:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118BEB8970283240FC24A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8b:eb:89:70:28:32:40:fc:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e6e4b47b-d4b0-42e2-82f0-dfb3418a7d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0b:a9:a5:d8:28:37:d8:52:e1:02:a8:b8:a2: be:8e:ec:8c:e3:f4:6c:a2:3d:73:ac:81:dc:f6:bf: 49:d4:9a:eb:6d:97:e2:7e:75:bc:d7:65:a4:4a:f9: 35:3c:09:5f:5d:4e:fb:e5:0b:c0:dd:a4:4d:4b:e0: 70:e1:50:ee:73:de:8a:af:b2:2c:40:63:eb:67:b6: 02:c6:08:fc:54:84:81:2f:f3:10:99:57:53:12:f6: 56:ed:a6:52:12:a6:c6:a2:7a:10:79:82:d4:98:3b: 13:db:2e:6c:32:1f:ca:20:f7:17:e8:0b:7e:20:63: 72:46:3f:6d:4d:45:91:6c:af:a8:a2:34:fd:fc:b7: 9c:1d:fc:26:09:1f:bb:46:03:e3:27:3e:8b:40:bf: f5:51:01:42:bc:53:bb:6b:0e:3a:ec:f7:09:ee:8b: c1:fd:49:7e:e8:29:60:db:c3:24:74:60:0a:46:b9: 8c:fc:9c:7d:a0:27:c0:82:55:48:91:f6:70:1f:3b: d9:42:3c:56:ca:64:c7:45:ea:77:7a:c1:f2:48:89: 7e:d9:99:6d:1b:71:e1:1f:6b:b6:55:3b:ea:72:4a: 1b:8f:6b:4c:cb:a0:01:eb:f3:e5:72:2a:43:88:78: 8e:5b:1e:f3:6d:d6:5b:84:6c:22:0b:83:e0:eb:18: 56:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:16:CB:7B:F0:8D:A7:E7:AC:CF:42:4A:EC:78:E3:F8:ED:56:54:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ca:ab:02:84:18:55:8f:21:80:ab:b2:a2:87:cd:ae:79:54: 90:73:9c:d2:be:ed:67:95:6d:cf:f6:dd:6b:52:50:2f:1a:df: 49:e3:52:ba:fb:eb:40:fa:2e:9f:c6:6b:8b:72:50:36:15:e6: aa:26:0b:47:7a:fb:18:81:20:4b:79:38:f5:f8:9a:b5:21:79: 98:b4:af:c0:f1:83:99:8b:79:87:ee:c3:56:ed:68:7f:48:0a: 63:be:e1:d9:76:76:b7:e5:53:b3:be:0e:e0:30:e3:27:24:db: cf:60:02:60:28:b9:e5:a2:09:1d:48:43:40:db:dc:09:6d:db: e1:b5:cb:a9:87:b8:26:60:76:32:9b:1a:c2:c6:a2:47:d7:2a: 46:f4:51:82:e1:da:63:ac:ac:47:e0:32:18:55:8f:eb:3f:6f: 15:90:bf:fe:8f:c5:c5:68:ba:42:ee:5d:37:1b:aa:0d:be:ec: df:fa:5d:c8:37:0f:96:f1:2e:84:b8:35:83:0f:c3:a3:11:67: b0:89:78:bd:20:1e:cd:6b:f7:1b:dc:0a:23:ca:22:c8:e8:22: 94:03:a8:71:a8:5a:65:0d:4f:24:8e:dd:f3:50:72:21:6e:c2: b6:3a:8e:6f:e2:24:c4:e0:df:bf:08:06:4e:9a:8e:f8:b3:52: 89:ce:5a:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYvriXAoMkD8JKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTZlNGI0N2ItZDRiMC00MmUyLTgyZjAtZGZiMzQxOGE3ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wuppdgoN9hS4QKouKK+juyM4/Rsoj1zrIHc 9r9J1JrrbZfifnW812WkSvk1PAlfXU775QvA3aRNS+Bw4VDuc96Kr7IsQGPrZ7YC xgj8VISBL/MQmVdTEvZW7aZSEqbGonoQeYLUmDsT2y5sMh/KIPcX6At+IGNyRj9t TUWRbK+oojT9/LecHfwmCR+7RgPjJz6LQL/1UQFCvFO7aw467PcJ7ovB/Ul+6Clg 28MkdGAKRrmM/Jx9oCfAglVIkfZwHzvZQjxWymTHRep3esHySIl+2ZltG3HhH2u2 VTvqckobj2tMy6AB6/PlcipDiHiOWx7zbdZbhGwiC4Pg6xhWbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoWy3vwjafnrM9CSux44/jtVlTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg4OWEzZWYtMjgxYS0z MDhlLWE4YjAtODJkOWI5YjJhMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErKqwKEGFWPIYCrsqKHza55VJBznNK+7WeVbc/23WtSUC8a30njUrr7 60D6Lp/Ga4tyUDYV5qomC0d6+xiBIEt5OPX4mrUheZi0r8Dxg5mLeYfuw1btaH9I CmO+4dl2drflU7O+DuAw4yck289gAmAoueWiCR1IQ0Db3Alt2+G1y6mHuCZgdjKb GsLGokfXKkb0UYLh2mOsrEfgMhhVj+s/bxWQv/6PxcVoukLuXTcbqg2+7N/6Xcg3 D5bxLoS4NYMPw6MRZ7CJeL0gHs1r9xvcCiPKIsjoIpQDqHGoWmUNTySO3fNQciFu wrY6jm/iJMTg378IBk6ajvizUonOWho= -----END CERTIFICATE-----Generated at Mon Aug 4 14:53:59 2025 by rpki-client