$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa File: 5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa (raw, json) Hash identifier: boiOOgG6mmgR5plpL2ANDF0Mog65Lqulr5bSruNcqd8= Subject key identifier: BE:AF:A4:05:5C:7D:51:80:B6:6B:60:E7:46:6C:5D:15:43:64:4C:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5D00CECAB2FABCF98000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5d:00:ce:ca:b2:fa:bc:f9:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=352ef6c4-3e2c-414a-a6b6-6f4718720944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:2f:fe:93:8c:ae:11:af:e4:9e:06:a8:a4: ef:fb:4f:7d:8c:58:eb:6c:cb:f3:48:73:34:d7:94: 00:75:ab:e1:83:73:f7:ea:53:5f:93:fc:7a:e9:97: c9:53:42:57:fa:b5:82:46:50:95:86:27:ad:53:02: b8:15:89:56:1b:79:ca:23:a3:b5:70:6a:aa:ef:97: 24:8f:a0:db:ae:64:7a:15:97:51:f1:bc:18:b7:8d: 2c:0d:ac:d9:0d:4e:1c:ab:e7:96:8c:6a:99:18:50: b0:06:5f:c1:da:25:c2:82:94:57:a4:10:3b:89:d5: a6:c4:6b:af:8e:d5:80:88:f0:7a:59:24:5d:94:0d: 65:9c:0b:05:c7:25:4d:46:4f:32:9e:00:2f:3b:f0: 42:20:55:47:f9:38:34:df:62:88:e6:a8:cf:c0:88: 96:1e:91:5c:37:10:af:39:70:36:18:4c:c8:64:91: cd:2a:8e:e6:25:27:6f:85:b2:36:71:14:f5:66:a3: 30:d2:ea:8c:3c:98:13:6c:da:c4:da:36:d6:82:35: 9a:c9:48:25:3b:b8:64:90:e7:2d:cb:d9:ee:4c:1b: 91:7a:5d:fc:0d:4c:75:3f:85:4c:61:72:eb:74:3c: 5c:ee:16:e6:16:fe:54:06:34:36:58:08:05:46:6b: be:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AF:A4:05:5C:7D:51:80:B6:6B:60:E7:46:6C:5D:15:43:64:4C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c14841b-34b6-3ae7-bc3c-e1de07c1cda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f0:90:05:c0:eb:c9:51:a1:3a:3a:a9:a4:6c:1c:54:d2:cc: b3:3c:c3:79:43:2f:62:4f:b5:22:47:e7:c2:9b:93:4a:a3:3f: be:23:dd:71:3d:8a:e8:4a:2c:c6:e7:52:b0:e4:93:42:9f:0b: b0:b7:40:69:6d:f0:9f:4b:b9:f0:f0:c4:c9:e7:b0:df:2f:71: 61:cd:9d:20:fb:b8:9c:1e:a8:12:a9:f5:f3:ed:37:b1:1f:20: 71:7d:8b:3e:98:37:ea:3c:46:b6:f3:ee:bb:cd:8f:1c:5d:aa: e2:7d:ee:e0:c3:59:7c:fc:a3:65:e8:c8:7f:91:f2:bd:b4:b7: 3d:db:84:f7:74:60:15:f8:44:2a:24:57:b1:6a:0d:42:db:31: 3d:72:37:00:15:34:fe:7d:fc:77:94:37:06:e6:1c:12:23:97: 4c:e2:f2:56:b2:28:88:29:3c:51:fc:84:fe:b5:2c:4b:f1:84: 08:ac:38:80:49:f1:8f:7c:e1:88:b9:1a:50:16:b3:67:4a:e3: 8e:f6:0c:0a:ff:9c:fe:4d:7b:a3:dd:df:cc:aa:75:a3:64:50: bb:b5:d6:62:65:9c:6f:00:9a:cc:83:61:49:e3:58:d1:8d:27: 10:d3:87:14:43:81:e0:ab:ee:77:d2:23:d6:c9:22:37:9e:a3: b8:f6:28:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku10Azsqy+rz5gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzUyZWY2YzQtM2UyYy00MTRhLWE2YjYtNmY0NzE4NzIwOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztgv/pOMrhGv5J4GqKTv+099jFjrbMvzSHM0 15QAdavhg3P36lNfk/x66ZfJU0JX+rWCRlCVhietUwK4FYlWG3nKI6O1cGqq75ck j6DbrmR6FZdR8bwYt40sDazZDU4cq+eWjGqZGFCwBl/B2iXCgpRXpBA7idWmxGuv jtWAiPB6WSRdlA1lnAsFxyVNRk8yngAvO/BCIFVH+Tg032KI5qjPwIiWHpFcNxCv OXA2GEzIZJHNKo7mJSdvhbI2cRT1ZqMw0uqMPJgTbNrE2jbWgjWayUglO7hkkOct y9nuTBuRel38DUx1P4VMYXLrdDxc7hbmFv5UBjQ2WAgFRmu+4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6vpAVcfVGAtmtg50ZsXRVDZEwaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWMxNDg0MWItMzRiNi0z YWU3LWJjM2MtZTFkZTA3YzFjZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrwkAXA68lRoTo6qaRsHFTSzLM8w3lDL2JPtSJH58Kbk0qjP74j3XE9 iuhKLMbnUrDkk0KfC7C3QGlt8J9LufDwxMnnsN8vcWHNnSD7uJweqBKp9fPtN7Ef IHF9iz6YN+o8Rrbz7rvNjxxdquJ97uDDWXz8o2XoyH+R8r20tz3bhPd0YBX4RCok V7FqDULbMT1yNwAVNP59/HeUNwbmHBIjl0zi8layKIgpPFH8hP61LEvxhAisOIBJ 8Y984Yi5GlAWs2dK4472DAr/nP5Ne6Pd38yqdaNkULu11mJlnG8AmsyDYUnjWNGN JxDThxRDgeCr7nfSI9bJIjeeo7j2KII= -----END CERTIFICATE-----Generated at Mon Jun 16 00:12:45 2025 by rpki-client