$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa File: ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa (raw, json) Hash identifier: GpIJRNfrdkIQvnieBig2EvdxJ0M4iZUoXHipk3rCX3c= Subject key identifier: D8:97:5D:89:C7:C5:75:21:B2:1C:6D:5B:17:07:F7:6B:2F:8C:A5:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA34D21636A2298C82CB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:34:d2:16:36:a2:29:8c:82:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=a625310f-e412-4f48-8bc8-233663f84221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:41:82:6f:27:ed:fb:78:09:62:dd:0f:82: fc:db:21:69:66:c4:e8:16:f5:f7:63:a3:a5:43:9e: 14:b7:a9:7a:0d:6c:b8:d7:66:6c:b2:5b:a9:3e:d2: 00:af:f4:3f:ae:35:af:41:96:08:02:ea:de:6b:8c: c9:d6:c8:37:b9:36:09:98:83:b1:0e:f6:f1:5c:19: 5c:c0:6d:c9:de:0e:41:0c:2e:e5:f0:95:68:36:8b: 0e:19:8d:bd:ab:c3:0c:98:96:7a:50:e1:51:2f:01: 99:b4:24:7b:87:26:a8:3e:e5:11:72:04:ea:ae:66: 2e:a9:b2:bd:18:62:ca:b8:0b:44:a1:56:4c:a1:f9: 8d:9a:d0:21:04:bf:22:8c:40:44:16:14:55:59:5e: f9:05:90:c9:9c:49:5f:d5:72:ba:8b:cb:31:ba:97: 2c:e7:37:9e:cb:9e:81:e7:6f:17:5a:1e:2d:ce:56: 11:e3:8b:47:be:f7:0c:92:dd:64:5d:6d:e9:d4:9c: c4:94:f8:00:dd:86:3d:3d:f6:8f:d0:49:8e:8a:b9: 7a:96:23:ca:15:bb:3f:8c:e0:c1:e7:1b:f4:34:95: 34:15:bc:39:6d:a9:d6:d4:d8:0e:72:52:62:12:8a: 51:bf:1b:e3:99:22:62:c5:1a:97:3d:cc:8b:5a:a9: 87:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:97:5D:89:C7:C5:75:21:B2:1C:6D:5B:17:07:F7:6B:2F:8C:A5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a1:16:d0:ed:44:d6:2d:be:c1:08:7b:59:6d:66:2d:c3:3c: 07:8a:76:a1:5c:79:dc:b1:ec:b8:74:66:e9:8f:b4:fb:9a:df: 3a:34:4d:ee:7d:88:f0:a4:aa:1b:1b:67:57:06:29:d2:50:d9: 1b:25:49:9f:f5:87:f8:ee:54:27:47:64:56:61:05:57:db:14: e3:61:7f:e8:7f:7e:1a:33:07:5d:b8:22:0d:8a:2d:55:31:e1: 42:74:d2:88:17:9f:58:1e:b4:f1:61:04:15:68:9c:a5:08:06: 7a:2f:4c:6f:fa:10:d8:84:82:83:ec:4b:05:a7:0f:bd:a0:13: 3f:01:1d:78:ba:7e:67:83:9e:f8:25:7e:95:2f:9c:bc:f0:44: 50:c7:07:11:68:f4:ad:f1:a6:3a:1f:5d:d6:d9:18:5f:24:0d: c2:e1:07:db:a1:6d:08:8f:f8:7b:e3:0d:6b:a2:36:bd:9d:68: 1b:b3:af:5e:d4:d0:f0:9b:a6:c2:94:d7:59:75:95:34:05:0d: 54:b0:3f:0b:cd:ca:d9:d2:b2:d2:a1:ad:37:4f:3e:0d:e9:0a: f5:63:2a:fb:85:99:92:e9:28:3b:7b:d0:9e:fc:21:00:d8:9c: 6c:6d:6a:31:63:10:a8:f7:ec:11:ce:6b:0f:c3:bd:4b:6f:8e: f1:dc:31:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jTSFjaiKYyCywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YTYyNTMxMGYtZTQxMi00ZjQ4LThiYzgtMjMzNjYzZjg0MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDVBgm8n7ft4CWLdD4L82yFpZsToFvX3Y6Ol Q54Ut6l6DWy412ZsslupPtIAr/Q/rjWvQZYIAurea4zJ1sg3uTYJmIOxDvbxXBlc wG3J3g5BDC7l8JVoNosOGY29q8MMmJZ6UOFRLwGZtCR7hyaoPuURcgTqrmYuqbK9 GGLKuAtEoVZMofmNmtAhBL8ijEBEFhRVWV75BZDJnElf1XK6i8sxupcs5zeey56B 528XWh4tzlYR44tHvvcMkt1kXW3p1JzElPgA3YY9PfaP0EmOirl6liPKFbs/jODB 5xv0NJU0Fbw5banW1NgOclJiEopRvxvjmSJixRqXPcyLWqmHkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiXXYnHxXUhshxtWxcH92svjKVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWQwYWI0MjItMGQ0OC0z ODZjLTk2ODItOWZhOGYzYmE1MGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGhFtDtRNYtvsEIe1ltZi3DPAeKdqFcedyx7Lh0ZumPtPua3zo0Te59 iPCkqhsbZ1cGKdJQ2RslSZ/1h/juVCdHZFZhBVfbFONhf+h/fhozB124Ig2KLVUx 4UJ00ogXn1getPFhBBVonKUIBnovTG/6ENiEgoPsSwWnD72gEz8BHXi6fmeDnvgl fpUvnLzwRFDHBxFo9K3xpjofXdbZGF8kDcLhB9uhbQiP+HvjDWuiNr2daBuzr17U 0PCbpsKU11l1lTQFDVSwPwvNytnSstKhrTdPPg3pCvVjKvuFmZLpKDt70J78IQDY nGxtajFjEKj37BHOaw/DvUtvjvHcMTI= -----END CERTIFICATE-----Generated at Mon Jun 16 12:24:55 2025 by rpki-client