$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa File: af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa (raw, json) Hash identifier: lcKECyuOMU/bwp6DLwGN/x3KzUjsjq5Vqpud67aOYPc= Subject key identifier: 08:5E:59:EF:EC:08:64:F3:27:78:48:BD:48:8B:58:CC:C7:55:47:23 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84117533594954DBDFC82F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:75:33:59:49:54:db:df:c8:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=29ff552b-3585-42bc-be17-420a92f5f629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9c:f4:e3:3e:2e:71:e1:51:5e:79:6e:de:d1: 2f:ac:93:3d:22:f9:1e:7a:57:82:b0:b7:e7:2a:cb: d1:f0:03:a8:0a:fa:ee:38:ec:9b:a2:75:04:53:42: 80:fd:59:c6:da:41:3d:73:e4:b8:48:22:54:79:a6: 18:ca:34:05:01:b9:6d:ca:45:96:6d:05:3e:98:65: f3:92:c6:b7:85:d4:5a:a1:cb:0c:af:92:3f:10:9a: 2b:71:96:ea:51:0f:7c:ad:d2:43:92:81:c3:32:fd: 78:94:fe:32:f7:8d:fd:a1:a0:67:94:1d:bd:58:ca: 44:c8:d0:94:f3:18:7d:fb:45:8d:ea:9f:de:e4:13: fc:b7:58:59:d6:3b:e4:7c:7f:05:dd:55:d2:23:ee: 47:dc:19:85:7a:75:45:79:74:39:6a:07:b5:f4:a0: c8:50:30:e9:1c:cb:d6:cd:14:44:86:21:41:58:43: d0:8d:af:b5:93:f9:40:8d:89:37:e0:94:97:07:cd: c7:cb:af:4d:3f:1f:50:9b:43:d7:37:25:87:b7:b2: 98:be:18:aa:48:29:2b:f4:26:1d:a5:78:2f:ee:be: f7:68:62:93:88:d9:45:c1:49:c9:aa:d2:41:18:33: 75:85:69:d9:43:c1:76:69:ab:ba:a5:ed:ff:e8:37: 51:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5E:59:EF:EC:08:64:F3:27:78:48:BD:48:8B:58:CC:C7:55:47:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:98:a8:cf:5c:b3:41:29:8f:0d:90:14:2c:51:23:e9:21:b8: 66:85:ac:20:69:fd:2d:1f:01:4e:e9:8c:a8:9f:34:44:37:9e: 9e:be:22:41:05:ea:73:08:fb:ef:f3:7d:81:fd:70:ac:8a:92: d9:ca:5f:15:32:ba:a7:ed:29:fb:fd:53:cf:11:b4:c8:1e:75: c7:84:d6:d0:3f:f4:f2:44:4e:ba:4c:42:d0:a8:42:05:c1:12: f4:d1:04:36:cc:ee:d8:14:09:67:44:9a:2c:f2:9a:ac:df:17: fc:c0:58:59:8c:1a:62:38:e6:fe:fb:89:ed:5e:7d:16:37:fe: 70:09:4c:83:c6:76:0e:da:d0:c4:0c:69:30:3c:c4:41:fa:fc: ad:9d:42:39:57:d6:b9:1b:19:86:79:3d:47:1f:93:14:ff:15: 8c:c5:c3:3f:04:e3:a2:94:94:66:31:34:73:77:a2:8f:45:32: 2a:17:20:b7:07:10:ce:07:72:d8:0f:05:29:34:e0:23:ea:d0: 58:e5:2e:62:02:85:af:da:67:ed:e9:d5:7c:9f:09:96:9b:68: b7:3a:af:af:2d:7d:37:30:c7:44:3f:a5:45:75:f2:69:b2:e9: 32:26:30:dc:9b:d6:9e:62:12:89:ba:28:d7:1a:21:93:a7:2b: 55:a4:97:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXUzWUlU29/IL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjlmZjU1MmItMzU4NS00MmJjLWJlMTctNDIwYTkyZjVmNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZz04z4uceFRXnlu3tEvrJM9IvkeeleCsLfn KsvR8AOoCvruOOybonUEU0KA/VnG2kE9c+S4SCJUeaYYyjQFAbltykWWbQU+mGXz ksa3hdRaocsMr5I/EJorcZbqUQ98rdJDkoHDMv14lP4y9439oaBnlB29WMpEyNCU 8xh9+0WN6p/e5BP8t1hZ1jvkfH8F3VXSI+5H3BmFenVFeXQ5age19KDIUDDpHMvW zRREhiFBWEPQja+1k/lAjYk34JSXB83Hy69NPx9Qm0PXNyWHt7KYvhiqSCkr9CYd pXgv7r73aGKTiNlFwUnJqtJBGDN1hWnZQ8F2aau6pe3/6DdRqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAheWe/sCGTzJ3hIvUiLWMzHVUcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWYxNjY0YzEtZWU3Ni0z M2I3LTllMjctN2VmNTJiMzJkNmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGYqM9cs0Epjw2QFCxRI+khuGaFrCBp/S0fAU7pjKifNEQ3np6+IkEF 6nMI++/zfYH9cKyKktnKXxUyuqftKfv9U88RtMgedceE1tA/9PJETrpMQtCoQgXB EvTRBDbM7tgUCWdEmizymqzfF/zAWFmMGmI45v77ie1efRY3/nAJTIPGdg7a0MQM aTA8xEH6/K2dQjlX1rkbGYZ5PUcfkxT/FYzFwz8E46KUlGYxNHN3oo9FMioXILcH EM4HctgPBSk04CPq0FjlLmICha/aZ+3p1XyfCZabaLc6r68tfTcwx0Q/pUV18mmy 6TImMNyb1p5iEom6KNcaIZOnK1Wklzg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:51 2025 by rpki-client