$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa File: b3713e25-419a-33c8-af5b-3cb02587140b.roa (raw, json) Hash identifier: dYT750Lk7RjKzCM8KxqrIT8XZ2A+BnlEkw6oWZ+gua8= Subject key identifier: B7:72:B4:F0:8A:CC:FA:18:78:BB:B9:50:A1:9D:79:C1:E2:E1:D6:A7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411818662D8CD63F0E47440 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 11344 IP address blocks: 142.250.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:81:86:62:d8:cd:63:f0:e4:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=db2016b3-22c1-42ff-a075-9c089457a307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c3:29:66:23:ce:02:17:43:76:14:a5:df:32: 58:29:55:1a:78:2b:0e:19:3e:52:64:65:b5:35:d7: e0:f1:6c:24:fb:8b:e0:e8:17:6e:70:0a:b1:26:c4: 31:70:1e:44:7d:45:88:46:0f:00:5a:d9:59:87:d6: 92:89:82:8d:3e:02:61:85:6d:95:79:f7:bc:0b:b6: 48:90:8b:23:c5:b2:0c:dd:c9:61:03:ab:1e:0a:67: f3:2c:87:a7:bc:b8:6e:7a:83:1b:e1:df:14:13:4b: ab:da:08:30:e7:cf:75:59:34:d1:e4:cb:b4:6a:59: 29:3d:0f:c6:aa:85:54:40:05:60:04:29:d4:d9:38: c7:7b:a7:8d:37:0c:ff:80:b9:62:eb:86:be:5a:ac: 61:cd:74:15:1b:f1:15:ab:2b:20:3f:cc:67:97:23: 97:fa:71:3f:fb:46:0b:18:0c:16:78:dd:8b:b1:15: c4:98:a2:0e:31:97:4a:d7:77:1c:52:b3:6b:f5:76: af:a0:1b:78:32:5c:d8:b4:55:41:44:9e:b7:97:a6: 6b:95:86:ae:fc:e7:92:a1:5c:02:0a:87:88:53:df: c0:47:ee:b3:62:33:46:ef:03:53:bb:11:26:64:5e: 36:fd:bc:13:c8:78:2d:87:13:03:41:46:3f:4a:ef: 8d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:72:B4:F0:8A:CC:FA:18:78:BB:B9:50:A1:9D:79:C1:E2:E1:D6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b3713e25-419a-33c8-af5b-3cb02587140b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2c:14:33:3a:f3:a9:dd:aa:cb:d3:7b:0d:51:71:30:51:09: 14:b9:2c:c4:7c:98:29:ca:55:0c:70:a8:f8:59:a0:30:73:3f: 00:31:0f:e1:0e:7b:8e:dc:40:d0:86:97:3d:64:82:d8:2d:97: 91:51:0e:b4:84:3a:38:75:ec:76:21:f8:23:47:4d:28:4b:65: 48:2f:4c:61:73:95:3e:4e:e5:2b:0e:fc:f9:28:74:e2:c7:17: 63:e7:bf:e0:58:c9:f7:80:ec:99:09:ec:48:57:a7:2e:6d:03: 30:3c:7e:34:6d:cb:f7:2c:18:02:d3:0e:b7:c3:78:be:93:37: b4:e1:51:28:96:12:96:31:70:b8:94:61:bd:8f:4d:d2:6b:df: 9d:57:27:a4:e4:2a:44:a9:56:d3:5e:07:52:0b:91:9e:6e:15: 91:e5:60:91:02:5f:64:3e:a2:c0:7d:b9:54:e1:b5:da:99:0d: a9:1b:14:2a:73:95:87:4f:ac:4e:50:8e:a3:63:e8:46:bc:87: 96:1c:d1:2f:c9:a5:ed:f0:b5:6c:71:c6:fb:2e:50:b3:16:b4: 58:6a:8b:a4:d5:a0:db:a6:f1:df:81:db:b7:c3:b2:4b:7b:06: 38:d7:64:26:7c:9f:a3:24:8c:02:9f:c2:b4:42:bb:df:64:de: 9b:a3:4e:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYGGYtjNY/DkdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGIyMDE2YjMtMjJjMS00MmZmLWEwNzUtOWMwODk0NTdhMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMMpZiPOAhdDdhSl3zJYKVUaeCsOGT5SZGW1 Ndfg8Wwk+4vg6BducAqxJsQxcB5EfUWIRg8AWtlZh9aSiYKNPgJhhW2Vefe8C7ZI kIsjxbIM3clhA6seCmfzLIenvLhueoMb4d8UE0ur2ggw5891WTTR5Mu0alkpPQ/G qoVUQAVgBCnU2TjHe6eNNwz/gLli64a+WqxhzXQVG/EVqysgP8xnlyOX+nE/+0YL GAwWeN2LsRXEmKIOMZdK13ccUrNr9XavoBt4MlzYtFVBRJ63l6ZrlYau/OeSoVwC CoeIU9/AR+6zYjNG7wNTuxEmZF42/bwTyHgthxMDQUY/Su+NMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdytPCKzPoYeLu5UKGdecHi4danMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjM3MTNlMjUtNDE5YS0z M2M4LWFmNWItM2NiMDI1ODcxNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYsFDM686ndqsvTew1RcTBRCRS5LMR8mCnKVQxwqPhZoDBzPwAxD+EO e47cQNCGlz1kgtgtl5FRDrSEOjh17HYh+CNHTShLZUgvTGFzlT5O5SsO/PkodOLH F2Pnv+BYyfeA7JkJ7EhXpy5tAzA8fjRty/csGALTDrfDeL6TN7ThUSiWEpYxcLiU Yb2PTdJr351XJ6TkKkSpVtNeB1ILkZ5uFZHlYJECX2Q+osB9uVThtdqZDakbFCpz lYdPrE5QjqNj6Ea8h5Yc0S/Jpe3wtWxxxvsuULMWtFhqi6TVoNum8d+B27fDskt7 BjjXZCZ8n6MkjAKfwrRCu99k3pujTuw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:35 2025 by rpki-client