$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa File: 95de198e-9bc7-3f62-8579-2e33c1164c71.roa (raw, json) Hash identifier: kLg7Yp1oaqXMZq5hbnW4DgrUiunG/iALsB7NE/aUTu8= Subject key identifier: E3:39:F9:23:C6:64:D4:04:32:3B:9F:6B:7D:6E:74:32:19:B7:F2:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA37CB34192244CEE741E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:37:cb:34:19:22:44:ce:e7:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=bbcc4ad8-340a-49ad-acf3-e5a7c75bfbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:7d:b6:e5:70:55:e6:85:09:cc:7e:33:5f: 46:c4:a5:32:00:43:5a:ea:10:4a:d2:31:00:be:4c: c4:dc:24:54:a9:9c:e0:56:6d:84:df:22:4e:ea:ae: 33:b3:e9:f5:60:c8:3a:f1:89:fc:5d:d6:b9:ca:6e: 49:da:bf:db:ed:1c:b4:8d:fc:2e:28:71:5f:74:28: a9:3c:93:a1:66:43:ba:b8:f0:ae:4f:c5:15:0d:52: fd:3f:a2:a5:9a:5b:b2:94:85:be:70:2d:38:e3:05: 1c:57:ed:05:92:ea:93:e5:85:fd:1c:7b:45:53:41: 6e:a4:c2:92:46:a6:c2:ea:27:a1:fe:75:f5:5d:46: f9:df:ef:50:55:0e:3d:58:58:8c:d7:fb:2b:db:0d: 09:a9:20:76:4c:2a:ba:73:fc:59:c6:af:0e:e6:d7: b1:81:0e:87:d5:15:07:72:1c:32:c7:a0:2f:c2:d8: dd:3d:0b:fb:8a:2b:10:1d:c8:5f:61:e9:52:ac:93: 73:59:14:9b:d7:94:d1:fe:bb:29:7c:af:a0:17:04: 61:ef:17:7d:87:fa:5f:cc:af:0d:1e:12:5c:0e:1c: 60:27:92:49:e5:e5:db:b9:25:2f:a2:9b:34:72:bb: 81:d8:d9:0a:0c:a9:55:44:d8:06:27:b8:0e:58:ed: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:39:F9:23:C6:64:D4:04:32:3B:9F:6B:7D:6E:74:32:19:B7:F2:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:99:03:28:14:2c:49:a8:1c:08:34:fb:ca:0f:54:2a:21:98: ac:9b:bf:6d:0c:71:e3:d0:9c:f0:db:53:1e:53:45:81:44:24: e6:51:68:a2:15:da:a8:68:dd:69:d0:30:88:d9:90:58:8d:0d: ed:ef:01:d6:85:fa:3e:be:f4:89:d4:fc:96:20:ec:06:b6:02: 65:17:06:fb:4b:23:a6:97:64:83:f3:b5:c3:7b:64:8e:be:cf: a8:36:ba:f5:3a:4e:14:e1:15:a0:9e:7a:2c:c2:71:43:0c:45: 0a:39:3f:9b:fc:f1:11:4b:7e:01:0a:97:80:6b:d8:30:f4:9b: 68:0d:c1:c4:3a:2d:ca:b4:3f:8d:79:9d:90:2f:88:88:d7:90: 94:d7:1a:a4:8c:03:f0:60:08:c3:83:14:30:d6:de:c4:30:18: 8f:42:e1:a9:01:53:0c:c6:0f:7c:13:1a:b0:91:4b:95:fb:0d: 49:55:51:1e:ba:8f:3d:3e:85:f3:69:ee:64:2e:e3:dc:fb:c7: f4:2e:86:23:e1:47:ed:7f:4c:bb:8f:c7:82:38:76:20:23:66: 3b:4b:c2:39:58:a9:00:03:af:91:d3:be:9c:a2:d2:1c:9c:e3: 7e:db:dc:ca:0e:9f:02:74:25:89:64:1d:d4:8e:72:02:85:31: 51:b7:48:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jfLNBkiRM7nQeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YmJjYzRhZDgtMzQwYS00OWFkLWFjZjMtZTVhN2M3NWJmYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMl9tuVwVeaFCcx+M19GxKUyAENa6hBK0jEA vkzE3CRUqZzgVm2E3yJO6q4zs+n1YMg68Yn8Xda5ym5J2r/b7Ry0jfwuKHFfdCip PJOhZkO6uPCuT8UVDVL9P6KlmluylIW+cC044wUcV+0FkuqT5YX9HHtFU0FupMKS RqbC6ieh/nX1XUb53+9QVQ49WFiM1/sr2w0JqSB2TCq6c/xZxq8O5texgQ6H1RUH chwyx6AvwtjdPQv7iisQHchfYelSrJNzWRSb15TR/rspfK+gFwRh7xd9h/pfzK8N HhJcDhxgJ5JJ5eXbuSUvops0cruB2NkKDKlVRNgGJ7gOWO3IdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM5+SPGZNQEMjufa31udDIZt/KiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTVkZTE5OGUtOWJjNy0z ZjYyLTg1NzktMmUzM2MxMTY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaZAygULEmoHAg0+8oPVCohmKybv20McePQnPDbUx5TRYFEJOZRaKIV 2qho3WnQMIjZkFiNDe3vAdaF+j6+9InU/JYg7Aa2AmUXBvtLI6aXZIPztcN7ZI6+ z6g2uvU6ThThFaCeeizCcUMMRQo5P5v88RFLfgEKl4Br2DD0m2gNwcQ6Lcq0P415 nZAviIjXkJTXGqSMA/BgCMODFDDW3sQwGI9C4akBUwzGD3wTGrCRS5X7DUlVUR66 jz0+hfNp7mQu49z7x/QuhiPhR+1/TLuPx4I4diAjZjtLwjlYqQADr5HTvpyi0hyc 437b3MoOnwJ0JYlkHdSOcgKFMVG3SFg= -----END CERTIFICATE-----Generated at Mon Jun 16 11:58:48 2025 by rpki-client