$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa File: cfb3d42c-ef81-39ea-8662-b711a5af348b.roa (raw, json) Hash identifier: TqsNYv67paAuhlXbYpUuo1E/eYer7eh7RJBThUDjxTg= Subject key identifier: A1:74:03:2A:F3:80:F1:B4:82:B2:46:8E:DB:78:F5:7B:7E:F3:80:8D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30FAAB256D946911922B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:fa:ab:25:6d:94:69:11:92:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=e2f7c64f-dc09-41da-9c04-d6ba79812bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:d9:ae:de:c8:a8:16:71:6e:43:63:35:83: 4c:60:2a:a4:12:ee:40:28:5c:9c:18:3f:96:42:05: b5:5b:58:50:7d:3d:f3:3f:4d:83:ee:88:7f:2b:6d: 7c:c0:39:3e:22:a0:a6:b8:d3:62:82:e2:fb:b4:c3: 47:5b:4c:84:87:82:09:4e:0e:b8:25:9f:5b:5f:3e: 44:c5:98:a1:93:5f:96:39:57:30:37:73:e8:76:2b: 0d:e8:ef:51:19:c0:33:47:d8:df:c3:e8:e1:0b:ed: f7:cd:84:85:1a:7f:10:ab:20:82:06:fb:69:6f:10: 9e:0a:73:3d:59:99:ec:64:03:99:19:73:f8:49:a5: c6:02:eb:1c:94:4b:92:5b:8c:a5:61:65:44:ad:00: a6:b3:98:e8:65:2b:c8:f9:55:5c:dc:85:bf:bf:c1: a7:af:56:c0:2a:b6:2f:1c:49:ca:b4:70:69:16:3d: b3:d1:f1:95:2d:4f:f0:f3:03:1e:26:e0:f7:6d:cf: d1:27:43:3f:52:ee:4b:55:70:4a:72:2d:e0:ab:71: 9d:3c:aa:d8:1b:22:bd:aa:31:f8:bd:4f:86:00:fc: 91:94:ac:8c:39:0d:57:8e:20:75:58:47:c4:15:d0: 3b:5a:f2:a3:61:cc:ca:71:e4:6f:e6:14:9c:15:55: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:74:03:2A:F3:80:F1:B4:82:B2:46:8E:DB:78:F5:7B:7E:F3:80:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:1a:32:4d:d6:c1:1a:7b:8f:3f:3c:89:5f:a9:a0:e7:d6:d7: 59:35:d3:74:1c:f0:70:41:73:3e:2f:a1:0b:b6:b5:db:8e:d3: 64:f9:94:ec:92:ea:fa:cb:08:57:33:b1:90:fa:07:5c:60:db: 62:3c:bf:d5:62:eb:8e:e5:ea:ff:ac:d5:dc:e2:37:fb:6f:50: d6:af:dd:62:07:b5:34:28:4e:10:45:1d:88:60:a2:5f:ae:54: 21:3c:53:8e:60:cc:55:80:6f:82:22:8f:e0:cf:50:c3:32:f8: b4:ca:79:f0:98:b5:da:6b:98:e5:e5:54:b6:92:c7:d7:07:e3: 10:5c:65:05:de:a7:60:fc:29:e6:24:ea:62:e5:82:ea:b7:a8: a3:98:f2:0d:c5:d6:7b:44:fc:4f:66:2b:1d:76:96:30:53:5f: f0:e0:09:ee:6d:bd:67:5b:ac:f1:51:44:e5:4a:08:29:1e:d8: c1:fe:76:0f:35:22:62:f4:ea:b0:14:14:62:e8:8e:ca:dd:90: f0:e1:75:b5:b5:ac:db:b1:cc:61:45:09:5a:79:31:70:f5:ca: 3b:15:5a:64:e8:45:50:0e:a3:a8:9a:34:19:90:e6:30:b8:b0: 7d:af:db:e7:af:af:98:3d:11:59:04:1e:2e:88:27:9c:d7:35: 26:00:26:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPqrJW2UaRGSK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZTJmN2M2NGYtZGMwOS00MWRhLTljMDQtZDZiYTc5ODEyYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SzZrt7IqBZxbkNjNYNMYCqkEu5AKFycGD+W QgW1W1hQfT3zP02D7oh/K218wDk+IqCmuNNiguL7tMNHW0yEh4IJTg64JZ9bXz5E xZihk1+WOVcwN3PodisN6O9RGcAzR9jfw+jhC+33zYSFGn8QqyCCBvtpbxCeCnM9 WZnsZAOZGXP4SaXGAusclEuSW4ylYWVErQCms5joZSvI+VVc3IW/v8Gnr1bAKrYv HEnKtHBpFj2z0fGVLU/w8wMeJuD3bc/RJ0M/Uu5LVXBKci3gq3GdPKrYGyK9qjH4 vU+GAPyRlKyMOQ1XjiB1WEfEFdA7WvKjYczKceRv5hScFVWdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF0AyrzgPG0grJGjtt49Xt+84CNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2ZiM2Q0MmMtZWY4MS0z OWVhLTg2NjItYjcxMWE1YWYzNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUaMk3WwRp7jz88iV+poOfW11k103Qc8HBBcz4voQu2tduO02T5lOyS 6vrLCFczsZD6B1xg22I8v9Vi647l6v+s1dziN/tvUNav3WIHtTQoThBFHYhgol+u VCE8U45gzFWAb4Iij+DPUMMy+LTKefCYtdprmOXlVLaSx9cH4xBcZQXep2D8KeYk 6mLlguq3qKOY8g3F1ntE/E9mKx12ljBTX/DgCe5tvWdbrPFRROVKCCke2MH+dg81 ImL06rAUFGLojsrdkPDhdbW1rNuxzGFFCVp5MXD1yjsVWmToRVAOo6iaNBmQ5jC4 sH2v2+evr5g9EVkEHi6IJ5zXNSYAJmw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:52 2025 by rpki-client