$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa File: 98e2edf8-c542-3049-b50c-6a39dee13a72.roa (raw, json) Hash identifier: UVV+nVuvl+4REP1dAniotLzl2Q8nP9g6qHpuLkuRu0s= Subject key identifier: 2F:BB:44:71:0C:10:1A:2D:34:09:C1:1E:18:6C:4B:5D:A4:EF:4D:7D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F5E422D7942F6B1E9380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f5:e4:22:d7:94:2f:6b:1e:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=0f514fbd-7c81-42ed-9e7c-ffe7cf2ce207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3c:be:dc:0e:63:c5:fd:d4:e7:e7:1d:c1:01: 41:ee:92:42:97:45:9a:50:a1:f3:1e:a9:4a:58:d8: 32:02:ee:10:21:f1:d5:b0:b3:ba:07:58:80:16:5d: b7:9b:27:3c:41:3e:61:69:06:f6:83:65:31:69:2c: f6:d5:ba:fb:b7:ec:a1:32:e6:e7:f7:05:6a:15:83: 5d:77:06:b5:35:bd:77:2f:f0:6e:6b:e5:37:e0:d4: b2:73:84:6c:9b:d0:33:bc:d5:9a:b7:93:d5:15:42: 10:c7:d9:69:5d:34:97:96:36:18:42:39:fd:b7:aa: d5:8c:ae:72:e6:67:42:47:14:fb:3d:a6:26:66:70: dc:ad:07:4a:91:a0:ab:31:34:79:48:41:a7:15:fb: d5:fa:27:d9:25:84:e8:f8:cf:61:47:85:58:23:7e: 8e:fd:96:bb:7c:3b:86:4e:07:ee:15:39:84:eb:0f: 10:92:e9:6c:15:ad:d2:a6:50:cb:c3:13:56:ed:57: 17:5a:65:db:11:9f:74:2b:8b:df:8a:3b:c0:93:b2: db:4c:2d:a3:61:93:fe:71:b0:84:08:ec:ef:82:cb: c1:f1:4b:61:8b:d4:42:a6:43:96:f1:be:25:20:d9: b8:74:f9:f2:5f:61:bc:74:f7:b3:00:63:3d:9b:af: 7c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BB:44:71:0C:10:1A:2D:34:09:C1:1E:18:6C:4B:5D:A4:EF:4D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9a:3c:5b:b6:63:04:5d:16:e7:bc:d5:39:34:e1:58:f3:ad: 49:5c:a2:69:7e:0b:2e:1f:43:e4:8b:19:a2:cc:31:08:00:87: e5:e2:22:a9:08:e2:08:e6:a0:27:18:78:89:40:50:fa:65:64: 47:29:aa:50:d2:83:21:16:13:f3:2e:b1:8f:f0:8d:eb:1f:4f: a5:60:c3:91:f9:84:5a:33:41:6e:3d:c6:54:14:38:95:6c:9b: bf:9e:26:49:c1:e1:0a:f2:a4:40:b2:31:1f:f5:81:02:6d:df: 88:41:fb:14:68:d8:53:75:97:5d:5a:58:8d:3c:aa:56:7d:d5: f6:ef:3c:fb:48:d0:58:99:6a:c0:b3:ff:9f:fb:7e:cc:9f:58: 5e:ee:4b:96:37:c7:2b:41:f6:94:53:b6:f6:fc:ec:29:35:2b: a0:9f:9d:88:83:a5:a6:8b:cf:67:b9:e7:be:e2:62:4e:65:c6: d5:cf:0b:b2:bd:f4:ac:31:39:ac:89:73:a1:f8:d8:3b:b6:a5: 8d:03:22:6d:67:20:cf:4e:0b:96:f5:dc:d8:1c:f5:0a:02:3d: cc:34:31:36:0f:a7:5e:87:91:cd:76:12:df:58:f5:fe:92:27: af:7c:0c:99:17:24:e9:35:77:d1:a4:37:b0:3e:44:7a:88:05: 49:81:93:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPXkIteUL2sek4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MGY1MTRmYmQtN2M4MS00MmVkLTllN2MtZmZlN2NmMmNlMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zy+3A5jxf3U5+cdwQFB7pJCl0WaUKHzHqlK WNgyAu4QIfHVsLO6B1iAFl23myc8QT5haQb2g2UxaSz21br7t+yhMubn9wVqFYNd dwa1Nb13L/Bua+U34NSyc4Rsm9AzvNWat5PVFUIQx9lpXTSXljYYQjn9t6rVjK5y 5mdCRxT7PaYmZnDcrQdKkaCrMTR5SEGnFfvV+ifZJYTo+M9hR4VYI36O/Za7fDuG TgfuFTmE6w8QkulsFa3SplDLwxNW7VcXWmXbEZ90K4vfijvAk7LbTC2jYZP+cbCE COzvgsvB8Uthi9RCpkOW8b4lINm4dPnyX2G8dPezAGM9m698dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+7RHEMEBotNAnBHhhsS12k7019MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOThlMmVkZjgtYzU0Mi0z MDQ5LWI1MGMtNmEzOWRlZTEzYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKaPFu2YwRdFue81Tk04VjzrUlcoml+Cy4fQ+SLGaLMMQgAh+XiIqkI 4gjmoCcYeIlAUPplZEcpqlDSgyEWE/MusY/wjesfT6Vgw5H5hFozQW49xlQUOJVs m7+eJknB4QrypECyMR/1gQJt34hB+xRo2FN1l11aWI08qlZ91fbvPPtI0FiZasCz /5/7fsyfWF7uS5Y3xytB9pRTtvb87Ck1K6CfnYiDpaaLz2e5577iYk5lxtXPC7K9 9KwxOayJc6H42Du2pY0DIm1nIM9OC5b13Ngc9QoCPcw0MTYPp16Hkc12Et9Y9f6S J698DJkXJOk1d9GkN7A+RHqIBUmBk4o= -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:53 2025 by rpki-client