$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7e0e5a0-85d7-396f-9a1c-c71a9d500d83.roa File: c7e0e5a0-85d7-396f-9a1c-c71a9d500d83.roa (raw, json) Hash identifier: 9VPVbateHiFE+GVT1X/WtZs4l4IRgOy6YTt39owwtEk= Subject key identifier: 02:55:FB:25:C3:62:64:CD:CB:E9:73:BE:00:DA:CC:FC:C8:E5:F3:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA34E2E76F313CD0A42C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7e0e5a0-85d7-396f-9a1c-c71a9d500d83.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:34:e2:e7:6f:31:3c:d0:a4:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=eb7149cb-9509-4943-bd9d-6a3cce3c430f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:41:73:99:9d:39:21:4b:c5:f5:70:90:cc: b2:14:2d:ac:0a:f3:45:13:b1:78:0e:60:5a:98:40: cd:8a:ec:04:44:18:ff:49:ea:1c:8b:94:ec:17:8f: 4b:35:78:a7:55:d2:77:a0:6b:77:4e:b7:5a:37:19: f9:76:eb:27:62:50:07:06:bd:85:3d:1e:16:05:ea: 28:9d:5f:cc:70:cf:ca:d4:27:e5:43:8b:17:2c:33: e3:67:70:24:ac:46:90:b3:a3:8b:e5:02:31:14:ed: 6e:c6:68:61:0b:a3:43:9a:21:e8:4c:de:18:bf:56: f6:3e:55:b6:3a:ad:09:94:04:12:4a:2d:70:46:16: 7a:0d:4e:70:81:d7:06:e3:b3:84:51:7e:a3:af:9f: 12:95:64:10:86:c1:75:90:2c:0a:18:d4:f7:85:28: b6:1c:cc:ec:4d:0a:1f:06:14:89:30:55:83:bc:46: 84:b2:bf:57:e5:cf:59:36:96:87:65:a1:a2:b1:ff: eb:0b:92:14:fe:67:01:57:c7:fd:29:16:1c:ff:82: ca:c9:1c:66:24:d7:88:f1:32:f4:29:f9:68:28:2b: fa:e7:82:bf:0b:68:85:78:7f:be:41:c3:82:31:fc: f9:ec:fb:35:81:f1:79:db:d1:05:9d:7d:20:cb:c6: b1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:55:FB:25:C3:62:64:CD:CB:E9:73:BE:00:DA:CC:FC:C8:E5:F3:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7e0e5a0-85d7-396f-9a1c-c71a9d500d83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:35:21:e9:d6:28:5e:63:e5:30:70:54:b8:6e:97:14:34:29: 6b:25:48:d1:7d:af:bd:65:29:2c:8f:f8:a7:f4:94:a1:af:23: 9c:1c:83:20:c9:e1:4b:04:b2:c7:63:d1:41:55:2b:41:82:f4: 6a:3f:4e:34:65:ba:b0:a4:f4:a4:33:c7:9d:ec:c7:75:03:eb: da:b7:04:0d:46:e7:31:f8:91:f9:78:3d:69:6e:79:de:67:0d: 94:c1:a7:fb:a4:5b:66:bc:4a:2c:b6:48:cf:be:f8:5e:7a:ee: 12:7f:37:c2:ce:70:d0:50:ec:fb:0f:c3:32:75:c2:09:b5:75: e9:71:0a:26:5a:ab:28:78:39:97:23:f7:07:30:d0:19:d7:9d: 59:8b:24:93:63:f3:39:56:7a:79:cf:14:d1:33:c9:cd:b3:d7: 10:fe:82:66:f6:f1:51:4b:2d:8f:97:16:b3:d3:81:b0:a1:47: 4b:3e:6a:c4:75:c2:8d:11:ff:8a:7c:f9:8d:6e:97:ca:43:7b: 71:e9:ba:c4:d2:dc:8e:4b:db:e5:27:40:79:f7:13:ae:57:8c: 9f:fa:2c:78:30:7b:8b:03:38:68:8a:3c:96:5a:2a:90:e9:53: 33:0b:24:1a:9a:a4:aa:d4:ee:89:d6:4a:34:c4:72:51:0a:91: df:4b:bd:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jTi528xPNCkLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ZWI3MTQ5Y2ItOTUwOS00OTQzLWJkOWQtNmEzY2NlM2M0MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ5Bc5mdOSFLxfVwkMyyFC2sCvNFE7F4DmBa mEDNiuwERBj/Seoci5TsF49LNXinVdJ3oGt3TrdaNxn5dusnYlAHBr2FPR4WBeoo nV/McM/K1CflQ4sXLDPjZ3AkrEaQs6OL5QIxFO1uxmhhC6NDmiHoTN4Yv1b2PlW2 Oq0JlAQSSi1wRhZ6DU5wgdcG47OEUX6jr58SlWQQhsF1kCwKGNT3hSi2HMzsTQof BhSJMFWDvEaEsr9X5c9ZNpaHZaGisf/rC5IU/mcBV8f9KRYc/4LKyRxmJNeI8TL0 KfloKCv654K/C2iFeH++QcOCMfz57Ps1gfF529EFnX0gy8axpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJV+yXDYmTNy+lzvgDazPzI5fOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzdlMGU1YTAtODVkNy0z OTZmLTlhMWMtYzcxYTlkNTAwZDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ1IenWKF5j5TBwVLhulxQ0KWslSNF9r71lKSyP+Kf0lKGvI5wcgyDJ 4UsEssdj0UFVK0GC9Go/TjRlurCk9KQzx53sx3UD69q3BA1G5zH4kfl4PWlued5n DZTBp/ukW2a8Siy2SM+++F567hJ/N8LOcNBQ7PsPwzJ1wgm1delxCiZaqyh4OZcj 9wcw0BnXnVmLJJNj8zlWennPFNEzyc2z1xD+gmb28VFLLY+XFrPTgbChR0s+asR1 wo0R/4p8+Y1ul8pDe3HpusTS3I5L2+UnQHn3E65XjJ/6LHgwe4sDOGiKPJZaKpDp UzMLJBqapKrU7onWSjTEclEKkd9LvXw= -----END CERTIFICATE-----Generated at Mon Jun 16 05:55:34 2025 by rpki-client