$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c03e9d6-9445-376a-a25c-f66167f373e1.roa File: 5c03e9d6-9445-376a-a25c-f66167f373e1.roa (raw, json) Hash identifier: GN/OhwA+njwas5SiEoA5TdXN1wEIk7ZB/k/a+hHHaac= Subject key identifier: 76:FC:5F:C1:39:C7:0A:53:20:7A:D2:D5:D7:2C:94:24:E6:88:B7:00 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841239AE39601873CB12B600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c03e9d6-9445-376a-a25c-f66167f373e1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:39:ae:39:60:18:73:cb:12:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=430c4572-a016-41c9-8a22-bf8201e5f871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:46:dd:c9:08:f6:72:82:8a:63:ba:9b:09: 00:73:df:9d:ea:71:54:9a:d8:3a:fd:5f:95:af:c6: fb:e8:69:22:e7:cd:29:be:57:ab:e9:ee:e2:03:8a: c7:75:6d:ca:38:23:4e:27:e1:ff:94:71:e4:ca:78: cd:63:d0:3d:65:a0:43:1d:9e:ae:e0:f3:bd:95:88: 0d:9c:dd:9e:8a:8f:dd:05:0d:71:85:91:d5:69:cb: 2d:61:78:44:60:03:d5:89:e1:8a:ff:8a:ef:63:6e: 0e:5d:93:3c:a6:84:ad:55:7d:0f:97:42:db:a6:35: 16:22:44:52:a9:1a:c7:70:a7:1c:72:d2:98:af:8e: 06:33:7c:1a:1f:d8:c2:86:ef:14:07:12:2e:c0:e7: 4e:01:aa:5c:48:f7:21:40:15:b4:b9:2c:23:5b:f0: 4e:f8:45:f9:ae:4c:ee:43:59:34:0a:05:eb:60:2c: 4b:66:41:03:59:bd:d0:93:a0:db:f7:10:35:e9:58: 48:82:7a:ff:6a:21:b6:4b:d7:b0:5d:c7:ae:c3:61: 1d:02:24:fc:36:12:4a:26:8c:36:5c:4e:11:72:73: ef:aa:38:72:c3:9b:7c:e4:4f:92:fe:63:7c:50:48: e1:9f:af:dc:bf:3c:49:d6:89:4e:f9:33:eb:19:98: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FC:5F:C1:39:C7:0A:53:20:7A:D2:D5:D7:2C:94:24:E6:88:B7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c03e9d6-9445-376a-a25c-f66167f373e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d7:6c:50:57:ce:ef:d3:0e:10:d3:69:29:45:ce:fb:55:d8: f1:3c:7e:a9:20:d7:0d:7f:a2:69:3a:9b:71:ef:fc:62:61:42: d0:07:b0:35:be:09:19:66:2b:2b:64:c1:4d:44:64:4c:68:7c: b6:7b:0a:df:3b:64:1f:b8:04:21:96:41:6b:90:e1:88:98:09: 37:d9:82:db:6b:84:44:8a:9d:e0:1b:7b:af:55:7f:3d:5d:49: 1b:d0:4c:50:ad:0f:db:34:89:dd:6b:02:e7:36:21:90:df:ac: 2f:9b:fb:43:46:62:1e:97:6d:10:cc:e6:1d:43:e7:4a:08:2f: 62:8f:b9:ff:f1:60:19:d5:ab:f8:11:aa:8e:34:09:b7:28:f3: 43:67:bf:16:56:16:93:c6:6b:1c:f8:59:b4:be:fc:04:d5:21: 12:8b:cc:30:da:6d:50:7c:2a:1b:90:9e:52:fe:c5:79:1e:c2: ba:62:ba:72:94:ae:73:16:6f:c4:99:0e:c2:9d:02:31:5f:26: 18:a8:b1:87:a3:7f:43:f0:92:a2:5b:6b:61:c4:7b:11:80:83: 6e:bc:8e:d2:1d:de:c4:3b:15:a7:87:f2:f2:dd:99:33:a8:e8: 5a:eb:b8:41:db:74:28:ae:44:3f:b9:7f:a1:36:02:55:1b:46: 2e:8f:43:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjmuOWAYc8sStgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDMwYzQ1NzItYTAxNi00MWM5LThhMjItYmY4MjAxZTVmODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPVG3ckI9nKCimO6mwkAc9+d6nFUmtg6/V+V r8b76Gki580pvler6e7iA4rHdW3KOCNOJ+H/lHHkynjNY9A9ZaBDHZ6u4PO9lYgN nN2eio/dBQ1xhZHVacstYXhEYAPVieGK/4rvY24OXZM8poStVX0Pl0LbpjUWIkRS qRrHcKccctKYr44GM3waH9jChu8UBxIuwOdOAapcSPchQBW0uSwjW/BO+EX5rkzu Q1k0CgXrYCxLZkEDWb3Qk6Db9xA16VhIgnr/aiG2S9ewXceuw2EdAiT8NhJKJow2 XE4RcnPvqjhyw5t85E+S/mN8UEjhn6/cvzxJ1olO+TPrGZi3MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHb8X8E5xwpTIHrS1dcslCTmiLcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWMwM2U5ZDYtOTQ0NS0z NzZhLWEyNWMtZjY2MTY3ZjM3M2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXXbFBXzu/TDhDTaSlFzvtV2PE8fqkg1w1/omk6m3Hv/GJhQtAHsDW+ CRlmKytkwU1EZExofLZ7Ct87ZB+4BCGWQWuQ4YiYCTfZgttrhESKneAbe69Vfz1d SRvQTFCtD9s0id1rAuc2IZDfrC+b+0NGYh6XbRDM5h1D50oIL2KPuf/xYBnVq/gR qo40Cbco80NnvxZWFpPGaxz4WbS+/ATVIRKLzDDabVB8KhuQnlL+xXkewrpiunKU rnMWb8SZDsKdAjFfJhiosYejf0PwkqJba2HEexGAg268jtId3sQ7FaeH8vLdmTOo 6FrruEHbdCiuRD+5f6E2AlUbRi6PQ/E= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:24 2025 by rpki-client