$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7262320f-6e46-3404-ad33-fa92977a1392.roa File: 7262320f-6e46-3404-ad33-fa92977a1392.roa (raw, json) Hash identifier: HUqDg2Y6WS1S7PJ3gj6xt4mgVadcGUT1WlA0T9qCSho= Subject key identifier: 7C:DE:00:88:AD:AB:76:BA:0D:53:B7:1E:26:0C:F6:46:BB:50:41:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F803DFDCFE068F9A9900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7262320f-6e46-3404-ad33-fa92977a1392.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f8:03:df:dc:fe:06:8f:9a:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=19d90ec9-de55-4258-9dd3-4a00d93aa2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:cc:6d:3c:c1:ed:6f:3a:1a:fd:7d:79:6f: ea:38:50:5b:c2:b9:22:c2:73:ba:85:8e:18:b0:ea: 32:ba:23:eb:9f:99:1b:26:8a:00:4d:77:4b:c3:22: d8:99:bd:41:3e:c1:42:4f:d0:79:1d:22:1b:09:b5: 8e:ac:a1:fd:a7:ec:a1:c0:66:1b:d0:e7:bb:52:32: 79:9b:16:a7:d7:90:ff:f5:48:31:2a:6c:99:ae:77: 60:ce:10:8e:cc:b5:c3:de:62:3d:66:e1:cc:1b:7a: dc:fc:40:26:f3:d1:9b:cb:02:af:5a:e2:1e:3a:a0: 93:4d:0f:a7:be:a9:b6:06:66:d1:98:08:97:39:77: a9:91:c9:d2:c4:8c:c0:db:64:3b:27:6a:3b:e2:21: 42:76:b8:c6:cb:64:a2:69:f6:72:86:50:ca:cc:e5: 0b:37:85:0c:44:58:e3:e5:97:9e:fe:5d:33:d2:85: 35:b5:69:6e:6c:91:d4:03:4a:63:e8:66:cf:e2:a3: 4e:f5:e9:b9:91:e4:c6:f0:1e:85:c5:c9:31:20:39: 6f:ec:5f:a6:4e:72:ad:f2:bf:1e:3a:83:af:de:a9: 3e:ae:f7:17:a9:91:bc:90:32:0b:97:ac:2f:4b:53: 66:73:8b:a0:0a:4e:cf:98:71:e6:12:52:42:80:37: a6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DE:00:88:AD:AB:76:BA:0D:53:B7:1E:26:0C:F6:46:BB:50:41:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7262320f-6e46-3404-ad33-fa92977a1392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3e:a3:d7:70:9e:5e:ed:03:b4:d3:8d:15:10:67:3c:96:43: f3:a8:5e:af:b8:40:02:94:c0:d3:96:41:53:4f:53:4d:e9:a0: 1f:18:8c:89:67:bf:70:57:5f:29:51:3f:68:85:e1:4f:fa:c2: e0:7a:34:39:64:88:4e:4b:37:93:1a:6f:23:8d:70:98:fe:ac: a0:c3:db:0e:2a:eb:1a:7f:fe:11:1c:ad:eb:3b:8f:df:df:3d: 1a:df:d5:eb:6e:94:e7:2c:bc:65:14:5d:a2:b9:78:02:2f:a3: d5:94:d2:90:f7:37:f3:9f:f2:48:6a:9a:48:8c:5a:38:27:aa: a2:24:8f:74:59:38:72:57:9b:5d:42:91:ad:1e:b8:da:78:42: 93:6e:85:20:4c:80:a2:99:f5:36:7e:7a:07:45:d8:5f:f6:cf: 1d:0e:35:0b:81:91:17:55:d6:e8:ad:a8:5c:2a:e6:09:09:ff: c1:2f:d6:f6:0c:31:be:3a:0a:66:a1:81:6e:ea:18:80:c1:61: 53:90:0d:b1:73:2c:a6:73:4e:2e:08:4f:5e:45:7a:13:e1:13: 54:34:30:5c:8a:27:50:42:e1:51:0e:ac:74:a0:f2:db:41:a2: 54:f5:f6:6f:59:e0:d8:db:22:af:e2:70:4f:9d:e7:89:1d:17: a4:d8:71:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPgD39z+Bo+amQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MTlkOTBlYzktZGU1NS00MjU4LTlkZDMtNGEwMGQ5M2FhMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9PMbTzB7W86Gv19eW/qOFBbwrkiwnO6hY4Y sOoyuiPrn5kbJooATXdLwyLYmb1BPsFCT9B5HSIbCbWOrKH9p+yhwGYb0Oe7UjJ5 mxan15D/9UgxKmyZrndgzhCOzLXD3mI9ZuHMG3rc/EAm89GbywKvWuIeOqCTTQ+n vqm2BmbRmAiXOXepkcnSxIzA22Q7J2o74iFCdrjGy2SiafZyhlDKzOULN4UMRFjj 5Zee/l0z0oU1tWlubJHUA0pj6GbP4qNO9em5keTG8B6FxckxIDlv7F+mTnKt8r8e OoOv3qk+rvcXqZG8kDILl6wvS1Nmc4ugCk7PmHHmElJCgDemFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzeAIitq3a6DVO3HiYM9ka7UEFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzI2MjMyMGYtNmU0Ni0z NDA0LWFkMzMtZmE5Mjk3N2ExMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8+o9dwnl7tA7TTjRUQZzyWQ/OoXq+4QAKUwNOWQVNPU03poB8YjIln v3BXXylRP2iF4U/6wuB6NDlkiE5LN5MabyONcJj+rKDD2w4q6xp//hEcres7j9/f PRrf1etulOcsvGUUXaK5eAIvo9WU0pD3N/Of8khqmkiMWjgnqqIkj3RZOHJXm11C ka0euNp4QpNuhSBMgKKZ9TZ+egdF2F/2zx0ONQuBkRdV1uitqFwq5gkJ/8Ev1vYM Mb46CmahgW7qGIDBYVOQDbFzLKZzTi4IT15FehPhE1Q0MFyKJ1BC4VEOrHSg8ttB olT19m9Z4NjbIq/icE+d54kdF6TYceM= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:50 2025 by rpki-client