$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa File: dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa (raw, json) Hash identifier: O5s9Xbj1hqbGf/RRe6ApCGJynTFdkV9HzpT+b3U5o8I= Subject key identifier: CA:D6:DF:63:98:2D:24:EE:18:46:01:B1:A6:A4:20:03:3F:59:B9:30 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F6F197B03F248B39FD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f6:f1:97:b0:3f:24:8b:39:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=d30ce34e-56f0-47f8-885a-e8dbce703bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:b0:1a:f4:52:06:46:f5:4d:66:3c:9a:2a: 70:1c:12:52:0b:1c:0f:da:09:c2:ab:9c:20:16:fb: 24:67:f3:5d:5d:8c:6b:c7:45:25:0a:05:13:73:cb: bc:20:a0:ed:c9:87:55:98:2b:96:87:cd:d4:14:23: fc:55:bd:56:5e:7f:34:be:29:43:76:d7:e1:25:83: c8:1c:4b:15:18:b2:bd:94:a2:61:3f:54:bf:c6:ba: e9:40:e5:9f:99:0c:27:aa:13:c8:10:15:7b:f5:28: 56:fd:b1:3d:7f:cf:72:f0:4f:7b:18:65:24:53:99: 3d:3d:b8:f3:12:f2:06:6c:41:09:19:0a:4c:04:34: e8:c5:8a:52:ee:6d:3a:8b:b5:d6:9a:3d:8d:84:f0: 29:81:22:f6:ba:6d:56:5e:4c:64:2e:b0:93:9a:a2: b3:30:aa:88:41:19:45:fc:63:c9:fb:67:ee:51:06: 3a:80:3c:a6:3f:52:19:50:03:df:48:07:49:db:b3: 6d:b3:67:c3:a7:82:22:20:99:be:91:21:6d:58:81: ec:71:9e:dd:31:fa:0e:ea:44:60:4b:35:58:42:2c: d5:89:52:4b:f8:d0:a2:7b:6b:d4:27:92:e0:c9:05: 15:4f:ce:54:16:e2:c3:a4:05:f2:48:07:47:3f:c9: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D6:DF:63:98:2D:24:EE:18:46:01:B1:A6:A4:20:03:3F:59:B9:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:15:e1:22:6c:57:17:00:a1:be:03:76:57:d0:9b:e0:df:5a: 7f:6e:c0:3b:f3:72:cf:84:ab:95:19:e7:02:80:53:96:ce:39: 20:1e:49:e5:a7:82:0c:2d:c5:35:57:1e:c9:4b:d9:e2:d7:3f: d5:f6:c5:a8:16:c8:95:69:f8:3a:38:a3:a9:2e:85:e6:d6:11: e4:f0:05:fc:6a:d3:b7:f3:a8:ca:e2:01:fe:ff:c5:e9:03:7d: 07:15:8e:ad:ac:17:19:0c:7a:c4:07:3a:5c:88:12:86:26:ef: 41:61:10:ca:d3:5b:e4:a0:d9:b3:b1:08:b9:27:ab:23:55:55: a9:ed:ee:85:d1:b6:4c:02:25:57:13:c9:24:e8:50:f9:15:b2: c5:5a:06:86:a4:4b:d5:11:3e:d1:e1:12:e0:7b:7a:cd:5f:93: af:4d:df:79:90:bb:de:87:6a:e3:e1:9f:3d:8c:9f:77:df:f6: b5:9d:51:9b:83:4a:9a:83:f5:00:93:5d:87:a8:ea:f7:ec:08: 36:0e:22:45:97:0b:64:bc:86:f3:32:a1:f0:a7:04:36:3e:63: 9c:69:e2:e0:66:46:7e:97:55:f1:dc:f4:e7:16:e9:ec:c8:76: 16:3a:61:d0:ed:41:94:49:43:a5:e8:ff:e2:0e:c6:c0:23:45: b4:fe:d8:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPbxl7A/JIs5/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZDMwY2UzNGUtNTZmMC00N2Y4LTg4NWEtZThkYmNlNzAzYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmqwGvRSBkb1TWY8mipwHBJSCxwP2gnCq5wg FvskZ/NdXYxrx0UlCgUTc8u8IKDtyYdVmCuWh83UFCP8Vb1WXn80vilDdtfhJYPI HEsVGLK9lKJhP1S/xrrpQOWfmQwnqhPIEBV79ShW/bE9f89y8E97GGUkU5k9Pbjz EvIGbEEJGQpMBDToxYpS7m06i7XWmj2NhPApgSL2um1WXkxkLrCTmqKzMKqIQRlF /GPJ+2fuUQY6gDymP1IZUAPfSAdJ27Nts2fDp4IiIJm+kSFtWIHscZ7dMfoO6kRg SzVYQizViVJL+NCie2vUJ5LgyQUVT85UFuLDpAXySAdHP8kuGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrW32OYLSTuGEYBsaakIAM/WbkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQxZWU2ZWYtZTMxNy0z ZTRiLWJlYTAtNzdlZmViMjQ0NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIV4SJsVxcAob4DdlfQm+DfWn9uwDvzcs+Eq5UZ5wKAU5bOOSAeSeWn ggwtxTVXHslL2eLXP9X2xagWyJVp+Do4o6kuhebWEeTwBfxq07fzqMriAf7/xekD fQcVjq2sFxkMesQHOlyIEoYm70FhEMrTW+Sg2bOxCLknqyNVVant7oXRtkwCJVcT ySToUPkVssVaBoakS9URPtHhEuB7es1fk69N33mQu96HauPhnz2Mn3ff9rWdUZuD SpqD9QCTXYeo6vfsCDYOIkWXC2S8hvMyofCnBDY+Y5xp4uBmRn6XVfHc9OcW6ezI dhY6YdDtQZRJQ6Xo/+IOxsAjRbT+2Nw= -----END CERTIFICATE-----Generated at Mon Aug 4 15:26:57 2025 by rpki-client