$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ece85742-0ed4-3250-bc23-bd37778ba20c.roa File: ece85742-0ed4-3250-bc23-bd37778ba20c.roa (raw, json) Hash identifier: HWsBc0du3maLBa0u3EebbZWVy1y2a5Lx+rCgVU9vLEE= Subject key identifier: 8E:C9:C7:E6:93:A1:B6:FC:5E:E2:EC:B8:C4:1C:FE:D4:94:99:2C:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841186594A0AA28DE032F0C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ece85742-0ed4-3250-bc23-bd37778ba20c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:86:59:4a:0a:a2:8d:e0:32:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c28679e3-d116-4204-815c-dabe6969c211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:86:4b:9c:e3:c6:81:af:cf:c9:49:79:a3: 6e:a9:87:64:1c:58:29:40:f7:b1:b2:e1:26:6d:d1: a6:bb:1e:5f:4f:79:1c:ef:4f:13:1b:6e:4c:25:87: 5e:9f:6a:e6:ca:43:69:36:27:a7:2c:90:88:a9:38: 0e:75:f2:d3:34:80:06:ab:cf:63:c4:cb:ac:ed:ea: ee:a8:e4:1c:dd:f2:6c:d8:15:28:71:17:0b:31:10: 12:cd:3c:6a:ce:dd:f9:99:4c:c0:8e:af:a9:c7:5a: e7:0d:39:f4:0a:d4:97:99:28:39:98:5b:99:70:31: 96:44:4b:e1:0c:eb:b8:83:4e:94:54:24:c2:ee:6c: cf:d9:6d:37:1a:d1:80:00:2f:2d:a5:62:ab:c3:73: ad:e0:e7:80:1a:54:49:d5:d2:d6:3c:8b:0b:67:a3: 6a:02:9b:dd:6b:0f:fd:00:5a:27:74:35:67:e1:34: 33:9e:8c:93:1c:45:7d:80:47:44:75:bc:9c:f1:27: ae:07:b0:fb:8b:a2:9d:f1:cd:75:a3:8a:b2:9a:96: ee:c8:05:b3:2a:95:fd:93:ad:33:20:3f:d6:6f:c2: 1f:12:71:7e:a5:bf:f0:34:6c:7b:4d:ba:80:9d:bd: 58:52:35:b1:1c:3e:ae:c9:0e:5a:5f:7c:b8:81:d1: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C9:C7:E6:93:A1:B6:FC:5E:E2:EC:B8:C4:1C:FE:D4:94:99:2C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ece85742-0ed4-3250-bc23-bd37778ba20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e7:c5:48:f2:dc:0e:a7:9a:a3:0c:9b:72:ca:70:c7:46:f3: 97:a3:fc:30:ba:7e:7d:9b:c7:fb:e3:36:68:94:4c:ba:8b:4e: 05:e0:f8:ed:44:d7:5a:cd:4a:ec:70:20:6d:48:32:c4:72:17: b6:ec:0e:66:84:7a:ea:91:54:1b:49:08:67:13:7d:59:ca:32: c3:6c:a4:cc:4c:fd:5b:1f:50:f4:a8:96:28:41:b2:d8:58:95: ef:92:4c:17:10:58:d8:ae:5f:93:6a:ee:64:8b:ae:6d:97:d1: de:c8:d7:89:e4:4b:91:44:d2:0e:7c:bb:eb:6c:3c:40:29:2c: a7:f8:51:b0:3b:b2:8b:cc:f8:fc:03:e9:74:df:80:75:ab:dd: 4d:e6:29:dd:6c:99:b8:9f:29:5d:d1:de:01:ad:34:28:57:44: 22:39:ab:5b:7d:25:a5:d2:d0:2c:10:87:cc:7d:78:c2:35:07: 38:63:79:4f:17:c1:91:93:42:39:0a:2e:0c:fd:e7:4f:c8:28: 9a:b2:6f:50:2c:f5:98:53:06:c3:19:ea:86:7d:5f:bb:a8:03: c5:9d:d7:eb:7f:32:5f:19:f2:30:70:b1:1a:5b:9d:da:46:6d: 46:e6:55:f2:00:33:8e:a9:0d:87:32:4a:f2:86:ac:a4:06:1f: 83:68:bf:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYZZSgqijeAy8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzI4Njc5ZTMtZDExNi00MjA0LTgxNWMtZGFiZTY5NjljMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0WGS5zjxoGvz8lJeaNuqYdkHFgpQPexsuEm bdGmux5fT3kc708TG25MJYden2rmykNpNienLJCIqTgOdfLTNIAGq89jxMus7eru qOQc3fJs2BUocRcLMRASzTxqzt35mUzAjq+px1rnDTn0CtSXmSg5mFuZcDGWREvh DOu4g06UVCTC7mzP2W03GtGAAC8tpWKrw3Ot4OeAGlRJ1dLWPIsLZ6NqApvdaw/9 AFondDVn4TQznoyTHEV9gEdEdbyc8SeuB7D7i6Kd8c11o4qympbuyAWzKpX9k60z ID/Wb8IfEnF+pb/wNGx7TbqAnb1YUjWxHD6uyQ5aX3y4gdENRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7Jx+aTobb8XuLsuMQc/tSUmSwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWNlODU3NDItMGVkNC0z MjUwLWJjMjMtYmQzNzc3OGJhMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfnxUjy3A6nmqMMm3LKcMdG85ej/DC6fn2bx/vjNmiUTLqLTgXg+O1E 11rNSuxwIG1IMsRyF7bsDmaEeuqRVBtJCGcTfVnKMsNspMxM/VsfUPSolihBsthY le+STBcQWNiuX5Nq7mSLrm2X0d7I14nkS5FE0g58u+tsPEApLKf4UbA7sovM+PwD 6XTfgHWr3U3mKd1smbifKV3R3gGtNChXRCI5q1t9JaXS0CwQh8x9eMI1BzhjeU8X wZGTQjkKLgz950/IKJqyb1As9ZhTBsMZ6oZ9X7uoA8Wd1+t/Ml8Z8jBwsRpbndpG bUbmVfIAM46pDYcySvKGrKQGH4NovyY= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:48 2025 by rpki-client