$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a30f35a4-f047-3945-8f27-396b540ece12.roa File: a30f35a4-f047-3945-8f27-396b540ece12.roa (raw, json) Hash identifier: KnhpoovEzshwh+WqIZ/76o5nswcQ8dMvFREJ8Y9pDJI= Subject key identifier: B6:5D:6C:5D:B8:C2:BA:6A:E8:CF:B0:01:C0:23:95:6E:F9:E2:8B:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA34379855892AA1AE9220 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a30f35a4-f047-3945-8f27-396b540ece12.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:34:37:98:55:89:2a:a1:ae:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=98d33243-110f-43c4-b711-deda4c56641b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8d:9e:9c:bb:5d:ac:34:f6:8d:95:c9:e4:43: 88:f5:89:48:6b:2d:c6:aa:97:6d:47:cb:b8:8c:73: 4d:c6:6b:cd:22:5a:f2:f3:d1:cc:ab:e4:b6:3d:93: f1:c1:fc:f2:d6:60:6c:d8:45:f5:5e:ad:ed:fc:e1: f6:46:9b:f7:0f:f0:57:fc:1a:ec:5b:88:ca:8d:d5: dd:f2:60:b5:40:62:3c:f7:32:25:a9:fe:e1:3f:99: 81:97:df:52:11:82:18:c2:dc:69:dc:8e:a2:e1:f8: c2:d3:bd:ef:da:6e:4c:b2:cd:a3:c7:78:c6:63:72: a3:cf:4c:a3:2e:c3:65:0a:63:c0:09:a1:df:3a:28: ac:88:b4:32:94:9d:06:a9:14:22:b6:58:3b:49:91: c7:c6:4e:87:f6:1c:8f:19:ea:87:40:38:c5:42:dc: 7e:2e:a2:a4:83:dd:9b:f0:85:6a:85:5d:88:ec:a2: 03:33:67:8c:45:0b:c6:37:c2:b0:34:82:9b:56:b8: 6e:2d:19:cb:17:da:64:5e:4b:e5:1b:d6:82:93:96: 08:64:4b:b7:0c:f9:ca:3b:79:38:86:bb:02:b7:50: 80:4d:26:0b:c9:cf:f5:0a:64:12:bf:d7:2f:83:f2: dd:e5:ec:18:b9:3d:8b:fc:45:e8:d2:bd:f1:39:a3: c5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5D:6C:5D:B8:C2:BA:6A:E8:CF:B0:01:C0:23:95:6E:F9:E2:8B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a30f35a4-f047-3945-8f27-396b540ece12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4c:2a:15:52:33:10:fe:40:e4:d2:3d:dd:6d:4d:23:2c:01: 28:4f:1a:4b:29:66:1a:2b:4e:8e:11:98:be:a0:80:fc:ea:a9: 11:28:5f:14:a7:70:34:95:26:fe:40:d9:5e:2b:15:87:11:dc: 5d:31:06:e5:42:cb:f5:29:aa:a6:b9:8c:51:5e:ad:3c:3c:83: f0:27:ee:bb:9c:c6:4b:ae:9d:9c:b9:75:72:50:d2:b6:c1:a0: 6f:0f:d5:05:f2:c0:af:83:54:0e:21:63:b1:ed:02:7f:46:0b: 0e:db:55:4c:22:da:bf:34:43:10:76:b4:c0:ad:03:bf:0d:87: ea:24:bb:96:3c:9f:88:fa:d2:b9:91:67:cd:96:6d:a0:f1:d3: 3c:7b:f2:e7:0a:1d:0f:c3:ff:ce:88:d6:79:bb:49:d8:e3:3d: 41:8c:b1:34:7f:ac:c6:48:e7:52:e0:d5:63:eb:4c:dc:0d:89: ef:e1:e2:db:30:f3:35:bd:1a:7f:17:ff:6a:1b:d9:6e:22:82: af:f3:ef:ff:15:cf:fc:8d:b8:f3:47:e1:be:2a:d5:a6:e9:b1: 15:0b:fa:a1:b9:e4:5e:89:d6:14:6b:88:60:0a:4b:75:cf:65: 44:ee:8f:b8:ba:77:12:21:2a:46:49:f5:91:ce:ea:bd:0b:4d: 6f:c3:73:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jQ3mFWJKqGukiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk OThkMzMyNDMtMTEwZi00M2M0LWI3MTEtZGVkYTRjNTY2NDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo2enLtdrDT2jZXJ5EOI9YlIay3GqpdtR8u4 jHNNxmvNIlry89HMq+S2PZPxwfzy1mBs2EX1Xq3t/OH2Rpv3D/BX/BrsW4jKjdXd 8mC1QGI89zIlqf7hP5mBl99SEYIYwtxp3I6i4fjC073v2m5Mss2jx3jGY3Kjz0yj LsNlCmPACaHfOiisiLQylJ0GqRQitlg7SZHHxk6H9hyPGeqHQDjFQtx+LqKkg92b 8IVqhV2I7KIDM2eMRQvGN8KwNIKbVrhuLRnLF9pkXkvlG9aCk5YIZEu3DPnKO3k4 hrsCt1CATSYLyc/1CmQSv9cvg/Ld5ewYuT2L/EXo0r3xOaPF2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZdbF24wrpq6M+wAcAjlW754ot3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTMwZjM1YTQtZjA0Ny0z OTQ1LThmMjctMzk2YjU0MGVjZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBMKhVSMxD+QOTSPd1tTSMsAShPGkspZhorTo4RmL6ggPzqqREoXxSn cDSVJv5A2V4rFYcR3F0xBuVCy/Upqqa5jFFerTw8g/An7rucxkuunZy5dXJQ0rbB oG8P1QXywK+DVA4hY7HtAn9GCw7bVUwi2r80QxB2tMCtA78Nh+oku5Y8n4j60rmR Z82WbaDx0zx78ucKHQ/D/86I1nm7SdjjPUGMsTR/rMZI51Lg1WPrTNwNie/h4tsw 8zW9Gn8X/2ob2W4igq/z7/8Vz/yNuPNH4b4q1abpsRUL+qG55F6J1hRriGAKS3XP ZUTuj7i6dxIhKkZJ9ZHO6r0LTW/Dcyc= -----END CERTIFICATE-----Generated at Mon Jun 16 15:38:55 2025 by rpki-client