$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa File: 4af43742-c872-3d5e-a21f-1c5ec5858071.roa (raw, json) Hash identifier: rbI1PBmpi/hl7JZEkP2o7uYAAzV5MoAU7mca8Rcs/oE= Subject key identifier: 05:7A:DF:34:AB:81:03:95:DD:A3:45:46:81:44:4A:FA:86:08:23:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841235EE23A3A372B815D1C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:35:ee:23:a3:a3:72:b8:15:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3820d44d-8dad-4a20-ba7e-d2a807e052b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:f6:21:5e:fc:0a:d9:2d:02:5b:7c:5d:98: 0a:24:24:83:9a:e6:a6:09:fd:2b:0f:55:0b:53:0c: d0:91:fd:4f:ea:1a:3d:8d:de:e3:68:07:66:8a:82: 44:35:24:e5:6b:14:0f:77:26:76:91:dd:24:9e:b4: 20:af:b1:d7:ad:ab:87:11:f2:8e:ee:53:68:95:7d: 9b:1c:af:63:3b:e6:72:72:c2:60:df:a8:33:c4:fe: 19:22:6e:2e:8f:4a:24:0c:1b:06:f9:bf:2a:c9:bd: fd:0d:0a:4f:ec:89:e7:45:d4:29:2d:3b:48:65:5f: 77:2b:ee:61:0f:47:19:b5:87:f4:a7:d6:63:dc:1f: 33:2e:9f:23:dd:73:6a:8e:07:51:a3:b4:c3:12:fe: 52:f3:a4:05:ab:92:d2:1b:40:b3:63:c4:f0:c4:4a: 2d:82:13:e4:e5:ab:ce:18:68:9f:50:9d:0d:fa:f4: cf:56:38:6c:32:3a:82:30:7d:66:49:74:56:73:f1: 53:e5:73:20:08:be:db:94:c4:51:e5:92:4b:d0:8c: 7d:ff:c0:3b:9b:20:8f:e2:66:01:d7:0b:68:20:3a: 83:ff:a7:1e:6c:50:fd:20:fc:99:05:1f:02:0c:a3: 62:62:c3:1a:50:cb:64:5e:7c:41:19:25:39:91:e6: 43:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7A:DF:34:AB:81:03:95:DD:A3:45:46:81:44:4A:FA:86:08:23:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bc:64:b6:28:d2:3f:cc:68:cb:6a:e8:f2:fd:fc:62:e3:41: e3:2c:0c:1e:35:b9:34:1a:22:2d:af:e0:ed:8e:0c:e7:27:20: b4:50:21:d7:3e:23:a3:d2:84:10:52:2f:b2:50:a7:73:df:c8: b6:bf:ac:e4:48:1c:3e:c4:73:8c:9f:c2:f5:01:4c:c6:82:e5: a6:c8:f4:9f:96:e6:7f:08:90:dd:f6:6f:1c:9e:c6:04:9a:3c: 1b:b6:ef:e5:b2:03:a3:c4:48:47:47:8a:44:27:65:7a:ea:64: 4a:ce:92:27:8d:81:26:33:55:a7:4f:72:98:5d:c2:07:38:09: 0e:31:60:69:c7:7c:11:4c:bd:44:40:0e:f5:29:e6:0a:f0:8d: 70:cc:51:9f:37:4f:e9:bd:76:15:f2:b6:2a:fa:02:78:5c:3f: 52:24:e6:98:3a:9e:4b:46:16:9a:7d:0f:86:87:23:0d:fc:fc: e5:f7:5d:f5:68:5b:8c:ab:1c:57:fd:0e:73:65:69:28:00:8b: e6:4e:a6:44:c6:3c:a5:cb:9b:cf:34:ec:31:f2:e2:cf:f9:48: 0f:24:7a:72:48:35:9a:3c:cf:2e:cd:43:b0:9e:3a:e6:87:2c: cb:fe:89:2b:17:8b:c4:ad:76:0b:f3:35:72:d9:7d:a9:55:f2: 5f:17:e0:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjXuI6OjcrgV0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzgyMGQ0NGQtOGRhZC00YTIwLWJhN2UtZDJhODA3ZTA1MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kv2IV78CtktAlt8XZgKJCSDmuamCf0rD1UL UwzQkf1P6ho9jd7jaAdmioJENSTlaxQPdyZ2kd0knrQgr7HXrauHEfKO7lNolX2b HK9jO+ZycsJg36gzxP4ZIm4uj0okDBsG+b8qyb39DQpP7InnRdQpLTtIZV93K+5h D0cZtYf0p9Zj3B8zLp8j3XNqjgdRo7TDEv5S86QFq5LSG0CzY8TwxEotghPk5avO GGifUJ0N+vTPVjhsMjqCMH1mSXRWc/FT5XMgCL7blMRR5ZJL0Ix9/8A7myCP4mYB 1wtoIDqD/6cebFD9IPyZBR8CDKNiYsMaUMtkXnxBGSU5keZDWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV63zSrgQOV3aNFRoFESvqGCCPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGFmNDM3NDItYzg3Mi0z ZDVlLWEyMWYtMWM1ZWM1ODU4MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu8ZLYo0j/MaMtq6PL9/GLjQeMsDB41uTQaIi2v4O2ODOcnILRQIdc+ I6PShBBSL7JQp3PfyLa/rORIHD7Ec4yfwvUBTMaC5abI9J+W5n8IkN32bxyexgSa PBu27+WyA6PESEdHikQnZXrqZErOkieNgSYzVadPcphdwgc4CQ4xYGnHfBFMvURA DvUp5grwjXDMUZ83T+m9dhXytir6AnhcP1Ik5pg6nktGFpp9D4aHIw38/OX3XfVo W4yrHFf9DnNlaSgAi+ZOpkTGPKXLm8807DHy4s/5SA8kenJINZo8zy7NQ7CeOuaH LMv+iSsXi8StdgvzNXLZfalV8l8X4IY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:08 2025 by rpki-client