$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa File: 76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa (raw, json) Hash identifier: QV18pFqoQBdiqazahrynuQzifvPpwicRpfr0FA7Rl8g= Subject key identifier: C4:BD:4C:6F:6D:9D:B8:A5:21:39:4C:63:B7:F7:69:40:9A:71:F6:1B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA3657E64AA337C8687180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:36:57:e6:4a:a3:37:c8:68:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=306f3617-8582-423f-bbcf-8ab212ed9424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:66:9f:9f:d1:19:2f:4c:01:e1:44:d4:61: 66:b1:3e:88:4e:b6:41:d1:a2:92:4f:d2:6d:6a:77: 81:87:48:1a:da:ba:d3:12:67:f4:51:32:ab:1b:8e: 25:ca:81:92:36:78:04:07:2e:7f:d1:7a:f0:8e:36: e9:46:42:a6:86:62:b8:fa:3e:9c:cd:b2:34:69:dd: d6:65:59:c1:26:b3:00:a2:b8:d7:39:ce:96:17:3c: ef:f9:4f:97:48:1d:a4:75:1c:41:04:19:13:5b:9c: 37:1b:4f:21:e6:c0:c7:16:2b:f8:f9:03:78:cb:c7: f6:cb:27:00:d7:97:69:8c:a2:0a:c7:87:a9:eb:d8: 99:91:25:09:ba:31:ea:10:0b:d7:83:7b:2d:a7:55: af:3f:0b:b7:b9:8c:16:2e:0d:af:bb:e8:f9:fa:1a: 82:20:9c:e5:36:78:1b:f1:88:d8:4f:57:cb:ca:b0: d6:f2:d1:1a:1e:8e:50:dc:83:bb:18:e1:67:9b:4c: 0b:23:3d:2e:5e:cd:c5:b9:12:ee:ce:9c:2f:2f:40: 46:2f:e1:bd:c5:f6:77:57:50:73:54:9e:7a:cf:77: b7:68:c2:7e:74:aa:37:ca:1a:08:5a:88:dc:46:14: 31:bc:73:9f:68:30:4c:52:2c:11:8d:1e:89:39:bc: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BD:4C:6F:6D:9D:B8:A5:21:39:4C:63:B7:F7:69:40:9A:71:F6:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:10:38:bd:4c:3d:0f:26:9e:2a:be:87:6a:34:bf:53:b6:2e: b9:11:17:b9:28:52:f5:6f:5b:71:d4:2b:a9:6e:35:96:89:c7: fe:00:c0:6b:ee:3a:b4:30:9a:1b:4c:51:73:ac:2d:00:1a:e0: 18:03:0d:a4:37:d8:a4:a6:dc:f6:0b:38:f0:d9:70:1b:e2:b6: 78:ee:ad:81:a0:04:5f:3b:40:64:a0:85:16:af:88:0d:70:cf: 9d:96:c5:fc:42:97:c1:d8:be:8e:79:5a:aa:9d:2a:f0:3b:3b: d4:8d:af:48:fe:57:aa:de:ec:d1:83:19:4d:22:72:96:3b:e8: d0:db:e4:ab:e7:5e:d1:3b:b4:10:0f:ff:06:6d:aa:8a:18:c8: 78:a0:24:a3:81:a1:65:7a:f3:83:0f:f8:b0:30:cf:ff:b3:28: d9:90:cc:55:1c:92:5a:e4:7e:26:1b:54:5b:3a:c5:9a:6f:f6: 6e:8e:a8:67:5d:41:5c:39:c1:32:ab:0f:73:ad:b1:59:5a:5a: 7a:ea:c3:1a:9e:5e:f3:78:a0:00:9d:30:93:1a:80:05:83:2b: 47:54:87:72:86:58:f6:0f:5e:85:2f:49:90:08:e3:ca:64:44: f5:2e:5e:c1:ed:ac:61:6b:fe:24:fd:76:a8:19:82:c5:ce:ed: 37:09:49:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jZX5kqjN8hocYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MzA2ZjM2MTctODU4Mi00MjNmLWJiY2YtOGFiMjEyZWQ5NDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmptmn5/RGS9MAeFE1GFmsT6ITrZB0aKST9Jt aneBh0ga2rrTEmf0UTKrG44lyoGSNngEBy5/0XrwjjbpRkKmhmK4+j6czbI0ad3W ZVnBJrMAorjXOc6WFzzv+U+XSB2kdRxBBBkTW5w3G08h5sDHFiv4+QN4y8f2yycA 15dpjKIKx4ep69iZkSUJujHqEAvXg3stp1WvPwu3uYwWLg2vu+j5+hqCIJzlNngb 8YjYT1fLyrDW8tEaHo5Q3IO7GOFnm0wLIz0uXs3FuRLuzpwvL0BGL+G9xfZ3V1Bz VJ56z3e3aMJ+dKo3yhoIWojcRhQxvHOfaDBMUiwRjR6JObwkiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS9TG9tnbilITlMY7f3aUCacfYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzY4OTdhZTUtNTZlNC0z ZDZkLThhMDktNWM4OGU1ZDVmMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgQOL1MPQ8mniq+h2o0v1O2LrkRF7koUvVvW3HUK6luNZaJx/4AwGvu OrQwmhtMUXOsLQAa4BgDDaQ32KSm3PYLOPDZcBvitnjurYGgBF87QGSghRaviA1w z52WxfxCl8HYvo55WqqdKvA7O9SNr0j+V6re7NGDGU0icpY76NDb5KvnXtE7tBAP /wZtqooYyHigJKOBoWV684MP+LAwz/+zKNmQzFUcklrkfiYbVFs6xZpv9m6OqGdd QVw5wTKrD3OtsVlaWnrqwxqeXvN4oACdMJMagAWDK0dUh3KGWPYPXoUvSZAI48pk RPUuXsHtrGFr/iT9dqgZgsXO7TcJSeM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:08:38 2025 by rpki-client