$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa File: b06bceef-a146-3786-a710-c662d310f7f5.roa (raw, json) Hash identifier: d2WA6CzWdzQNp93Ko6e0+YAAIUboyaIH4x8jg2H2QlA= Subject key identifier: CC:16:87:70:2F:53:0A:52:E4:B0:A9:4E:FC:6E:53:9A:15:D2:E0:1F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F6C48FFED8CF2ADF4C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f6:c4:8f:fe:d8:cf:2a:df:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=9d46cb80-7056-4608-9128-7ef3afa66122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1e:6d:55:9f:7d:b8:19:40:c1:6b:ce:a1:14: 84:a6:e8:10:4f:c4:ca:42:4b:86:0f:7a:f4:d0:48: 4e:9d:e7:9b:3b:99:2c:a7:81:e8:1b:2b:b4:6f:7d: 01:cb:57:fc:36:42:b3:25:07:9e:ec:ae:3c:9b:40: 59:10:f7:7c:ae:3f:44:86:2b:09:9b:23:b4:86:0d: e8:6a:84:ff:65:f9:d9:76:ab:ac:5e:7f:26:fc:2f: 18:2c:c3:03:e1:9f:0a:3b:9f:42:c3:f4:29:92:b9: 94:3f:21:9d:42:ee:77:3a:85:83:12:db:3f:1e:fc: 07:25:6e:72:ad:c4:23:f8:c4:45:32:fa:96:01:e2: 48:db:34:eb:d6:09:b1:06:f5:4b:4e:fb:6d:71:0b: cf:87:42:bb:3d:97:85:2e:41:fc:6e:35:33:60:08: f2:b7:2d:fd:b5:eb:3d:22:f4:4b:21:90:65:f6:cf: 68:99:15:32:0e:c7:d1:99:43:c8:59:d7:95:f4:ae: 48:88:f2:8c:b3:12:cd:2e:b0:2a:59:6a:1b:f8:9e: e1:e3:99:ed:6f:21:d0:50:59:43:9f:d5:77:78:67: dc:8e:b3:05:12:69:7f:dd:fb:ff:3f:10:80:20:4a: 92:ba:1b:ef:fe:07:19:b6:4c:2b:bc:f0:9c:f4:18: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:16:87:70:2F:53:0A:52:E4:B0:A9:4E:FC:6E:53:9A:15:D2:E0:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:87:44:e9:e6:a0:32:6a:34:e5:95:87:2f:ca:3d:42:91:84: 42:7f:d3:cb:69:2c:83:a9:ee:2c:e4:ce:83:f1:6e:2f:58:94: cd:b9:a2:d3:96:66:b7:49:53:1a:73:76:e7:01:86:d1:3c:93: 4d:bf:d7:89:2d:54:38:b4:d3:21:53:4e:ee:be:69:e3:10:45: fd:d1:bf:98:00:03:90:9e:a6:98:4f:37:a4:c8:98:59:77:9e: 8e:1f:ef:e4:7a:76:4e:7a:f5:f6:e4:e4:e0:c8:a9:ed:3d:67: 85:94:61:fb:a6:0c:01:6c:f7:32:ba:77:aa:6c:e2:95:65:cf: de:04:03:f8:ce:4f:b7:cd:5d:fb:57:c1:7d:e9:fb:3f:e8:47: af:2c:3d:9a:10:36:71:b3:56:01:8c:88:8f:02:b5:ff:23:fe: b6:64:d1:aa:dd:20:e1:03:8f:9e:96:1e:7c:4c:a9:db:0c:9f: ff:e5:eb:d2:43:95:1d:9f:6d:52:02:28:44:48:ee:73:05:de: 53:e9:eb:af:3c:2b:43:67:1c:7f:dc:ee:59:53:ab:4f:b6:9b: 9f:eb:48:d9:68:92:d8:26:31:48:8b:de:08:c7:60:a2:f3:d7: ff:6b:e6:ea:eb:4b:66:c4:8b:5b:f0:03:d4:9f:f2:61:d5:60: 0d:4b:f9:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPbEj/7YzyrfTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk OWQ0NmNiODAtNzA1Ni00NjA4LTkxMjgtN2VmM2FmYTY2MTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR5tVZ99uBlAwWvOoRSEpugQT8TKQkuGD3r0 0EhOneebO5ksp4HoGyu0b30By1f8NkKzJQee7K48m0BZEPd8rj9EhisJmyO0hg3o aoT/ZfnZdqusXn8m/C8YLMMD4Z8KO59Cw/QpkrmUPyGdQu53OoWDEts/HvwHJW5y rcQj+MRFMvqWAeJI2zTr1gmxBvVLTvttcQvPh0K7PZeFLkH8bjUzYAjyty39tes9 IvRLIZBl9s9omRUyDsfRmUPIWdeV9K5IiPKMsxLNLrAqWWob+J7h45ntbyHQUFlD n9V3eGfcjrMFEml/3fv/PxCAIEqSuhvv/gcZtkwrvPCc9BhwBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwWh3AvUwpS5LCpTvxuU5oV0uAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjA2YmNlZWYtYTE0Ni0z Nzg2LWE3MTAtYzY2MmQzMTBmN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSHROnmoDJqNOWVhy/KPUKRhEJ/08tpLIOp7izkzoPxbi9YlM25otOW ZrdJUxpzducBhtE8k02/14ktVDi00yFTTu6+aeMQRf3Rv5gAA5CepphPN6TImFl3 no4f7+R6dk569fbk5ODIqe09Z4WUYfumDAFs9zK6d6ps4pVlz94EA/jOT7fNXftX wX3p+z/oR68sPZoQNnGzVgGMiI8Ctf8j/rZk0ardIOEDj56WHnxMqdsMn//l69JD lR2fbVICKERI7nMF3lPp6688K0NnHH/c7llTq0+2m5/rSNloktgmMUiL3gjHYKLz 1/9r5urrS2bEi1vwA9Sf8mHVYA1L+dU= -----END CERTIFICATE-----Generated at Mon Aug 4 15:29:40 2025 by rpki-client