$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa File: 98e2edf8-c542-3049-b50c-6a39dee13a72.roa (raw, json) Hash identifier: cHuCBn92xv8wNdR2d+a6JdPQIyPR31AGCDbDaf5jRTU= Subject key identifier: 2D:07:0F:F2:43:7C:B8:0B:52:FE:2E:3F:B3:9A:90:E8:E6:09:F3:C7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA34793AD6766D24523880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:34:79:3a:d6:76:6d:24:52:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=bc1f4202-70da-482e-bc98-15d0af8113c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:ba:68:1b:bf:12:4a:0b:6a:f8:8d:b6:4c: 6c:3a:c6:c7:d6:1d:ee:44:c1:d7:55:02:ce:d9:1b: c3:ed:2e:7b:30:d3:aa:ba:45:10:b3:60:0d:5f:88: e6:72:a9:e7:1a:57:b5:e1:e9:34:d3:fe:79:4b:11: 2e:64:82:69:e8:3c:cb:97:c6:3f:3b:25:bd:4d:c3: 2a:3f:3d:5d:97:00:d2:e1:5a:34:eb:20:59:2b:a4: 64:94:4a:45:ac:e2:7e:c3:ac:f8:f7:7e:9d:d7:2d: 3f:07:65:12:97:c7:a8:41:42:21:97:5c:00:ba:8b: c4:23:4f:54:00:a1:15:d8:cc:0e:0a:04:f9:a7:38: 0b:39:d6:30:f8:a4:59:e0:1b:51:0d:e6:df:8c:9e: 2d:2e:f7:08:24:ea:a1:ad:37:4e:f6:ff:80:6b:97: 5d:d8:d4:d4:99:7d:e0:e2:8f:42:b7:03:40:6e:30: e0:33:4d:5c:f1:7f:48:f3:1d:8e:e4:25:3e:36:73: cb:d9:2f:33:90:7d:4d:34:1a:3e:d0:08:81:9b:71: 02:2c:dd:d8:44:60:ef:fc:dd:be:0d:38:44:6f:82: f8:85:14:51:94:4d:8f:2a:65:80:c4:af:84:f1:ea: 4f:09:1b:00:5c:18:9b:89:18:6d:f0:be:06:99:85: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:07:0F:F2:43:7C:B8:0B:52:FE:2E:3F:B3:9A:90:E8:E6:09:F3:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ca:43:ef:f5:67:ea:d9:ae:ca:62:e5:f2:06:26:30:e3:db: 57:8f:f2:5c:58:72:cd:28:66:f0:a6:82:c8:0c:da:73:2a:b0: c6:c6:08:29:eb:8b:9f:f1:f9:37:eb:29:23:df:4d:73:8f:64: c0:be:2a:34:b4:b8:25:2b:8f:77:d5:24:13:8d:bf:1b:cc:fa: 6f:65:84:39:9c:6f:5c:c2:8b:af:27:03:09:09:bf:85:8c:4c: c1:55:87:0c:d6:75:86:46:29:9a:85:51:4a:dc:b0:61:fa:b9: 6b:84:4d:6c:27:ab:6a:dd:86:84:2d:c3:0b:34:b8:0d:93:c3: cf:ba:df:f7:bf:d0:cb:21:13:2c:52:0e:28:ce:86:f5:5d:39: 31:a6:e6:c1:cb:da:8f:9d:e0:04:e1:79:5d:15:4b:28:07:31: 72:10:61:15:f4:ec:4f:28:f6:0a:cf:5e:3a:92:44:4e:be:2a: e3:b0:17:b4:7b:e0:8c:06:b6:04:3b:37:f8:90:61:b4:ed:2a: b0:e7:af:d3:a6:1b:45:bd:e5:dd:13:40:02:13:4b:1f:fd:d3: 17:3d:48:d6:50:11:4e:63:55:a8:e0:e3:fe:d0:cc:c0:98:f4: b8:67:01:51:9f:9e:84:d5:2f:70:d6:88:49:2a:8f:39:a2:d4: 62:7e:72:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jR5OtZ2bSRSOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YmMxZjQyMDItNzBkYS00ODJlLWJjOTgtMTVkMGFmODExM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3y6aBu/EkoLaviNtkxsOsbH1h3uRMHXVQLO 2RvD7S57MNOqukUQs2ANX4jmcqnnGle14ek00/55SxEuZIJp6DzLl8Y/OyW9TcMq Pz1dlwDS4Vo06yBZK6RklEpFrOJ+w6z4936d1y0/B2USl8eoQUIhl1wAuovEI09U AKEV2MwOCgT5pzgLOdYw+KRZ4BtRDebfjJ4tLvcIJOqhrTdO9v+Aa5dd2NTUmX3g 4o9CtwNAbjDgM01c8X9I8x2O5CU+NnPL2S8zkH1NNBo+0AiBm3ECLN3YRGDv/N2+ DThEb4L4hRRRlE2PKmWAxK+E8epPCRsAXBibiRht8L4GmYW8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0HD/JDfLgLUv4uP7OakOjmCfPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOThlMmVkZjgtYzU0Mi0z MDQ5LWI1MGMtNmEzOWRlZTEzYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/KQ+/1Z+rZrspi5fIGJjDj21eP8lxYcs0oZvCmgsgM2nMqsMbGCCnr i5/x+TfrKSPfTXOPZMC+KjS0uCUrj3fVJBONvxvM+m9lhDmcb1zCi68nAwkJv4WM TMFVhwzWdYZGKZqFUUrcsGH6uWuETWwnq2rdhoQtwws0uA2Tw8+63/e/0MshEyxS DijOhvVdOTGm5sHL2o+d4ATheV0VSygHMXIQYRX07E8o9grPXjqSRE6+KuOwF7R7 4IwGtgQ7N/iQYbTtKrDnr9OmG0W95d0TQAITSx/90xc9SNZQEU5jVajg4/7QzMCY 9LhnAVGfnoTVL3DWiEkqjzmi1GJ+cig= -----END CERTIFICATE-----Generated at Mon Jun 16 03:25:10 2025 by rpki-client