$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa File: 558a9f03-d275-3df3-9fd9-2afd50775883.roa (raw, json) Hash identifier: 2ndEeqm8yca1g2ZfnzxD0t78FnNa2pE4+I6+Gr9FZS4= Subject key identifier: B1:31:78:71:59:8B:8A:86:64:3D:F6:7F:5B:15:52:81:EB:C2:DB:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F164BE0038B93F57C980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f1:64:be:00:38:b9:3f:57:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=9c31860d-4e88-4743-aafb-5da82506741d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:fb:94:28:75:ed:a5:b4:a7:06:da:0b:eb: 2d:4f:4a:ba:54:d7:64:39:bb:9d:58:4b:50:0e:39: 2a:e9:a5:c8:c0:14:dd:3b:45:93:2e:a2:87:53:3d: 9a:bb:f0:26:68:cb:fb:17:b0:4e:88:79:0b:0b:37: 22:33:c9:3b:17:e3:17:ca:cd:a3:6c:e1:b2:21:ca: 7c:21:bd:d8:62:37:7d:e7:cb:d9:ef:71:39:3d:c8: 77:01:28:08:dd:2f:cc:32:c9:50:d3:b4:c9:e0:38: 92:d1:5e:bb:73:3e:3a:b8:9a:8c:2c:13:e9:2b:d7: 04:24:45:1a:b6:c2:14:54:19:46:5b:b0:c9:95:30: de:6a:c6:a7:52:20:0b:63:a6:1f:17:94:01:8d:9b: 34:2b:8b:ee:28:41:c6:ee:e8:8d:bc:55:e2:01:ab: 0b:68:ff:c6:70:40:d5:d2:d8:a5:7a:d1:45:d3:85: 54:37:70:f0:1e:97:54:3e:04:49:3e:3d:79:93:e7: 25:78:a4:02:8e:a8:5f:87:58:60:20:dc:e7:5f:dc: 3b:95:50:fa:25:e0:b7:db:a3:8e:5b:ed:1f:d6:45: 43:5c:0c:5d:00:1e:7c:b6:4d:04:c4:cc:c1:30:c6: 78:82:5f:df:e6:d6:8c:09:9d:b2:17:1d:32:48:fe: 41:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:31:78:71:59:8B:8A:86:64:3D:F6:7F:5B:15:52:81:EB:C2:DB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:04:fc:a0:b3:85:a3:7d:9d:40:61:ea:a4:49:de:2d:68:2a: 41:9b:96:b4:ec:31:84:fc:df:b8:87:85:d9:52:0c:f6:34:7f: d6:e0:2c:80:98:e3:40:64:85:3a:5f:9b:8a:a3:38:48:cd:72: ce:32:e2:0a:93:2d:4b:7c:5c:45:91:e6:18:f0:75:11:21:fd: a3:23:bb:66:f3:b6:b9:d2:75:b5:05:80:73:9d:48:6c:e6:41: 94:6a:8a:c6:02:1e:b8:e0:7a:52:f7:80:b7:47:fd:17:3c:5c: 49:d8:3c:b9:92:01:60:fb:60:83:92:c3:a2:e2:94:4f:8d:08: a4:b1:06:14:96:b0:33:9c:7d:04:af:5c:1e:a6:4d:01:ee:58: 2b:6f:b7:9d:02:83:64:48:df:b5:ee:40:8b:57:2f:77:1c:40: 2c:53:25:6d:f9:40:80:2e:52:ed:0f:43:ee:cc:a5:76:b3:f6: f7:86:7b:9b:5c:50:f5:9a:43:c0:16:27:b2:56:4b:30:ee:fe: 46:91:78:88:b5:a0:74:e3:13:79:d3:00:45:0a:3f:42:b6:c4: 65:2e:30:2a:40:95:8f:d6:4a:de:60:b7:aa:11:d6:35:d3:1c: a8:23:66:06:84:ae:5d:96:83:e0:cf:d6:3f:4e:ca:6f:d4:eb: 8f:44:09:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPFkvgA4uT9XyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk OWMzMTg2MGQtNGU4OC00NzQzLWFhZmItNWRhODI1MDY3NDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWv7lCh17aW0pwbaC+stT0q6VNdkObudWEtQ Djkq6aXIwBTdO0WTLqKHUz2au/AmaMv7F7BOiHkLCzciM8k7F+MXys2jbOGyIcp8 Ib3YYjd958vZ73E5Pch3ASgI3S/MMslQ07TJ4DiS0V67cz46uJqMLBPpK9cEJEUa tsIUVBlGW7DJlTDeasanUiALY6YfF5QBjZs0K4vuKEHG7uiNvFXiAasLaP/GcEDV 0tiletFF04VUN3DwHpdUPgRJPj15k+cleKQCjqhfh1hgINznX9w7lVD6JeC326OO W+0f1kVDXAxdAB58tk0ExMzBMMZ4gl/f5taMCZ2yFx0ySP5ByQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLExeHFZi4qGZD32f1sVUoHrwtthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU4YTlmMDMtZDI3NS0z ZGYzLTlmZDktMmFmZDUwNzc1ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgE/KCzhaN9nUBh6qRJ3i1oKkGblrTsMYT837iHhdlSDPY0f9bgLICY 40BkhTpfm4qjOEjNcs4y4gqTLUt8XEWR5hjwdREh/aMju2bztrnSdbUFgHOdSGzm QZRqisYCHrjgelL3gLdH/Rc8XEnYPLmSAWD7YIOSw6LilE+NCKSxBhSWsDOcfQSv XB6mTQHuWCtvt50Cg2RI37XuQItXL3ccQCxTJW35QIAuUu0PQ+7MpXaz9veGe5tc UPWaQ8AWJ7JWSzDu/kaReIi1oHTjE3nTAEUKP0K2xGUuMCpAlY/WSt5gt6oR1jXT HKgjZgaErl2Wg+DP1j9Oym/U649ECfU= -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:27 2025 by rpki-client