$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b0f467f-97cd-3242-b922-fac71497d3b8.roa File: 6b0f467f-97cd-3242-b922-fac71497d3b8.roa (raw, json) Hash identifier: xDzYYNwvlYYjauYzyWxbRoMLYkeYT15AqnNrul41ZAg= Subject key identifier: F3:DD:5C:F0:7C:92:3E:B3:F8:CA:EE:BD:85:1E:14:D5:10:2A:6D:5A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117499F04DE49908F81040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b0f467f-97cd-3242-b922-fac71497d3b8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:74:99:f0:4d:e4:99:08:f8:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=59e1bc55-74f5-4fe7-8e3c-3d3c9f79cde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:d9:41:55:9d:bb:a3:bc:ee:9a:b9:de:fb: 4c:27:16:9a:14:5a:ff:a4:ea:3e:8b:aa:ce:f6:f6: b7:fd:52:9b:62:f5:33:1c:21:8a:e6:68:74:af:65: 81:fa:12:ce:b3:f1:16:ea:39:e2:68:1e:6c:dc:80: 58:29:1f:7e:c3:4d:7d:fd:81:1d:4e:93:ef:09:5f: 31:14:09:51:2b:9f:11:e5:58:93:ac:29:24:bf:77: 6a:55:f7:b4:18:04:74:14:8f:c5:2d:6b:e4:0b:ee: 16:72:13:26:8e:fe:50:38:22:76:57:f2:9c:40:b5: 1d:5a:8c:be:f5:a1:f0:9e:5c:80:1a:ad:a0:f3:f6: 45:b9:ec:21:49:7f:f8:36:d4:25:01:66:34:2a:3c: 80:9f:01:45:46:3e:00:4b:38:35:87:7b:fc:eb:46: 50:75:2c:03:74:40:66:7d:56:d9:b1:f9:56:87:eb: fc:58:9d:5c:0b:4b:27:d3:d9:c5:99:e9:9e:7a:ab: 21:85:a4:40:8f:77:b3:17:68:47:be:fa:e8:03:d9: 8d:b8:05:79:fa:06:bd:e6:84:a2:6b:10:44:d4:e3: 6e:fb:9e:c4:1d:33:42:2c:18:dc:4b:16:45:37:7f: 0d:bd:fe:d2:dc:4b:4f:f0:3d:89:a4:24:4a:d4:e6: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DD:5C:F0:7C:92:3E:B3:F8:CA:EE:BD:85:1E:14:D5:10:2A:6D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b0f467f-97cd-3242-b922-fac71497d3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:4b:cb:11:13:9e:0b:65:ae:5e:16:d9:32:56:37:fe:9f:43: 04:da:e4:d8:5c:7f:85:07:85:ba:60:58:23:d5:50:99:27:5d: 42:f4:1c:5b:1e:19:b8:57:c3:ad:4f:0b:c3:45:a6:2b:a8:e0: 2a:b4:91:a2:18:2e:2f:a9:ae:41:07:36:50:b6:e2:b2:b9:5d: 7f:41:2c:56:26:9f:5c:2d:d4:a0:66:cc:8c:3c:c4:41:5f:78: 86:49:1e:23:66:60:cd:bb:49:1f:7c:41:d3:71:97:a0:fd:72: 49:67:e0:08:a0:82:7f:ff:27:a5:fb:59:eb:15:fc:31:63:38: 46:56:54:21:05:10:83:84:fa:aa:01:9f:15:f9:e7:5c:66:f3: d4:92:84:13:89:3a:fc:af:c5:7b:e4:ac:78:ed:73:d7:f7:f5: 1d:c2:cd:e6:db:ea:b2:e4:76:9d:fc:6f:b7:2a:04:76:ac:cb: 90:42:7b:91:8a:03:1e:d4:56:4a:67:08:9a:91:3b:aa:32:01: 87:8a:28:1b:59:fc:78:24:73:f3:df:38:cd:b8:b8:b7:f8:e0: 7a:fa:e7:eb:78:c0:57:d4:90:44:c4:a1:1d:fe:53:7b:f9:bb: bc:7c:45:8d:66:e2:cf:9d:25:a9:20:54:3b:3c:76:e2:92:98: f6:fd:34:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXSZ8E3kmQj4EEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTllMWJjNTUtNzRmNS00ZmU3LThlM2MtM2QzYzlmNzljZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9vZQVWdu6O87pq53vtMJxaaFFr/pOo+i6rO 9va3/VKbYvUzHCGK5mh0r2WB+hLOs/EW6jniaB5s3IBYKR9+w019/YEdTpPvCV8x FAlRK58R5ViTrCkkv3dqVfe0GAR0FI/FLWvkC+4WchMmjv5QOCJ2V/KcQLUdWoy+ 9aHwnlyAGq2g8/ZFuewhSX/4NtQlAWY0KjyAnwFFRj4ASzg1h3v860ZQdSwDdEBm fVbZsflWh+v8WJ1cC0sn09nFmemeeqshhaRAj3ezF2hHvvroA9mNuAV5+ga95oSi axBE1ONu+57EHTNCLBjcSxZFN38Nvf7S3EtP8D2JpCRK1OZbOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPdXPB8kj6z+MruvYUeFNUQKm1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmIwZjQ2N2YtOTdjZC0z MjQyLWI5MjItZmFjNzE0OTdkM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9LyxETngtlrl4W2TJWN/6fQwTa5Nhcf4UHhbpgWCPVUJknXUL0HFse GbhXw61PC8NFpiuo4Cq0kaIYLi+prkEHNlC24rK5XX9BLFYmn1wt1KBmzIw8xEFf eIZJHiNmYM27SR98QdNxl6D9ckln4Aiggn//J6X7WesV/DFjOEZWVCEFEIOE+qoB nxX551xm89SShBOJOvyvxXvkrHjtc9f39R3Czebb6rLkdp38b7cqBHasy5BCe5GK Ax7UVkpnCJqRO6oyAYeKKBtZ/Hgkc/PfOM24uLf44Hr65+t4wFfUkETEoR3+U3v5 u7x8RY1m4s+dJakgVDs8duKSmPb9NFM= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:22 2025 by rpki-client