$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1137ac0-f60c-390f-a788-13187a9aecb6.roa File: c1137ac0-f60c-390f-a788-13187a9aecb6.roa (raw, json) Hash identifier: Pj7F8/ZXiBBT4kKoFjkhxlrGa695qt+gnF4KOVBs8D0= Subject key identifier: 66:41:A1:1D:B1:4A:23:E2:17:66:E8:6B:44:B7:88:D8:99:57:EB:32 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8412314E2DFF99E2940946A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1137ac0-f60c-390f-a788-13187a9aecb6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:31:4e:2d:ff:99:e2:94:09:46:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ffd6230b-a2f6-4fc0-ac62-bc9dd1c542d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:be:4f:4d:d6:f6:30:a4:58:90:41:4d:5f:d7: 73:04:d3:85:04:b8:9e:83:46:51:b4:74:7e:33:05: e4:21:44:2b:b1:cf:49:1a:49:b2:76:10:05:15:28: a4:bd:5e:b1:72:fc:89:f2:b1:9c:f3:25:51:65:95: 51:15:3c:93:47:24:68:bf:83:bb:02:fb:57:67:62: 89:dc:14:fd:48:8a:ca:40:e4:bb:b7:e8:a1:c2:fb: 6e:bc:a7:85:32:25:b0:99:eb:fe:c8:4a:39:b6:19: 51:16:d5:97:83:c7:14:37:7b:04:71:dc:42:a5:1f: ef:30:5f:27:5c:25:80:d9:b3:ce:12:a2:69:45:a5: 33:d1:97:61:1d:82:ac:8c:63:df:0c:a8:80:97:25: f6:bc:56:2d:1b:07:64:00:6d:f4:08:3f:94:bc:bf: d7:06:43:4e:fc:04:6c:09:e7:b4:23:66:8d:67:71: 5c:1c:20:5b:65:a8:4c:94:00:64:fb:a3:52:e3:53: 2e:08:fb:f2:ac:cd:57:3e:9a:22:81:ab:59:2f:4d: f9:0e:0e:f7:c0:c2:74:b2:b7:56:f2:0a:d0:9c:ef: c6:21:bc:94:20:8c:2c:77:81:47:75:fe:52:8a:76: 82:33:b8:34:b4:d2:fd:5d:18:76:1d:82:05:93:54: 1a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:41:A1:1D:B1:4A:23:E2:17:66:E8:6B:44:B7:88:D8:99:57:EB:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1137ac0-f60c-390f-a788-13187a9aecb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2d:3b:66:28:6d:10:66:6e:16:85:be:63:d5:b4:54:85:76: 76:09:37:37:b2:9c:e8:21:1b:15:5f:f7:59:c4:ae:ef:7a:97: af:fb:27:70:9d:60:30:3c:5a:76:87:55:22:72:4b:c6:46:0f: 21:66:78:8b:ec:15:ff:92:c8:00:0b:a8:77:b1:e3:3d:2d:39: f6:ce:d4:83:10:97:74:4e:23:2b:f5:8d:7b:c9:3c:74:1d:aa: 84:90:c0:62:e9:aa:3c:c7:f1:a8:dc:06:10:4b:99:1a:6e:ec: e1:7b:5b:84:9d:a0:55:79:11:6f:4f:71:11:6d:27:68:a0:78: 43:92:82:b7:de:26:d4:bb:34:57:fc:0e:b0:ca:79:c2:40:b2: 91:c5:4d:46:a0:bd:5d:27:9f:c7:b6:96:3a:4f:6b:13:a8:2b: a3:d1:e1:fd:23:89:45:22:cc:25:88:26:7e:f8:a5:a1:33:65: e9:65:6d:c8:fc:01:08:5e:d8:de:49:74:4f:48:6c:30:b2:6e: c5:b0:8c:03:c8:68:9c:11:96:f3:61:d6:bf:93:d8:62:ba:6c: 4d:84:ac:9e:4c:8b:62:a1:f1:37:f5:b8:29:e4:23:9d:4d:7e: cc:ac:e7:e2:27:3c:20:2e:fa:6d:97:9d:c6:dd:99:bf:ef:45: 3b:bb:2a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjFOLf+Z4pQJRqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmZkNjIzMGItYTJmNi00ZmMwLWFjNjItYmM5ZGQxYzU0MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL5PTdb2MKRYkEFNX9dzBNOFBLieg0ZRtHR+ MwXkIUQrsc9JGkmydhAFFSikvV6xcvyJ8rGc8yVRZZVRFTyTRyRov4O7AvtXZ2KJ 3BT9SIrKQOS7t+ihwvtuvKeFMiWwmev+yEo5thlRFtWXg8cUN3sEcdxCpR/vMF8n XCWA2bPOEqJpRaUz0ZdhHYKsjGPfDKiAlyX2vFYtGwdkAG30CD+UvL/XBkNO/ARs Cee0I2aNZ3FcHCBbZahMlABk+6NS41MuCPvyrM1XPpoigatZL035Dg73wMJ0srdW 8grQnO/GIbyUIIwsd4FHdf5SinaCM7g0tNL9XRh2HYIFk1QagwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZBoR2xSiPiF2boa0S3iNiZV+syMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzExMzdhYzAtZjYwYy0z OTBmLWE3ODgtMTMxODdhOWFlY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEtO2YobRBmbhaFvmPVtFSFdnYJNzeynOghGxVf91nEru96l6/7J3Cd YDA8WnaHVSJyS8ZGDyFmeIvsFf+SyAALqHex4z0tOfbO1IMQl3ROIyv1jXvJPHQd qoSQwGLpqjzH8ajcBhBLmRpu7OF7W4SdoFV5EW9PcRFtJ2igeEOSgrfeJtS7NFf8 DrDKecJAspHFTUagvV0nn8e2ljpPaxOoK6PR4f0jiUUizCWIJn74paEzZellbcj8 AQhe2N5JdE9IbDCybsWwjAPIaJwRlvNh1r+T2GK6bE2ErJ5Mi2Kh8Tf1uCnkI51N fsys5+InPCAu+m2Xncbdmb/vRTu7Ksg= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:23 2025 by rpki-client