$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa File: c5211ada-1406-3cf0-ace4-7211be6b6547.roa (raw, json) Hash identifier: h+F1gOIghonJ9N0ZS+9b7sa/mHuhcMrXnVU7sWuEM18= Subject key identifier: BB:B9:66:07:81:4A:6E:4B:21:39:26:42:D5:2D:DC:35:4A:F5:A2:EA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2D4014CCF411472D4780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2d:40:14:cc:f4:11:47:2d:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=c890a9df-ce90-4d66-ab27-9c2a45646106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c4:21:84:41:00:c0:92:88:4e:1d:bf:1c:fe: 43:3a:32:74:ea:de:4a:52:ea:71:b1:5d:d8:bb:20: fe:12:7f:c0:ac:dd:92:87:62:ef:fc:01:85:70:79: 84:6e:ee:8e:65:e7:80:db:9d:43:3f:b9:23:24:54: 4e:8f:3a:d1:37:7f:ba:76:f9:08:9e:9e:d3:d1:dd: d1:3a:0b:8d:24:ea:20:83:6b:44:17:97:bb:d9:e1: cb:ee:c2:71:90:0e:4f:a6:a0:d6:69:12:3d:94:29: f5:00:ef:d5:46:09:f3:e1:88:9c:d9:5d:13:31:8f: 6d:b6:ac:be:58:5c:f0:e5:9b:cb:c0:61:0c:48:e9: e5:ba:1a:b0:8c:d2:36:40:71:fd:eb:39:2e:1c:08: b2:72:97:2c:fd:5d:6b:5e:d0:d1:d9:2a:46:68:36: c4:f9:c4:eb:68:1c:b1:bd:e2:a4:82:d3:e6:5c:5d: de:be:91:c3:91:d6:7c:bf:c6:57:fb:8a:22:84:4a: 37:65:cc:77:d9:b6:e1:8a:a2:31:79:7a:54:60:43: 48:82:74:7a:52:65:70:f4:41:bc:33:1a:1f:4a:d5: 26:59:47:0f:88:3a:a4:93:ca:ca:75:72:9f:a8:30: 87:e5:d5:9a:cf:a4:bb:e3:5d:ac:06:a3:8e:49:04: 74:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:66:07:81:4A:6E:4B:21:39:26:42:D5:2D:DC:35:4A:F5:A2:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fb:38:fb:61:67:27:73:30:77:38:bf:8e:da:5f:dc:af:ee: 06:ed:b8:47:4e:30:cb:dc:45:d7:f2:88:fd:16:22:04:1a:c3: 57:52:77:c3:16:98:f9:80:22:c5:54:4d:d4:b5:73:9f:db:7b: ea:21:28:e8:55:6f:ea:25:0e:2e:50:cf:05:79:de:a1:d9:e6: 7f:f6:d8:59:61:86:79:88:78:ca:b1:51:1c:3e:4d:94:c4:a6: de:82:6a:e2:f1:ac:2c:27:07:2c:21:8d:c9:00:1f:fd:8d:34: 79:c2:53:39:f5:16:60:e9:75:d6:45:df:23:b3:17:ce:e9:15: 6f:e2:d2:04:36:e5:94:4d:3c:56:f0:c3:b8:4c:4e:09:75:a8: 76:14:82:db:ea:62:e1:cc:5f:f9:bd:48:d8:3e:3d:7b:5a:f9: 64:7b:29:fe:15:02:6f:a5:87:22:d3:6f:fe:d3:ea:2a:41:a5: e8:82:09:63:3a:14:35:27:98:4a:40:f0:d9:e4:6c:ff:5b:45: 3d:bf:22:f8:60:7d:3c:5a:e0:29:17:09:05:04:d9:ad:fd:4d: 04:7f:1f:83:3e:9d:e7:96:13:5f:0f:21:0e:d3:78:aa:75:cb: 70:9b:9d:3a:0a:f9:71:35:05:a2:d3:66:86:f5:6c:24:da:1b: cf:7e:96:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i1AFMz0EUctR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk Yzg5MGE5ZGYtY2U5MC00ZDY2LWFiMjctOWMyYTQ1NjQ2MTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncQhhEEAwJKITh2/HP5DOjJ06t5KUupxsV3Y uyD+En/ArN2Sh2Lv/AGFcHmEbu6OZeeA251DP7kjJFROjzrRN3+6dvkInp7T0d3R OguNJOogg2tEF5e72eHL7sJxkA5PpqDWaRI9lCn1AO/VRgnz4Yic2V0TMY9ttqy+ WFzw5ZvLwGEMSOnluhqwjNI2QHH96zkuHAiycpcs/V1rXtDR2SpGaDbE+cTraByx veKkgtPmXF3evpHDkdZ8v8ZX+4oihEo3Zcx32bbhiqIxeXpUYENIgnR6UmVw9EG8 MxofStUmWUcPiDqkk8rKdXKfqDCH5dWaz6S7412sBqOOSQR0gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu5ZgeBSm5LITkmQtUt3DVK9aLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzUyMTFhZGEtMTQwNi0z Y2YwLWFjZTQtNzIxMWJlNmI2NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG37OPthZydzMHc4v47aX9yv7gbtuEdOMMvcRdfyiP0WIgQaw1dSd8MW mPmAIsVUTdS1c5/be+ohKOhVb+olDi5QzwV53qHZ5n/22FlhhnmIeMqxURw+TZTE pt6CauLxrCwnBywhjckAH/2NNHnCUzn1FmDpddZF3yOzF87pFW/i0gQ25ZRNPFbw w7hMTgl1qHYUgtvqYuHMX/m9SNg+PXta+WR7Kf4VAm+lhyLTb/7T6ipBpeiCCWM6 FDUnmEpA8NnkbP9bRT2/IvhgfTxa4CkXCQUE2a39TQR/H4M+neeWE18PIQ7TeKp1 y3CbnToK+XE1BaLTZob1bCTaG89+lq4= -----END CERTIFICATE-----Generated at Sun Jun 15 18:07:54 2025 by rpki-client