$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa File: e5178a4c-dbdb-35df-8402-ea056b4cb828.roa (raw, json) Hash identifier: DkIHxfIGejVxyjg/+okm2T+kLcEvFKGLyIbLF5kQMP0= Subject key identifier: 9C:CB:14:CE:81:DE:FE:03:79:D9:A7:33:4E:F8:76:CD:42:54:73:6B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30EEEC9CCB03B1DE3BD800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:ee:ec:9c:cb:03:b1:de:3b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=011e16d3-4023-4196-878c-42fd4fcfbc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:39:5c:f1:28:2f:1f:26:c5:25:13:40:12: 96:22:3f:c6:49:10:34:63:ec:cf:69:bb:58:cd:b4: 78:86:d9:ce:c1:fa:af:a9:b1:79:8b:01:4e:26:96: 48:70:5f:ae:83:bd:30:f7:4f:5b:13:b8:c7:39:38: 42:74:c5:7d:16:16:a5:c0:ca:ec:64:28:bc:0a:0d: a4:a6:32:c8:06:6c:b2:33:82:9a:4c:3f:f6:ee:a3: ef:c0:5f:bd:5f:b9:15:2e:c1:49:49:c8:cc:e1:43: f5:90:74:e8:ac:e5:02:3a:00:4e:ca:ba:17:d9:6e: bc:c5:8f:d9:98:eb:6b:7b:92:3f:8d:b4:1b:85:74: b4:4e:03:14:44:90:f9:2c:12:0e:28:99:07:be:ea: 6a:a2:9f:3c:27:a9:82:8b:28:db:c1:18:9e:df:68: 11:92:98:cb:1c:db:21:a3:eb:9a:0e:01:b3:9d:d0: b6:81:c1:59:d3:d3:ec:4b:1b:9a:dd:40:21:bc:bc: 82:84:6d:f1:2e:f2:03:dd:e3:a4:bb:6b:8d:1c:cf: 01:91:d0:70:cc:1a:10:c7:5a:1d:83:6c:17:f3:b1: ef:d4:c6:aa:9d:e0:9d:34:da:46:44:14:34:7a:2b: e4:08:d3:54:48:7c:aa:31:74:94:82:23:96:7c:1b: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CB:14:CE:81:DE:FE:03:79:D9:A7:33:4E:F8:76:CD:42:54:73:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:48:61:32:2d:37:92:7c:42:0f:ca:6b:a9:41:0c:0f:03:c7: 44:6a:ab:cb:0f:15:79:7d:d8:d6:20:ef:68:72:18:3f:70:7b: 85:78:52:a8:df:3a:a8:27:2e:a9:21:23:f8:e7:23:19:5e:c2: 72:31:1b:4b:fe:10:4a:80:27:df:c8:a1:65:ac:41:9f:74:ac: 16:8f:72:2f:c0:4b:7c:22:36:08:9d:9c:3d:84:1f:96:a7:dd: a5:b7:36:4c:94:2f:98:39:e4:61:95:fa:a0:99:1a:d5:72:39: 76:59:50:31:32:a5:4c:b0:a8:a8:8e:0b:48:40:5b:ac:bd:d1: b8:c3:d1:7b:ec:b7:28:40:e1:a5:1f:d2:59:a3:29:e4:b0:12: 1b:10:d5:e6:90:a0:08:91:51:00:74:b2:f8:69:54:d2:2b:85: f9:f6:7b:7b:b2:2d:0f:67:be:37:50:8f:fc:38:08:6e:2c:3a: e4:08:7d:a4:69:7c:9e:4d:21:2a:ba:0d:89:73:f5:a6:bf:e8: 85:c6:9d:9e:d6:8e:a0:4c:80:00:79:56:47:a4:5f:1b:70:ad: a0:25:fa:cc:e0:32:0b:74:bd:53:04:e0:44:ec:bc:5b:34:b0: 3b:45:e4:35:b5:44:14:db:e0:cc:f9:eb:1b:80:85:1f:55:94: c3:9b:35:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMO7snMsDsd472AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MDExZTE2ZDMtNDAyMy00MTk2LTg3OGMtNDJmZDRmY2ZiYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK45XPEoLx8mxSUTQBKWIj/GSRA0Y+zPabtY zbR4htnOwfqvqbF5iwFOJpZIcF+ug70w909bE7jHOThCdMV9FhalwMrsZCi8Cg2k pjLIBmyyM4KaTD/27qPvwF+9X7kVLsFJScjM4UP1kHTorOUCOgBOyroX2W68xY/Z mOtre5I/jbQbhXS0TgMURJD5LBIOKJkHvupqop88J6mCiyjbwRie32gRkpjLHNsh o+uaDgGzndC2gcFZ09PsSxua3UAhvLyChG3xLvID3eOku2uNHM8BkdBwzBoQx1od g2wX87Hv1MaqneCdNNpGRBQ0eivkCNNUSHyqMXSUgiOWfBuitwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzLFM6B3v4DedmnM074ds1CVHNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTUxNzhhNGMtZGJkYi0z NWRmLTg0MDItZWEwNTZiNGNiODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRIYTItN5J8Qg/Ka6lBDA8Dx0Rqq8sPFXl92NYg72hyGD9we4V4Uqjf OqgnLqkhI/jnIxlewnIxG0v+EEqAJ9/IoWWsQZ90rBaPci/AS3wiNgidnD2EH5an 3aW3NkyUL5g55GGV+qCZGtVyOXZZUDEypUywqKiOC0hAW6y90bjD0XvstyhA4aUf 0lmjKeSwEhsQ1eaQoAiRUQB0svhpVNIrhfn2e3uyLQ9nvjdQj/w4CG4sOuQIfaRp fJ5NISq6DYlz9aa/6IXGnZ7WjqBMgAB5VkekXxtwraAl+szgMgt0vVME4ETsvFs0 sDtF5DW1RBTb4Mz56xuAhR9VlMObNVA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:31 2025 by rpki-client