$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa File: c5211ada-1406-3cf0-ace4-7211be6b6547.roa (raw, json) Hash identifier: T7svwrObG/N9jKNTPCALnZsSiscgcULbdePb+PMtEfo= Subject key identifier: FA:D3:73:7B:13:1D:EE:E1:AF:57:20:61:20:20:51:A3:64:3E:6B:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30EEB2A02C8E742657C8C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:ee:b2:a0:2c:8e:74:26:57:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=11082d9e-b2f9-4a20-bea3-855f25018ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:df:58:24:7f:60:0c:10:e5:c0:1d:d3:c7:df: f7:3b:98:61:0c:3e:95:9b:c8:96:60:a0:82:b5:49: 5d:27:55:f7:92:92:a4:61:f3:2f:7c:91:7d:13:c9: 65:14:d6:3b:2f:76:b9:00:bd:3a:e5:59:71:2e:b2: d4:d9:6b:47:ae:8c:50:d6:1c:46:e6:8f:de:04:f7: 5a:30:19:10:cc:35:81:f9:c9:81:a9:a4:ec:9d:3f: 5c:0c:13:56:67:17:25:0b:a0:b6:ea:97:ec:6b:fe: 30:20:74:d2:ab:66:d4:68:ea:79:0f:d9:44:06:c0: 1c:9b:12:0f:7c:d2:a2:96:d2:34:98:99:3b:5c:a6: db:34:3b:8c:a8:b7:54:96:59:55:7b:51:93:56:a0: 2b:f7:09:7b:00:30:53:fb:c0:13:a5:24:b1:25:63: 42:ee:af:96:e2:89:23:ca:7d:67:e2:d7:0e:de:51: 70:99:af:26:e5:99:b5:e0:95:59:ad:d8:d6:f4:cd: aa:4e:26:f2:12:e4:67:b8:77:fa:fb:5f:6f:bc:42: e7:49:3a:87:5e:16:10:da:c2:a8:60:7d:bc:8a:5d: 24:92:92:1f:ce:9b:15:26:d3:ce:de:25:ff:c2:23: c9:93:a2:1d:66:e4:94:5a:b2:29:90:8b:f3:8a:f2: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D3:73:7B:13:1D:EE:E1:AF:57:20:61:20:20:51:A3:64:3E:6B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:59:09:b0:bd:16:c2:14:20:fb:b5:55:8c:12:8c:2a:25:3e: 96:0e:2c:aa:b3:5a:24:0d:de:2e:12:c5:e0:5d:91:56:23:83: d4:a2:10:d1:3e:49:21:3a:c7:de:24:59:24:a7:5e:33:d8:b2: e6:98:a1:39:c8:bd:07:a4:68:74:63:9e:0d:33:62:98:00:13: c7:95:52:74:a6:d0:18:9b:f4:37:2d:0d:47:34:01:75:b7:82: ef:82:3e:b4:3e:67:53:5c:3c:c0:49:e8:54:e6:42:dd:a0:a1: fa:a0:5d:e1:45:d5:0b:bf:5b:52:04:bc:05:b6:65:1c:2d:73: 86:1b:47:7f:c6:ba:d3:7c:0e:ba:ba:2d:f5:df:76:ae:71:ef: 0c:87:d3:13:98:cf:40:00:81:c8:df:db:5f:03:f7:59:14:04: f6:a4:28:e0:89:1b:45:12:76:1d:88:8d:14:7e:9a:60:50:16: 10:3e:b3:0b:26:49:98:45:0b:02:85:f2:04:55:35:ca:94:ed: 39:37:18:f6:47:0c:38:47:ac:ec:95:0e:57:4f:8c:9a:62:94: 6e:9e:0b:7f:22:52:15:3a:5f:c9:dc:d2:16:99:ff:aa:67:7b: 46:90:55:4a:c7:d3:95:51:24:3d:7e:4c:01:0a:5c:f8:11:92: f1:8c:fb:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMO6yoCyOdCZXyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MTEwODJkOWUtYjJmOS00YTIwLWJlYTMtODU1ZjI1MDE4Y2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt9YJH9gDBDlwB3Tx9/3O5hhDD6Vm8iWYKCC tUldJ1X3kpKkYfMvfJF9E8llFNY7L3a5AL065VlxLrLU2WtHroxQ1hxG5o/eBPda MBkQzDWB+cmBqaTsnT9cDBNWZxclC6C26pfsa/4wIHTSq2bUaOp5D9lEBsAcmxIP fNKiltI0mJk7XKbbNDuMqLdUlllVe1GTVqAr9wl7ADBT+8ATpSSxJWNC7q+W4okj yn1n4tcO3lFwma8m5Zm14JVZrdjW9M2qTibyEuRnuHf6+19vvELnSTqHXhYQ2sKo YH28il0kkpIfzpsVJtPO3iX/wiPJk6IdZuSUWrIpkIvzivIv1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrTc3sTHe7hr1cgYSAgUaNkPmsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzUyMTFhZGEtMTQwNi0z Y2YwLWFjZTQtNzIxMWJlNmI2NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1ZCbC9FsIUIPu1VYwSjColPpYOLKqzWiQN3i4SxeBdkVYjg9SiENE+ SSE6x94kWSSnXjPYsuaYoTnIvQekaHRjng0zYpgAE8eVUnSm0Bib9DctDUc0AXW3 gu+CPrQ+Z1NcPMBJ6FTmQt2gofqgXeFF1Qu/W1IEvAW2ZRwtc4YbR3/GutN8Drq6 LfXfdq5x7wyH0xOYz0AAgcjf218D91kUBPakKOCJG0USdh2IjRR+mmBQFhA+swsm SZhFCwKF8gRVNcqU7Tk3GPZHDDhHrOyVDldPjJpilG6eC38iUhU6X8nc0haZ/6pn e0aQVUrH05VRJD1+TAEKXPgRkvGM+2Q= -----END CERTIFICATE-----Generated at Wed Aug 6 07:52:39 2025 by rpki-client