$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36570800-5c11-3c22-8e0c-a78d28863714.roa File: 36570800-5c11-3c22-8e0c-a78d28863714.roa (raw, json) Hash identifier: BWcqMStX0xESVyeDkAWjWqkkxqTmOasVdD75lFWRkGM= Subject key identifier: 77:1E:98:7C:47:48:50:E9:EF:92:55:A3:3C:B8:78:7F:B4:E1:19:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117DA05B89BF754236C3C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36570800-5c11-3c22-8e0c-a78d28863714.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7d:a0:5b:89:bf:75:42:36:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d6b3b1e3-926d-4ed2-9410-52224cb1d3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:f1:93:f4:18:83:1e:4c:c5:d2:ec:82:fd: 18:a2:1a:73:f7:69:79:e6:b6:fe:1c:80:bd:3c:5f: 8b:3b:7b:67:7d:63:79:e1:8b:94:40:2e:0c:73:93: af:ea:8c:38:53:d5:1b:0e:73:f4:72:95:f6:74:a0: a7:6b:bc:f3:79:bf:b3:5f:fc:fe:e7:b6:88:06:0a: 91:a1:2e:78:5b:e3:2d:a2:07:5c:e9:02:f6:ed:9e: 6a:06:91:4f:b3:63:a2:2b:30:59:af:44:71:c0:41: cb:0e:b5:a0:e3:65:7f:95:24:fd:a1:0c:45:1a:a1: 08:a4:75:db:ec:02:23:2c:a0:89:41:60:02:e4:d4: 5a:d1:52:a3:ba:6e:d2:1a:31:7c:9e:53:cc:bd:a6: c1:25:b1:3e:1f:3b:17:75:89:dd:0f:76:0b:57:c1: 6d:33:74:c3:58:11:49:5b:74:a4:62:23:2c:3e:d1: 16:f1:93:eb:7a:98:06:5d:3b:f2:07:15:c9:84:60: 89:5f:0c:ae:44:ed:7f:22:5d:de:9b:96:6e:0e:f3: ef:0b:03:c9:18:9d:ea:0c:05:3f:9d:6f:10:a3:da: f0:90:64:36:34:3a:2f:46:f1:8a:a4:0b:d6:08:c1: 8d:00:3e:e3:27:4a:82:34:9a:65:be:95:af:31:2b: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1E:98:7C:47:48:50:E9:EF:92:55:A3:3C:B8:78:7F:B4:E1:19:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36570800-5c11-3c22-8e0c-a78d28863714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:56:4b:54:d4:7e:2a:97:38:66:d4:31:87:e0:7f:1c:31:c9: 82:1a:2b:83:fb:ac:7d:c4:a4:a2:72:0d:86:c7:3d:60:6f:7e: 6c:12:d5:1c:73:8a:7a:39:41:f3:2f:2c:83:24:b5:5d:5b:a0: b4:58:eb:24:7d:14:b3:ad:8e:bf:2c:8a:4c:f4:e7:e6:43:f8: f4:1c:ac:4e:b9:77:3d:b5:5e:aa:2a:c7:9e:b4:95:38:5d:56: 02:3f:9c:c1:5b:75:f9:d1:3e:a1:dc:a1:94:cc:64:b3:a0:23: e9:85:d2:d3:9c:7b:56:c3:c0:8f:61:92:e9:cf:fd:54:5f:cd: 07:fe:c7:1d:0e:c8:ba:5a:2f:1d:c1:64:c1:0f:47:09:cc:9f: 01:4d:2a:92:ed:b2:21:a9:36:7c:b3:73:ab:68:b1:c2:2d:30: eb:3f:7f:0f:7b:e7:c5:8b:d4:a7:36:d4:ec:c0:2f:d6:86:9f: 0d:cc:7f:9f:e5:92:0f:0e:47:e8:9f:fa:93:19:9c:f0:1b:20: 52:3d:75:86:d6:d8:68:43:6f:9c:e1:1b:9e:d7:9d:39:ef:5c: 48:d3:e4:b4:05:ca:50:46:c9:2a:b3:e5:ee:30:82:3e:47:94: f2:6d:51:83:36:14:2d:07:41:63:97:c4:3a:a3:35:49:38:2d: 72:b2:7e:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEX2gW4m/dUI2w8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDZiM2IxZTMtOTI2ZC00ZWQyLTk0MTAtNTIyMjRjYjFkM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqvxk/QYgx5MxdLsgv0Yohpz92l55rb+HIC9 PF+LO3tnfWN54YuUQC4Mc5Ov6ow4U9UbDnP0cpX2dKCna7zzeb+zX/z+57aIBgqR oS54W+Mtogdc6QL27Z5qBpFPs2OiKzBZr0RxwEHLDrWg42V/lST9oQxFGqEIpHXb 7AIjLKCJQWAC5NRa0VKjum7SGjF8nlPMvabBJbE+HzsXdYndD3YLV8FtM3TDWBFJ W3SkYiMsPtEW8ZPrepgGXTvyBxXJhGCJXwyuRO1/Il3em5ZuDvPvCwPJGJ3qDAU/ nW8Qo9rwkGQ2NDovRvGKpAvWCMGNAD7jJ0qCNJplvpWvMStKmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcemHxHSFDp75JVozy4eH+04Rn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzY1NzA4MDAtNWMxMS0z YzIyLThlMGMtYTc4ZDI4ODYzNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVWS1TUfiqXOGbUMYfgfxwxyYIaK4P7rH3EpKJyDYbHPWBvfmwS1Rxz ino5QfMvLIMktV1boLRY6yR9FLOtjr8sikz05+ZD+PQcrE65dz21Xqoqx560lThd VgI/nMFbdfnRPqHcoZTMZLOgI+mF0tOce1bDwI9hkunP/VRfzQf+xx0OyLpaLx3B ZMEPRwnMnwFNKpLtsiGpNnyzc6toscItMOs/fw9758WL1Kc21OzAL9aGnw3Mf5/l kg8OR+if+pMZnPAbIFI9dYbW2GhDb5zhG57XnTnvXEjT5LQFylBGySqz5e4wgj5H lPJtUYM2FC0HQWOXxDqjNUk4LXKyfpM= -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:05 2025 by rpki-client