$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa File: 8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa (raw, json) Hash identifier: 4fffL6wj77RMidveP0MDTbXR68fmQtLFlJGXBzMmMW8= Subject key identifier: 26:EB:04:82:44:DF:D7:DE:4E:E3:E6:22:85:7A:70:D8:4F:49:51:C9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118475B980AC0D470C5E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:84:75:b9:80:ac:0d:47:0c:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1336eac1-0cfa-4c33-83ba-24f7fb73af87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ee:75:72:35:7e:70:5e:55:22:77:08:ac:b1: 9c:24:7a:89:38:96:e5:10:2e:82:10:ea:89:c1:d6: b8:35:6d:56:16:9f:88:13:d0:6a:17:19:6b:9d:dd: 6d:a0:27:18:7d:fb:e6:d6:81:b2:69:17:5c:e7:1e: 00:f6:63:b2:45:51:31:d4:79:04:6a:09:16:cf:3f: 46:e2:91:69:71:a7:f4:85:72:60:a4:fd:48:b7:42: 94:8c:94:e3:b0:fa:9e:6c:80:7f:7f:0c:6e:4a:72: f3:a3:f6:e1:7a:34:61:8a:ec:27:3d:a9:42:c8:d0: 88:9f:a9:16:29:e0:bc:47:4f:49:a4:37:50:e3:7d: 6c:30:ab:30:50:0f:4b:97:3f:c1:b5:22:fe:d4:3f: 08:6a:f9:1a:4e:f6:5d:73:b7:35:b6:3f:7e:09:67: 53:04:e0:d3:64:f3:e3:af:50:8b:d1:26:c3:50:b5: bd:d3:a4:ce:60:df:03:40:6c:c2:2e:ec:ef:7c:2e: 11:94:a5:5e:6f:12:76:c4:1c:74:df:2c:04:dc:66: 0e:f2:b7:9a:13:a1:5e:c6:30:51:23:1c:03:92:90: 31:f4:6b:8e:39:f6:87:8d:6b:a6:da:71:d8:81:f2: c8:f1:f6:fc:bf:8b:54:a5:d6:77:e1:cf:f3:cb:c2: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EB:04:82:44:DF:D7:DE:4E:E3:E6:22:85:7A:70:D8:4F:49:51:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4b:cd:61:87:34:81:b0:ae:a1:f2:db:53:13:b2:c6:2f:52: 1d:a8:f6:c4:f2:14:08:1a:bd:0e:4a:8a:dc:f6:b5:ee:0a:76: 61:da:3e:bb:4d:6f:b0:7d:21:94:66:7e:e8:8f:00:04:e9:59: 95:76:a7:7f:be:84:cf:26:0e:e8:c2:d7:d1:d1:5c:2d:60:d7: e8:af:46:c7:72:09:b0:76:07:07:9c:0c:4a:92:79:cd:ff:75: e2:d1:57:3f:f6:90:71:9d:b6:8f:ee:e2:a3:21:75:0a:ea:17: 67:97:1b:8a:c3:50:34:9a:86:db:b2:43:82:ea:45:5b:cb:6c: 20:cd:5e:b7:88:fc:b3:28:43:09:06:53:49:90:f4:b9:fd:2f: 75:29:3f:9d:56:4f:7a:54:a7:34:87:71:e1:15:9c:13:1d:51: 60:9a:41:21:15:09:1b:24:7e:bc:be:0e:ae:86:ca:7a:f2:63: 4b:85:de:56:5d:d8:ea:5c:63:45:23:d4:ca:31:eb:78:f2:66: 09:cc:77:44:c3:fc:5a:95:d9:b2:00:ef:c9:dd:07:ea:ea:46: 34:38:8b:75:3d:ce:50:ea:28:ed:1d:38:5b:fb:1b:f6:24:cf: f0:a4:f0:8d:2b:f9:76:af:f9:b5:fa:ce:b0:cc:eb:ec:37:32: a8:b0:e3:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYR1uYCsDUcMXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTMzNmVhYzEtMGNmYS00YzMzLTgzYmEtMjRmN2ZiNzNhZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+e51cjV+cF5VIncIrLGcJHqJOJblEC6CEOqJ wda4NW1WFp+IE9BqFxlrnd1toCcYffvm1oGyaRdc5x4A9mOyRVEx1HkEagkWzz9G 4pFpcaf0hXJgpP1It0KUjJTjsPqebIB/fwxuSnLzo/bhejRhiuwnPalCyNCIn6kW KeC8R09JpDdQ431sMKswUA9Llz/BtSL+1D8IavkaTvZdc7c1tj9+CWdTBODTZPPj r1CL0SbDULW906TOYN8DQGzCLuzvfC4RlKVebxJ2xBx03ywE3GYO8reaE6FexjBR IxwDkpAx9GuOOfaHjWum2nHYgfLI8fb8v4tUpdZ34c/zy8JikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbrBIJE39feTuPmIoV6cNhPSVHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGFmNGFiZjYtMmJiYy0z YzE2LWE5YzYtYzhlMjM4ZDA2NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBLzWGHNIGwrqHy21MTssYvUh2o9sTyFAgavQ5Kitz2te4KdmHaPrtN b7B9IZRmfuiPAATpWZV2p3++hM8mDujC19HRXC1g1+ivRsdyCbB2BwecDEqSec3/ deLRVz/2kHGdto/u4qMhdQrqF2eXG4rDUDSahtuyQ4LqRVvLbCDNXreI/LMoQwkG U0mQ9Ln9L3UpP51WT3pUpzSHceEVnBMdUWCaQSEVCRskfry+Dq6GynryY0uF3lZd 2OpcY0Uj1Mox63jyZgnMd0TD/FqV2bIA78ndB+rqRjQ4i3U9zlDqKO0dOFv7G/Yk z/Ck8I0r+Xav+bX6zrDM6+w3Mqiw46E= -----END CERTIFICATE-----Generated at Mon Aug 4 14:19:50 2025 by rpki-client