$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa File: 5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa (raw, json) Hash identifier: joEn/8lyBHCWSK8kdrbluFJBLSGWt/dF5t6bHkqkZ2Q= Subject key identifier: 43:09:AB:DE:6D:5C:23:E1:5A:9B:F7:B0:F0:23:BD:4D:C9:6B:29:02 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411863A61FC8294FB0D1400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:86:3a:61:fc:82:94:fb:0d:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=88596d98-2937-46a9-a086-6e514274afe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9e:2f:5f:f1:7c:4f:3e:c3:e3:dc:e3:b6:83: 31:dd:58:1f:3e:73:20:99:79:ed:b7:00:ac:1d:57: 96:00:06:5d:40:3c:40:7f:54:c5:0d:a6:27:dc:d7: df:84:27:5e:d9:59:ca:d8:75:c8:25:3d:57:1d:be: 51:82:ff:fe:96:45:a0:1b:73:17:ad:11:eb:67:19: e2:a6:3f:53:09:d4:14:6b:80:7a:9b:e8:4e:54:75: 68:83:ab:c7:ef:0b:0d:8d:53:d8:f2:40:db:52:d7: 7b:ee:88:0f:f5:8c:43:19:f0:24:09:ba:12:5f:4d: 90:4f:7e:22:43:65:18:77:f6:b0:48:6a:4a:0b:d5: b1:6f:27:48:f0:2a:7b:3c:32:4b:d7:8c:ae:a9:9b: 9a:07:11:c9:48:8d:56:73:79:9b:60:bb:a9:93:37: f9:b8:ab:20:08:d4:bf:ea:51:6d:b4:3a:8a:98:ba: 26:b7:43:93:69:96:80:5c:bb:81:ee:86:dc:f4:e6: 16:40:6f:4d:b9:89:41:66:ea:42:27:a2:82:bb:e2: 69:94:67:11:af:1c:d6:55:2b:a6:62:e7:69:e6:c9: 94:a1:7f:89:f9:98:4e:01:9f:34:cb:ca:46:04:40: 95:b0:f6:cf:11:c0:ee:e0:42:be:9c:22:2e:1f:82: 51:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:09:AB:DE:6D:5C:23:E1:5A:9B:F7:B0:F0:23:BD:4D:C9:6B:29:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:98:7c:7a:a3:9d:0b:64:35:de:4e:63:32:a7:bd:20:5c:dd: 5e:5d:80:e3:57:d0:18:53:88:4c:20:8d:af:4b:2f:08:a3:e7: 4c:25:0a:1c:72:fa:94:44:6c:13:df:b0:f5:d6:3c:11:2e:1d: af:2e:f9:0f:ae:8e:dc:75:2b:ed:48:02:47:9d:d7:a0:62:15: 03:71:7b:fb:07:f6:80:4f:c2:af:8b:e8:6f:3f:7d:b4:01:b3: bc:86:3a:1a:02:a7:7e:33:02:b3:4a:a9:3a:38:b2:e0:7a:81: f5:ea:74:d3:d7:cf:71:af:83:3f:a8:c2:9d:7a:8d:4c:56:76: 43:ae:ac:64:0f:5f:72:bd:36:24:34:3f:cf:06:ed:3a:61:0c: ea:0e:da:77:4f:f6:a5:dc:93:c3:3f:8c:31:24:de:fc:bc:b7: f9:69:4a:a5:21:3f:0e:c5:93:94:62:2a:05:50:8e:72:f0:b7: 79:3b:89:e0:03:fd:d1:bf:96:50:0d:7f:68:3f:45:44:47:05: a5:d6:4a:ed:10:bd:48:b7:03:13:d0:6d:be:81:77:87:85:ff: a7:15:f7:63:d8:36:f4:7a:72:d9:46:ce:56:db:96:0e:e8:b1: 39:c3:da:17:0e:3f:8d:61:ae:a5:5e:78:a6:2a:29:79:82:d1: cd:0c:ff:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYY6YfyClPsNFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODg1OTZkOTgtMjkzNy00NmE5LWEwODYtNmU1MTQyNzRhZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp4vX/F8Tz7D49zjtoMx3VgfPnMgmXnttwCs HVeWAAZdQDxAf1TFDaYn3NffhCde2VnK2HXIJT1XHb5Rgv/+lkWgG3MXrRHrZxni pj9TCdQUa4B6m+hOVHVog6vH7wsNjVPY8kDbUtd77ogP9YxDGfAkCboSX02QT34i Q2UYd/awSGpKC9WxbydI8Cp7PDJL14yuqZuaBxHJSI1Wc3mbYLupkzf5uKsgCNS/ 6lFttDqKmLomt0OTaZaAXLuB7obc9OYWQG9NuYlBZupCJ6KCu+JplGcRrxzWVSum Yudp5smUoX+J+ZhOAZ80y8pGBECVsPbPEcDu4EK+nCIuH4JRPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMJq95tXCPhWpv3sPAjvU3JaykCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWQwMjlmMDktZTNlMS0z M2NjLWFhMGUtMDc5YmYzZDM5YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+YfHqjnQtkNd5OYzKnvSBc3V5dgONX0BhTiEwgja9LLwij50wlChxy +pREbBPfsPXWPBEuHa8u+Q+ujtx1K+1IAked16BiFQNxe/sH9oBPwq+L6G8/fbQB s7yGOhoCp34zArNKqTo4suB6gfXqdNPXz3Gvgz+owp16jUxWdkOurGQPX3K9NiQ0 P88G7TphDOoO2ndP9qXck8M/jDEk3vy8t/lpSqUhPw7Fk5RiKgVQjnLwt3k7ieAD /dG/llANf2g/RURHBaXWSu0QvUi3AxPQbb6Bd4eF/6cV92PYNvR6ctlGzlbblg7o sTnD2hcOP41hrqVeeKYqKXmC0c0M/3U= -----END CERTIFICATE-----Generated at Mon Aug 4 18:57:53 2025 by rpki-client