$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa File: 48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa (raw, json) Hash identifier: ImlKkW6vCGagEqVZMpshSw3wOtInh+kyD11sKtxKJzU= Subject key identifier: 80:39:BB:39:72:C0:85:4C:1B:A0:FD:30:6E:67:1D:B3:AB:20:16:6C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841182711CC6DC1EA446E280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:82:71:1c:c6:dc:1e:a4:46:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=218651f2-1e17-4ddb-bfbf-df6a80c730e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:60:e8:2c:bd:4f:46:b4:ee:76:48:94:b7: 8b:c2:65:d3:79:d8:9d:1c:03:0c:a5:47:ac:8e:7a: a8:b9:ce:d1:0e:ac:99:6c:08:8a:f3:f5:28:48:a0: 5f:df:57:3b:c7:c2:b5:2d:a6:c1:45:55:d8:df:c2: 03:c9:b5:90:6d:5b:20:34:ce:80:d2:52:61:b7:97: 99:0f:3c:23:a4:1c:6a:e7:9c:37:86:28:b7:5c:96: e3:17:06:45:4e:81:0c:9e:65:d0:21:52:2b:75:24: c7:23:b4:e2:5b:16:13:39:d6:6d:d9:ac:40:54:b9: 53:2a:62:91:ae:14:27:9f:78:ee:40:58:3e:b0:f4: f2:4d:8e:28:e7:27:ad:2d:91:45:c0:f4:9b:7b:db: d2:25:8a:cb:61:3f:4c:ab:e6:90:e5:d1:4e:c8:57: 31:38:28:d4:b7:b9:40:90:1e:1c:aa:97:45:0e:47: dd:3e:c1:a7:17:91:cc:d4:dd:b4:43:0c:ed:53:2d: 8c:5c:f0:c8:8e:ad:c6:5a:8a:b4:6e:b1:a3:c7:49: 43:1b:aa:8a:47:1f:97:b1:40:e7:e2:14:d5:9b:9a: 8f:cc:2a:c5:f9:1a:d7:13:f6:40:8d:e2:8d:38:a4: 83:6e:8f:ab:28:bb:ee:13:d6:3c:80:86:d4:3a:fc: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:39:BB:39:72:C0:85:4C:1B:A0:FD:30:6E:67:1D:B3:AB:20:16:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:aa:54:04:28:5d:6c:2e:ce:ec:b8:73:d7:45:98:5a:2f:d1: b0:3b:28:6f:9a:ee:58:c7:2a:1e:3e:90:fd:63:7b:d7:3f:ea: 49:21:18:55:45:28:ce:da:1d:5e:72:3b:ea:3b:40:fc:ed:5e: d8:14:79:46:5e:2d:f5:9c:ca:bc:c1:9c:f2:f6:bd:5e:db:56: ef:89:fe:7f:27:d2:d7:ac:9e:b6:f0:84:31:fb:7d:4c:d0:1d: 87:c2:7f:14:cd:d8:9f:5b:a1:4e:55:de:49:d2:34:91:07:17: 89:3f:2e:31:20:3e:b3:37:f5:1a:72:78:ec:38:7e:fc:a3:40: 75:45:09:8c:55:d1:cc:d8:ff:36:9e:9b:7c:c7:ff:1b:dd:d7: 82:80:3e:7a:82:0c:4c:0f:72:63:11:23:3f:e9:0b:d3:00:c3: 08:15:03:72:b5:80:9a:5b:83:10:01:03:bd:0f:a1:ca:43:0d: 41:cc:83:66:dc:08:e8:1e:f4:9a:0a:8a:49:7b:59:53:af:8d: 20:63:21:36:60:e7:6e:92:b8:d4:a6:36:ac:78:03:6e:fb:c9: dc:05:f9:2b:23:13:b8:6c:81:eb:af:cd:7c:6e:b9:8c:03:21: 1b:26:b9:a9:48:94:06:0e:a6:8c:29:ec:07:17:61:1b:22:b7: 38:f9:d4:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYJxHMbcHqRG4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjE4NjUxZjItMWUxNy00ZGRiLWJmYmYtZGY2YTgwYzczMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE1g6Cy9T0a07nZIlLeLwmXTedidHAMMpUes jnqouc7RDqyZbAiK8/UoSKBf31c7x8K1LabBRVXY38IDybWQbVsgNM6A0lJht5eZ DzwjpBxq55w3hii3XJbjFwZFToEMnmXQIVIrdSTHI7TiWxYTOdZt2axAVLlTKmKR rhQnn3juQFg+sPTyTY4o5yetLZFFwPSbe9vSJYrLYT9Mq+aQ5dFOyFcxOCjUt7lA kB4cqpdFDkfdPsGnF5HM1N20QwztUy2MXPDIjq3GWoq0brGjx0lDG6qKRx+XsUDn 4hTVm5qPzCrF+RrXE/ZAjeKNOKSDbo+rKLvuE9Y8gIbUOvyIewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIA5uzlywIVMG6D9MG5nHbOrIBZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDhhOGQzZGYtOWM0ZS0z OTM3LTk2ZmItNWRiZGM1ZTQyNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeqVAQoXWwuzuy4c9dFmFov0bA7KG+a7ljHKh4+kP1je9c/6kkhGFVF KM7aHV5yO+o7QPztXtgUeUZeLfWcyrzBnPL2vV7bVu+J/n8n0tesnrbwhDH7fUzQ HYfCfxTN2J9boU5V3knSNJEHF4k/LjEgPrM39RpyeOw4fvyjQHVFCYxV0czY/zae m3zH/xvd14KAPnqCDEwPcmMRIz/pC9MAwwgVA3K1gJpbgxABA70PocpDDUHMg2bc COge9JoKikl7WVOvjSBjITZg526SuNSmNqx4A277ydwF+SsjE7hsgeuvzXxuuYwD IRsmualIlAYOpowp7AcXYRsitzj51IU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:48:09 2025 by rpki-client