$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa File: 407f53f0-2a9c-3136-9379-57a68568a38a.roa (raw, json) Hash identifier: GulqLZIxKFcgtRA9yrfej++Gy23HQxFEkw0U2pUv5AY= Subject key identifier: A7:83:84:E1:C2:2B:C9:4A:E3:A9:74:1D:6D:FA:3B:61:FD:08:47:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841221E43C04A57811A1DE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:21:e4:3c:04:a5:78:11:a1:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=104b9c90-bcb7-4e4c-b6cc-63726e2c87eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:02:e9:ac:03:5b:c3:d4:8d:80:cb:aa:d7: 3c:69:3c:09:94:ab:af:da:41:24:3e:dd:2d:88:36: 42:68:62:52:27:cf:40:07:1b:da:8b:fe:86:e3:6a: f5:4f:8c:93:2e:c6:d0:71:01:14:e9:34:d3:cc:b3: 0c:ed:22:85:90:cc:be:c4:7b:41:69:15:db:a8:60: 33:de:49:01:ff:1a:ef:33:67:98:dd:3a:a0:90:d3: dc:93:3a:c2:83:e4:e6:17:60:0e:8f:46:8b:ef:1f: d1:37:d7:94:ae:66:be:9e:93:70:2a:3f:cb:f5:f5: 69:d2:52:63:d9:c9:73:05:c3:6b:5a:8a:84:82:57: 9f:59:40:d9:57:cf:b4:c2:bb:83:08:4c:17:56:b3: 14:80:22:03:39:9a:c4:72:98:fe:3a:83:82:57:48: 1a:85:44:da:ab:96:2a:f7:07:80:a9:1c:c4:e5:94: de:68:c1:4c:86:1f:05:b5:0d:87:12:d0:cf:3f:14: 82:2f:e7:7a:8f:ac:31:5c:15:15:32:4c:77:a6:20: 81:ea:e8:51:0b:a6:28:3e:5c:fa:7d:c3:e4:01:51: aa:e6:16:ec:79:71:69:e1:ce:67:57:38:ba:9c:c0: c5:3b:b4:d5:10:1e:81:4a:cb:1a:dd:37:a6:ef:30: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:83:84:E1:C2:2B:C9:4A:E3:A9:74:1D:6D:FA:3B:61:FD:08:47:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:39:57:35:fd:49:2e:17:85:10:f0:0c:50:bc:2e:82:1d:13: af:15:8b:b7:f6:a3:7d:b6:d2:8d:ea:00:71:d1:45:cc:fb:a1: 02:55:4b:41:00:87:44:e7:d9:98:0c:21:ff:40:c3:60:38:d3: c2:33:bc:ca:b7:a6:ff:23:9b:e9:ba:eb:3e:22:44:aa:85:5b: 45:87:8d:59:f7:b7:07:d8:e2:3f:73:74:b6:44:99:61:4b:2c: 35:5f:96:22:ce:83:1b:6d:d8:ab:c5:6c:08:aa:ff:f8:01:b2: ed:d5:bd:4c:01:16:67:93:b6:00:d3:15:78:bc:8e:a1:26:7b: 6f:b9:ef:22:5c:8b:1a:d0:46:5f:90:7f:28:04:f5:f5:7a:10: 28:af:be:60:ca:49:35:b7:6c:0a:a7:31:50:28:50:76:c0:57: e1:2a:7a:bf:05:18:88:98:85:01:86:9f:4b:14:b8:46:71:28: 7d:78:da:a0:7b:33:64:39:8d:03:f1:b2:6e:66:93:37:c4:e0: f4:2f:44:5e:3a:68:9a:56:38:fc:00:85:5b:a9:86:c0:a4:1d: c5:c7:8f:46:77:e7:d0:20:26:4d:17:4c:0a:9f:05:f3:36:47: cc:68:6a:26:e5:1c:89:7a:ed:d6:2b:d8:50:8f:d1:29:f5:5c: 9a:fc:b4:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiHkPASleBGh3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTA0YjljOTAtYmNiNy00ZTRjLWI2Y2MtNjM3MjZlMmM4N2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvsC6awDW8PUjYDLqtc8aTwJlKuv2kEkPt0t iDZCaGJSJ89ABxvai/6G42r1T4yTLsbQcQEU6TTTzLMM7SKFkMy+xHtBaRXbqGAz 3kkB/xrvM2eY3TqgkNPckzrCg+TmF2AOj0aL7x/RN9eUrma+npNwKj/L9fVp0lJj 2clzBcNrWoqEglefWUDZV8+0wruDCEwXVrMUgCIDOZrEcpj+OoOCV0gahUTaq5Yq 9weAqRzE5ZTeaMFMhh8FtQ2HEtDPPxSCL+d6j6wxXBUVMkx3piCB6uhRC6YoPlz6 fcPkAVGq5hbseXFp4c5nVzi6nMDFO7TVEB6BSssa3Tem7zApVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeDhOHCK8lK46l0HW36O2H9CEfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDA3ZjUzZjAtMmE5Yy0z MTM2LTkzNzktNTdhNjg1NjhhMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU5VzX9SS4XhRDwDFC8LoIdE68Vi7f2o3220o3qAHHRRcz7oQJVS0EA h0Tn2ZgMIf9Aw2A408IzvMq3pv8jm+m66z4iRKqFW0WHjVn3twfY4j9zdLZEmWFL LDVfliLOgxtt2KvFbAiq//gBsu3VvUwBFmeTtgDTFXi8jqEme2+57yJcixrQRl+Q fygE9fV6ECivvmDKSTW3bAqnMVAoUHbAV+Eqer8FGIiYhQGGn0sUuEZxKH142qB7 M2Q5jQPxsm5mkzfE4PQvRF46aJpWOPwAhVuphsCkHcXHj0Z359AgJk0XTAqfBfM2 R8xoaiblHIl67dYr2FCP0Sn1XJr8tGI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:27 2025 by rpki-client