$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa File: 9dbeb59f-5757-3035-b091-70de9d1fb12f.roa (raw, json) Hash identifier: QFzw+/fcIm/66+2g5ymsMknrI9wxSDv5GVVMZ+hpwOQ= Subject key identifier: 83:A2:10:D5:72:86:E1:7B:70:23:54:4C:F4:9C:E5:17:38:DC:E9:D5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122629ABB9DBB8C3746080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:26:29:ab:b9:db:b8:c3:74:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fe5388e0-afee-4511-9289-fb079078d83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:36:3f:04:8d:7c:ea:b7:c4:be:23:2f:63: af:c1:04:9b:5e:ac:52:5d:fd:79:ef:92:78:4b:9a: 13:93:99:58:5a:e6:95:5a:0d:ae:c6:da:e0:7e:08: be:e2:af:bb:ba:e4:6f:e6:f2:10:2d:6b:2b:2a:3b: 8a:37:64:12:d9:9b:7f:7c:e2:88:c4:d7:0c:03:e5: b8:6d:47:77:04:6d:88:b0:ab:84:77:82:16:15:84: 88:9a:14:7a:a0:39:7c:76:b7:7d:a7:6f:3e:f8:bb: 8f:eb:cd:8b:7d:1a:63:3d:16:63:c8:e8:c7:d7:b6: 68:20:b6:6c:14:7a:a3:60:9c:fa:d4:e1:ec:2e:ea: c9:d1:6d:f7:e5:bd:c9:c0:db:a2:f0:b7:8a:2c:3a: ed:6d:4c:aa:e3:7e:ba:eb:dd:ac:1d:98:c3:74:d4: 63:ba:2c:f8:a9:46:0a:d0:67:af:d6:34:20:c3:4b: 06:0a:16:ce:79:0f:bb:ce:92:c8:60:eb:9e:38:55: 2e:49:f6:a3:aa:9b:d1:0e:0d:fa:65:ae:7b:99:06: c5:c4:f1:46:d4:4a:30:b7:36:cc:89:02:c0:ea:00: 9e:89:8a:d0:ec:aa:dc:35:0d:05:25:65:97:b6:c3: 74:af:ba:07:c8:07:e8:45:9d:90:76:7a:90:22:1c: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A2:10:D5:72:86:E1:7B:70:23:54:4C:F4:9C:E5:17:38:DC:E9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:14:cb:bb:ad:f7:3f:7b:34:f1:a0:4a:a5:59:66:64:29:fc: 18:a2:97:9b:53:49:dd:50:14:cd:ea:83:ec:b6:c9:5d:b0:fc: 8a:8a:dd:56:93:32:51:cb:08:8a:97:80:89:3c:15:9a:b1:f7: 80:34:ed:d9:e6:59:b3:e5:98:a7:91:4c:c0:9b:14:05:f8:24: 21:0c:56:e8:b7:b5:c0:ae:39:30:05:89:1e:e4:ab:62:19:41: 4c:21:19:64:f2:05:b1:4e:fa:26:73:37:c2:64:63:e2:f7:19: 81:5e:f2:37:28:01:65:92:6e:c1:8a:44:76:20:40:73:58:15: d2:37:00:c7:8a:16:27:a8:b3:71:e7:43:0c:e7:17:fc:87:00: 79:a0:45:53:4b:5f:81:fd:4b:02:89:86:4c:a5:94:00:44:a6: 6d:be:52:49:d1:9d:7f:85:41:94:9c:c2:ff:1e:6b:52:05:4a: 25:0d:9f:70:59:3d:6e:28:07:1e:74:f1:07:b8:ce:69:1b:81: 54:59:9c:9a:16:47:7c:d5:18:f5:da:5e:a7:0b:d4:d8:1b:59: 27:68:e2:93:18:2c:49:08:a3:49:73:84:b7:dc:25:20:a5:15: e1:4f:36:ea:fe:cb:e4:81:de:ee:b9:cd:34:8e:40:5a:fb:2f: 39:7f:bc:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiYpq7nbuMN0YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmU1Mzg4ZTAtYWZlZS00NTExLTkyODktZmIwNzkwNzhkODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3I2PwSNfOq3xL4jL2OvwQSbXqxSXf1575J4 S5oTk5lYWuaVWg2uxtrgfgi+4q+7uuRv5vIQLWsrKjuKN2QS2Zt/fOKIxNcMA+W4 bUd3BG2IsKuEd4IWFYSImhR6oDl8drd9p28++LuP682LfRpjPRZjyOjH17ZoILZs FHqjYJz61OHsLurJ0W335b3JwNui8LeKLDrtbUyq4366692sHZjDdNRjuiz4qUYK 0Gev1jQgw0sGChbOeQ+7zpLIYOueOFUuSfajqpvRDg36Za57mQbFxPFG1EowtzbM iQLA6gCeiYrQ7KrcNQ0FJWWXtsN0r7oHyAfoRZ2QdnqQIhzRGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOiENVyhuF7cCNUTPSc5Rc43OnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWRiZWI1OWYtNTc1Ny0z MDM1LWIwOTEtNzBkZTlkMWZiMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUUy7ut9z97NPGgSqVZZmQp/Biil5tTSd1QFM3qg+y2yV2w/IqK3VaT MlHLCIqXgIk8FZqx94A07dnmWbPlmKeRTMCbFAX4JCEMVui3tcCuOTAFiR7kq2IZ QUwhGWTyBbFO+iZzN8JkY+L3GYFe8jcoAWWSbsGKRHYgQHNYFdI3AMeKFieos3Hn QwznF/yHAHmgRVNLX4H9SwKJhkyllABEpm2+UknRnX+FQZScwv8ea1IFSiUNn3BZ PW4oBx508Qe4zmkbgVRZnJoWR3zVGPXaXqcL1NgbWSdo4pMYLEkIo0lzhLfcJSCl FeFPNur+y+SB3u65zTSOQFr7Lzl/vMY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:48 2025 by rpki-client