$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c8cda32-4517-3c10-88c3-119668b9c293.roa File: 7c8cda32-4517-3c10-88c3-119668b9c293.roa (raw, json) Hash identifier: vYPUG6Pw+9om+4G2G6CV3pDlvTOp9/IDg8+uB4QYSgY= Subject key identifier: CA:3B:38:C9:B8:74:AD:94:38:34:EB:6C:94:67:89:98:4D:69:B7:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA3088569C579CA11059C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c8cda32-4517-3c10-88c3-119668b9c293.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:30:88:56:9c:57:9c:a1:10:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=94f5eedd-9ed6-4b2e-be36-6dc2d8fb1bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:96:af:5c:56:d4:14:3c:27:aa:5e:6a:da: e4:5d:15:e9:42:e8:ff:6c:10:d6:fe:b6:38:a8:e0: 57:11:42:d5:b1:f7:73:6b:a4:76:ca:00:05:1b:33: 89:0f:d0:88:70:35:4d:d5:d6:53:da:6b:8e:9c:cb: a4:27:e7:09:e6:90:90:46:d8:77:7d:30:76:55:4a: 3c:f1:eb:38:23:a2:92:fb:30:a4:88:2a:78:51:16: 2b:e3:7f:b0:9b:c5:ce:9b:2c:27:48:8b:e2:94:7f: 04:8e:47:71:35:21:19:29:1d:19:ad:e3:a5:b6:44: b1:c8:da:1e:06:53:dd:ec:44:c2:a9:83:e0:46:27: ed:d4:ec:a0:9e:58:03:88:1a:19:60:7a:48:13:74: 29:3d:95:59:59:61:1f:f4:0d:ce:4d:b5:79:10:67: e1:fe:a4:63:19:9c:44:50:17:36:f8:a7:24:5c:1a: 48:1d:ba:27:e2:20:7b:df:f1:c7:f2:51:0a:aa:f3: a4:8a:ab:6e:46:fc:51:fd:43:be:8f:5e:dc:eb:16: 00:2a:28:48:bf:c1:e4:6c:e1:45:1e:d8:e9:19:44: 8a:dd:fa:4a:3b:05:86:f4:9c:4c:ff:ff:bd:cc:66: 53:34:ea:d7:a2:73:50:01:c5:60:2a:6c:eb:07:91: 12:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3B:38:C9:B8:74:AD:94:38:34:EB:6C:94:67:89:98:4D:69:B7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7c8cda32-4517-3c10-88c3-119668b9c293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:66:f7:e1:2e:42:e9:42:83:67:e7:f8:ba:fc:bd:03:f7:d4: 45:a8:73:d8:e4:a4:e2:8a:9f:e0:ea:59:14:ab:bf:c7:75:19: d8:48:67:d1:14:33:1c:bb:3b:96:f8:31:96:c3:4c:38:e1:f3: df:f6:46:f9:2a:83:90:55:66:b9:3c:b7:99:95:7e:88:4e:35: e7:dc:cd:6b:73:f7:1e:bd:1e:ca:1f:ab:c4:87:31:8f:73:4b: 1f:47:c1:55:a1:bc:4e:8a:0e:66:d9:2b:0c:09:fa:83:54:7b: 45:a9:33:d4:07:c7:5e:6b:1f:90:dc:d9:c1:2f:1f:06:92:57: c4:6d:cc:41:0b:88:e1:f6:a8:1c:59:96:20:76:66:c7:22:d1: fe:29:60:2b:36:f2:f8:9f:a0:98:99:a9:b4:49:3b:b8:1f:bc: 7b:51:fc:1d:c4:8f:a2:aa:f2:be:b5:c2:71:3f:8f:20:b4:3e: 03:70:d6:fa:e4:d2:09:67:62:5a:16:cf:1d:65:db:b4:ad:44: 4f:aa:07:d8:72:b7:f9:6c:bd:10:e7:7b:62:d9:c2:d8:ec:b6: 87:6d:89:a6:1c:bf:21:92:ab:61:62:8a:58:d5:89:c3:62:26: ce:9c:9d:07:5d:fb:ed:76:59:33:bd:fd:bb:af:99:53:cf:e4: 0e:77:dc:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jCIVpxXnKEQWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk OTRmNWVlZGQtOWVkNi00YjJlLWJlMzYtNmRjMmQ4ZmIxYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYiWr1xW1BQ8J6peatrkXRXpQuj/bBDW/rY4 qOBXEULVsfdza6R2ygAFGzOJD9CIcDVN1dZT2muOnMukJ+cJ5pCQRth3fTB2VUo8 8es4I6KS+zCkiCp4URYr43+wm8XOmywnSIvilH8EjkdxNSEZKR0ZreOltkSxyNoe BlPd7ETCqYPgRift1OygnlgDiBoZYHpIE3QpPZVZWWEf9A3OTbV5EGfh/qRjGZxE UBc2+KckXBpIHbon4iB73/HH8lEKqvOkiqtuRvxR/UO+j17c6xYAKihIv8HkbOFF HtjpGUSK3fpKOwWG9JxM//+9zGZTNOrXonNQAcVgKmzrB5ESKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo7OMm4dK2UODTrbJRniZhNabecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2M4Y2RhMzItNDUxNy0z YzEwLTg4YzMtMTE5NjY4YjljMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBm9+EuQulCg2fn+Lr8vQP31EWoc9jkpOKKn+DqWRSrv8d1GdhIZ9EU Mxy7O5b4MZbDTDjh89/2Rvkqg5BVZrk8t5mVfohONefczWtz9x69Hsofq8SHMY9z Sx9HwVWhvE6KDmbZKwwJ+oNUe0WpM9QHx15rH5Dc2cEvHwaSV8RtzEELiOH2qBxZ liB2Zsci0f4pYCs28vifoJiZqbRJO7gfvHtR/B3Ej6Kq8r61wnE/jyC0PgNw1vrk 0glnYloWzx1l27StRE+qB9hyt/lsvRDne2LZwtjstodtiaYcvyGSq2FiiljVicNi Js6cnQdd++12WTO9/buvmVPP5A533BE= -----END CERTIFICATE-----Generated at Sun Jun 15 16:00:27 2025 by rpki-client