$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa File: b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa (raw, json) Hash identifier: 4v+Aw1wsEhmtS+nwGQvPXsAGTDhzPFcanmaW8FSbT6w= Subject key identifier: C9:9C:A5:95:FC:6D:9C:1A:ED:45:D8:80:36:6E:7A:12:68:F1:49:2B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACBD9EBFC0BE510947340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cb:d9:eb:fc:0b:e5:10:94:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b6720347-0f2f-4109-8f96-df50b6a67d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:35:d2:93:56:5d:e4:ce:98:31:10:09:93: 7a:c5:57:3b:63:56:45:be:6d:ce:a1:02:e3:4e:b5: ff:74:29:2a:3f:e1:4e:8e:a8:79:da:b4:7a:89:ad: 6e:76:78:86:8a:d9:6f:54:87:31:50:90:3b:1c:c6: 1d:a8:e1:b6:8e:aa:28:41:c9:d4:21:36:4d:03:b7: d8:b7:5f:94:84:02:c4:d0:06:d7:34:78:25:aa:58: 09:21:3b:6f:39:41:ee:cd:33:08:26:cb:73:ec:a5: 6d:cb:31:4a:d5:d6:3d:c3:f6:bc:4f:b6:68:1e:66: df:ef:e3:bc:81:1e:5e:13:fb:ac:c7:26:d4:0e:5f: d1:c9:7d:77:ec:3a:8b:8a:52:8c:6e:7f:a3:05:39: 26:0a:b4:eb:5e:bc:83:0d:6a:57:96:e6:d7:ca:2b: 15:f7:8c:f7:b1:bf:2e:a9:e8:49:9b:88:cc:69:54: 31:0f:1f:7d:c8:a0:b3:a5:d1:66:33:9c:6f:5a:22: b4:15:58:c6:3e:e3:82:08:2a:58:b6:61:3c:5d:7d: 6b:ec:97:8c:fa:26:91:ca:4a:5c:94:f7:87:b7:a9: 53:fc:dc:17:9b:d5:eb:09:fa:78:a0:b3:81:80:3f: f6:7d:f0:5b:11:85:23:78:27:02:78:6d:d0:94:6a: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9C:A5:95:FC:6D:9C:1A:ED:45:D8:80:36:6E:7A:12:68:F1:49:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9848e93-5019-3e80-bc99-ba6c1e39f1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:06:68:81:93:8e:e0:6c:cb:a0:c9:d5:b5:94:f7:f6:3b:39: e1:08:19:d4:ab:c7:86:dd:d4:5f:14:43:b5:13:cf:82:ee:2a: e4:31:55:18:f6:6b:91:c5:0a:41:4c:c3:38:73:94:cf:48:b9: 97:95:d0:d5:ec:32:a9:e5:c8:84:a0:35:aa:dc:c5:60:0f:55: 25:16:84:89:79:5f:b9:e3:0d:0b:12:27:48:93:07:be:b2:26: 15:83:22:fe:02:60:e6:e2:46:6d:f8:83:0b:b4:ac:11:ea:76: c0:60:6d:68:c8:12:31:79:b6:46:b3:08:ce:b6:a3:41:8f:90: 5a:6e:39:74:14:c7:e2:eb:13:ea:c5:de:a1:fb:db:8b:12:53: df:f7:2d:9d:f7:38:29:ca:9e:24:c8:9c:ef:b8:18:b5:9d:2e: 45:ab:34:96:1b:19:09:e6:2e:b5:38:3d:05:17:80:f0:df:4e: e3:19:f3:1a:9c:6d:d9:57:1f:39:4b:95:27:28:ca:0a:c7:89: 84:47:73:a2:f5:21:12:2a:2f:a6:6a:3c:53:40:4c:47:ec:94: e7:d0:63:05:eb:14:7c:99:e0:8b:19:f4:9f:f9:55:7e:09:d9: 4a:8c:b7:b4:d5:99:c5:49:54:c8:97:9f:62:cb:60:14:fb:28: d9:47:4f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusvZ6/wL5RCUc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjY3MjAzNDctMGYyZi00MTA5LThmOTYtZGY1MGI2YTY3ZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KU10pNWXeTOmDEQCZN6xVc7Y1ZFvm3OoQLj TrX/dCkqP+FOjqh52rR6ia1udniGitlvVIcxUJA7HMYdqOG2jqooQcnUITZNA7fY t1+UhALE0AbXNHglqlgJITtvOUHuzTMIJstz7KVtyzFK1dY9w/a8T7ZoHmbf7+O8 gR5eE/usxybUDl/RyX137DqLilKMbn+jBTkmCrTrXryDDWpXlubXyisV94z3sb8u qehJm4jMaVQxDx99yKCzpdFmM5xvWiK0FVjGPuOCCCpYtmE8XX1r7JeM+iaRykpc lPeHt6lT/NwXm9XrCfp4oLOBgD/2ffBbEYUjeCcCeG3QlGqlgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmcpZX8bZwa7UXYgDZuehJo8UkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjk4NDhlOTMtNTAxOS0z ZTgwLWJjOTktYmE2YzFlMzlmMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgGaIGTjuBsy6DJ1bWU9/Y7OeEIGdSrx4bd1F8UQ7UTz4LuKuQxVRj2 a5HFCkFMwzhzlM9IuZeV0NXsMqnlyISgNarcxWAPVSUWhIl5X7njDQsSJ0iTB76y JhWDIv4CYObiRm34gwu0rBHqdsBgbWjIEjF5tkazCM62o0GPkFpuOXQUx+LrE+rF 3qH724sSU9/3LZ33OCnKniTInO+4GLWdLkWrNJYbGQnmLrU4PQUXgPDfTuMZ8xqc bdlXHzlLlScoygrHiYRHc6L1IRIqL6ZqPFNATEfslOfQYwXrFHyZ4IsZ9J/5VX4J 2UqMt7TVmcVJVMiXn2LLYBT7KNlHT6c= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:30 2025 by rpki-client