$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa File: 95de198e-9bc7-3f62-8579-2e33c1164c71.roa (raw, json) Hash identifier: ofPf2yP2c+uFvpw+YKQLD6/DCQm5XyuRKlBu5c6rNE0= Subject key identifier: BB:A3:45:27:61:03:E8:56:1E:4F:A9:02:5D:AA:14:39:19:A0:1B:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F9359AB358FBFE33AF80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f9:35:9a:b3:58:fb:fe:33:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=f7dd9dec-69a5-43de-8a28-d7ec8b156f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b8:72:63:7a:32:cd:b3:f8:4a:7b:b7:56:32: 14:e9:03:02:3c:6f:b5:d2:ec:e1:37:16:c6:33:10: 6d:00:34:16:65:1d:b9:b3:c2:bf:8e:03:8c:38:5e: 88:8a:55:95:81:90:7b:0a:7e:15:27:83:b6:41:1b: e5:0c:43:27:96:e3:ba:ae:8f:46:21:59:91:64:7c: 99:d5:c8:ef:fb:96:98:5a:d9:b5:13:b3:8d:62:ce: be:44:05:4c:e7:44:db:2b:a4:65:40:43:84:8a:00: 21:2a:8f:4b:94:7e:2c:76:b0:78:db:cf:75:53:5f: ef:b1:51:97:17:8c:4b:4a:9e:27:33:a9:04:b9:cc: 7a:c9:a8:95:7b:00:d2:0f:82:c4:a7:a6:7e:13:42: d1:e9:c4:d9:ee:2c:59:43:f7:76:3b:c0:bc:6f:8f: bf:d4:ae:a6:bf:4b:62:7f:e5:ed:d9:e9:a6:d1:92: a3:c1:c7:7d:57:0a:10:99:22:82:31:b6:eb:a1:c5: 26:dc:82:4d:53:de:29:6d:a6:f1:d1:f9:0e:e0:3a: e5:b3:dd:c4:c3:6f:8b:a1:71:d6:34:38:f2:fb:97: fc:11:44:0d:6d:88:e9:90:c4:73:26:1b:da:d6:c2: fa:3c:45:67:fd:38:71:66:1b:31:90:dd:5b:62:71: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A3:45:27:61:03:E8:56:1E:4F:A9:02:5D:AA:14:39:19:A0:1B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:83:74:b4:c8:b9:9f:dc:1a:1a:54:58:dd:60:cf:ca:ea:a2: f6:55:f4:a3:1a:20:fd:17:ed:ac:e2:e1:67:cb:12:92:1c:4a: a8:e5:3a:1b:41:8d:bc:92:1e:f7:73:11:eb:fa:9c:88:78:b8: 4f:70:40:11:7c:48:e9:2d:b2:b0:d3:b2:b3:21:0a:dc:cc:26: 9c:54:ff:de:55:93:92:3e:42:cd:c6:70:b6:63:ab:8e:2b:39: 73:ff:69:bb:fb:39:c9:7c:ae:90:99:12:92:3c:7f:c2:b2:7c: 5e:e8:9c:59:16:0e:fd:f8:04:04:7a:b4:05:24:af:e4:0f:cc: 37:c0:84:88:70:79:06:0b:4d:d0:ba:c5:71:5a:bf:42:4b:2e: 22:ba:52:93:a4:c8:94:0b:74:e3:e1:a7:e4:08:5f:a1:50:72: 56:67:f4:fe:a4:01:57:a6:39:d7:29:14:f4:49:9f:31:31:81: 9b:69:ef:d6:6a:92:1f:0b:42:fd:b7:e9:aa:fa:57:a2:cd:a5: 46:ab:51:a7:a2:f9:3d:e3:d6:9b:bd:6a:f8:e5:9e:97:45:61: 83:82:43:90:0e:cc:1d:81:5b:4a:84:74:e0:80:40:66:1e:e4: c8:8f:19:d0:67:9f:83:c7:5d:db:65:3f:9a:c4:94:4b:17:7c: 4e:db:8e:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPk1mrNY+/4zr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZjdkZDlkZWMtNjlhNS00M2RlLThhMjgtZDdlYzhiMTU2ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17hyY3oyzbP4Snu3VjIU6QMCPG+10uzhNxbG MxBtADQWZR25s8K/jgOMOF6IilWVgZB7Cn4VJ4O2QRvlDEMnluO6ro9GIVmRZHyZ 1cjv+5aYWtm1E7ONYs6+RAVM50TbK6RlQEOEigAhKo9LlH4sdrB42891U1/vsVGX F4xLSp4nM6kEucx6yaiVewDSD4LEp6Z+E0LR6cTZ7ixZQ/d2O8C8b4+/1K6mv0ti f+Xt2emm0ZKjwcd9VwoQmSKCMbbrocUm3IJNU94pbabx0fkO4Drls93Ew2+LoXHW NDjy+5f8EUQNbYjpkMRzJhva1sL6PEVn/ThxZhsxkN1bYnHUSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLujRSdhA+hWHk+pAl2qFDkZoBveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTVkZTE5OGUtOWJjNy0z ZjYyLTg1NzktMmUzM2MxMTY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqDdLTIuZ/cGhpUWN1gz8rqovZV9KMaIP0X7azi4WfLEpIcSqjlOhtB jbySHvdzEev6nIh4uE9wQBF8SOktsrDTsrMhCtzMJpxU/95Vk5I+Qs3GcLZjq44r OXP/abv7Ocl8rpCZEpI8f8KyfF7onFkWDv34BAR6tAUkr+QPzDfAhIhweQYLTdC6 xXFav0JLLiK6UpOkyJQLdOPhp+QIX6FQclZn9P6kAVemOdcpFPRJnzExgZtp79Zq kh8LQv236ar6V6LNpUarUaei+T3j1pu9avjlnpdFYYOCQ5AOzB2BW0qEdOCAQGYe 5MiPGdBnn4PHXdtlP5rElEsXfE7bjt8= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:27 2025 by rpki-client