$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa File: 8e3f565f-19fb-3655-be31-21a3ad990702.roa (raw, json) Hash identifier: Ie0TSD7StWmqDSzYd6b/F+pGuL4WhCSZQyeSm4v7cII= Subject key identifier: 6D:63:DC:24:77:9C:22:77:D4:59:2E:23:53:A4:D4:A3:EC:38:87:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841226805F7A9A0A2F751B70 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:26:80:5f:7a:9a:0a:2f:75:1b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=98cb22ef-5ac0-4a21-9315-b3daf8f34be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:73:8c:15:b6:52:b6:d7:dd:ba:cc:28:f4:2f: e2:a8:ad:13:b3:7a:06:63:c8:ce:e6:c2:1c:38:9f: 7b:59:87:17:a6:84:2f:3d:f9:60:d6:d1:26:14:9e: 0a:03:12:5e:0f:d4:76:a8:b5:00:06:0e:73:b0:ec: bc:6d:42:a3:ca:72:07:7e:a1:d7:e8:0d:af:b5:8b: bd:35:fe:3e:c8:53:89:5d:0e:e5:d8:b6:61:40:f5: d6:02:95:72:be:ea:ba:61:fd:ea:6c:62:61:f5:6d: 2f:06:fb:8d:53:85:4f:73:35:c7:18:84:5d:27:09: 88:94:4a:ff:81:8c:80:f1:eb:f2:e6:71:dc:fa:67: 56:e8:e1:ce:57:f1:ba:7d:b5:27:1c:d8:47:db:e9: 8b:56:82:84:f0:65:25:0e:43:ac:f8:0d:9c:59:8f: 7e:d6:a7:49:d1:c7:bc:15:5b:2b:75:83:b0:67:d1: 78:a0:c2:5d:2e:ef:c2:43:ce:ae:65:03:1e:78:5b: 3a:71:7f:2e:d3:43:ac:ca:a0:14:09:cf:4b:63:cb: dd:96:bd:45:c3:c8:39:de:d5:e5:34:39:41:77:4b: 6d:c8:69:f9:ca:8f:ff:15:8e:3f:69:98:3a:d4:8f: 34:c5:2f:eb:82:ef:be:30:09:39:ee:2f:ec:a2:fc: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:63:DC:24:77:9C:22:77:D4:59:2E:23:53:A4:D4:A3:EC:38:87:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0a:5e:9d:5e:6b:f9:e9:86:39:a8:f0:7f:cf:dd:e8:46:c4: 0f:b1:4d:67:08:4b:02:cb:21:0e:64:88:37:8f:ec:99:01:9d: 3e:37:7e:be:7c:56:41:4e:44:1c:b3:eb:f7:8d:48:dc:6a:5e: a3:cf:ce:19:08:0f:c9:2a:b6:9a:f1:a9:98:db:bc:dd:fa:97: 1a:d2:36:5d:92:90:53:b1:93:30:79:09:06:28:9a:db:78:cc: c9:87:10:4b:64:51:68:af:31:26:e0:54:37:58:46:fb:f5:c4: df:2d:58:24:54:22:25:41:a3:87:84:e0:23:2e:6c:ae:36:f9: 38:65:c5:0a:03:66:b0:86:af:7b:9e:00:a2:4a:e8:fa:58:cb: f6:4a:42:d2:89:45:f3:4a:5d:c7:39:80:32:6f:1f:bb:7a:15: 91:22:be:34:0d:f7:b3:5e:a5:79:60:57:20:2f:6b:d6:f0:31: 71:0b:df:3d:6a:b6:4a:ac:4a:76:9a:2c:b6:ce:5c:98:de:9b: a1:f0:fc:b2:21:db:7b:26:eb:f6:95:59:6a:00:55:b4:3f:13: d4:fb:8d:f3:45:79:61:3f:bb:d6:c7:a4:d0:1a:f0:ca:65:19: a5:0a:72:d6:41:7d:cc:bc:33:94:8c:be:72:5c:a2:80:3f:3f: 1a:91:6d:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiaAX3qaCi91G3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OThjYjIyZWYtNWFjMC00YTIxLTkzMTUtYjNkYWY4ZjM0YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHOMFbZSttfduswo9C/iqK0Ts3oGY8jO5sIc OJ97WYcXpoQvPflg1tEmFJ4KAxJeD9R2qLUABg5zsOy8bUKjynIHfqHX6A2vtYu9 Nf4+yFOJXQ7l2LZhQPXWApVyvuq6Yf3qbGJh9W0vBvuNU4VPczXHGIRdJwmIlEr/ gYyA8evy5nHc+mdW6OHOV/G6fbUnHNhH2+mLVoKE8GUlDkOs+A2cWY9+1qdJ0ce8 FVsrdYOwZ9F4oMJdLu/CQ86uZQMeeFs6cX8u00OsyqAUCc9LY8vdlr1Fw8g53tXl NDlBd0ttyGn5yo//FY4/aZg61I80xS/rgu++MAk57i/sovyOdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1j3CR3nCJ31FkuI1Ok1KPsOIenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGUzZjU2NWYtMTlmYi0z NjU1LWJlMzEtMjFhM2FkOTkwNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEKXp1ea/nphjmo8H/P3ehGxA+xTWcISwLLIQ5kiDeP7JkBnT43fr58 VkFORByz6/eNSNxqXqPPzhkID8kqtprxqZjbvN36lxrSNl2SkFOxkzB5CQYomtt4 zMmHEEtkUWivMSbgVDdYRvv1xN8tWCRUIiVBo4eE4CMubK42+ThlxQoDZrCGr3ue AKJK6PpYy/ZKQtKJRfNKXcc5gDJvH7t6FZEivjQN97NepXlgVyAva9bwMXEL3z1q tkqsSnaaLLbOXJjem6Hw/LIh23sm6/aVWWoAVbQ/E9T7jfNFeWE/u9bHpNAa8Mpl GaUKctZBfcy8M5SMvnJcooA/PxqRbU4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:54 2025 by rpki-client