$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa File: df44435b-e5e2-3f3c-af09-a946a39238d3.roa (raw, json) Hash identifier: PipoWYisR5pEPuBBOQCSlwAoAnPQZPgF5+6xJA2P2qk= Subject key identifier: 66:25:5D:A4:67:F4:BF:49:8B:99:7B:ED:10:0B:CC:8D:EF:78:CE:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123A59885137DCBF744680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:3a:59:88:51:37:dc:bf:74:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c244c8ed-8df9-417b-8c0a-299a18b3babb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:34:fa:47:aa:ba:11:00:59:1c:9f:2b:14: 34:32:23:04:14:e3:d7:1a:e6:f6:d0:42:11:c3:53: 18:6a:86:55:6e:c1:ae:59:8f:ef:38:6f:29:8e:da: 9b:cb:3d:26:69:7d:b4:4b:bd:cf:2a:f9:a2:8a:8b: 0c:eb:05:99:da:f4:c0:0b:72:7d:3e:e3:13:ef:8a: 59:c8:74:b4:2f:4c:46:1c:69:6b:7a:4e:cd:82:8e: 00:96:42:69:a8:6b:a2:4b:ff:a9:6f:97:1d:63:73: 5e:b1:f1:eb:6a:7f:16:89:8b:8d:3c:e8:3d:6a:63: 01:c7:2b:34:79:b5:8c:35:39:0f:d3:76:b2:64:c1: 7e:2c:48:73:d1:7f:3d:e5:07:00:f2:6e:50:29:d5: 4c:81:b4:f0:24:e5:c1:8d:4d:dc:6d:ad:2e:e7:6d: 17:61:45:55:52:d2:37:1f:9d:b2:a3:78:ee:0e:e5: 65:a0:c0:e9:c7:06:84:00:68:ac:2c:24:70:c5:20: 8e:14:95:a6:2a:3d:d9:1b:7f:9c:30:3f:f6:10:51: 9e:d4:58:21:55:6c:17:0d:4a:6d:39:49:44:b0:f1: e7:69:3b:01:9f:87:0c:70:57:a7:34:b5:77:9f:8c: 9b:58:9c:f1:29:8c:db:2f:84:0e:e7:0f:79:e5:6f: a5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:25:5D:A4:67:F4:BF:49:8B:99:7B:ED:10:0B:CC:8D:EF:78:CE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df44435b-e5e2-3f3c-af09-a946a39238d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:01:75:35:13:3a:ed:3a:2e:96:d3:4c:91:b6:cf:25:a9:32: 64:4d:b7:ce:43:80:f5:a2:0d:87:14:a8:f9:73:36:a7:b9:28: 50:e8:79:5c:5c:82:07:e0:f4:20:b3:49:5d:17:f5:82:50:61: fe:1a:28:2a:c6:aa:d8:77:f5:7d:92:8a:92:36:6f:21:e3:b4: 07:5b:d2:c9:ff:17:52:6b:f1:40:7a:3f:9c:ee:13:02:eb:32: 9a:7d:a3:3c:76:86:38:9a:78:0e:40:7b:b7:0a:be:b4:10:07: 66:8c:72:ff:43:e3:07:5a:f3:f7:2b:a8:70:db:16:91:73:e6: 35:f5:b9:ce:01:48:7d:1d:86:b3:75:b8:d8:5f:c2:80:3c:1a: e5:48:d2:c7:40:a8:09:25:a8:57:ac:e0:e8:52:5b:c4:4d:01: 1d:f2:b5:79:2d:a5:e3:f4:9b:34:d7:3a:43:50:e2:8f:4e:92: 9a:eb:dd:c8:a0:0e:44:7f:2b:83:1a:6d:e5:41:d3:78:51:0b: f7:4f:c1:77:2f:62:41:00:f2:4e:10:75:8e:08:92:96:54:b3: 8b:64:17:06:6c:16:a2:fc:07:3a:6a:34:86:42:26:99:c0:41: 90:4a:ee:81:4e:6e:68:5d:4f:52:47:3c:25:f7:e4:af:99:fa: 2a:97:4a:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjpZiFE33L90RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzI0NGM4ZWQtOGRmOS00MTdiLThjMGEtMjk5YTE4YjNiYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JM0+kequhEAWRyfKxQ0MiMEFOPXGub20EIR w1MYaoZVbsGuWY/vOG8pjtqbyz0maX20S73PKvmiiosM6wWZ2vTAC3J9PuMT74pZ yHS0L0xGHGlrek7Ngo4AlkJpqGuiS/+pb5cdY3NesfHran8WiYuNPOg9amMBxys0 ebWMNTkP03ayZMF+LEhz0X895QcA8m5QKdVMgbTwJOXBjU3cba0u520XYUVVUtI3 H52yo3juDuVloMDpxwaEAGisLCRwxSCOFJWmKj3ZG3+cMD/2EFGe1FghVWwXDUpt OUlEsPHnaTsBn4cMcFenNLV3n4ybWJzxKYzbL4QO5w955W+lOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYlXaRn9L9Ji5l77RALzI3veM7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGY0NDQzNWItZTVlMi0z ZjNjLWFmMDktYTk0NmEzOTIzOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwBdTUTOu06LpbTTJG2zyWpMmRNt85DgPWiDYcUqPlzNqe5KFDoeVxc ggfg9CCzSV0X9YJQYf4aKCrGqth39X2SipI2byHjtAdb0sn/F1Jr8UB6P5zuEwLr Mpp9ozx2hjiaeA5Ae7cKvrQQB2aMcv9D4wda8/crqHDbFpFz5jX1uc4BSH0dhrN1 uNhfwoA8GuVI0sdAqAklqFes4OhSW8RNAR3ytXktpeP0mzTXOkNQ4o9Okprr3cig DkR/K4MabeVB03hRC/dPwXcvYkEA8k4QdY4IkpZUs4tkFwZsFqL8BzpqNIZCJpnA QZBK7oFObmhdT1JHPCX35K+Z+iqXSk0= -----END CERTIFICATE-----Generated at Tue Aug 5 21:36:10 2025 by rpki-client