$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c9577f-c221-3ac5-ab74-db09890f238d.roa File: f0c9577f-c221-3ac5-ab74-db09890f238d.roa (raw, json) Hash identifier: qbRN2jQR5OW9vvd8Mb1XoILE26hx6Hi9YmDz7b4LUxI= Subject key identifier: 31:10:6D:DD:F9:DE:52:F3:AD:99:EC:19:94:02:22:77:FD:32:46:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122ED58FB342470A68A780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c9577f-c221-3ac5-ab74-db09890f238d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2e:d5:8f:b3:42:47:0a:68:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c82a0cd9-f0ac-45e8-8a4a-4bf69b8dcf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:44:2e:4e:3f:3b:be:ca:a4:b8:4f:02:e8: a0:ae:d0:03:46:1e:95:2a:2e:22:2f:cb:eb:d0:a5: 7a:a6:7c:c2:02:0b:23:f1:24:a9:cb:18:e0:1c:fc: f6:ef:04:1c:ee:a9:04:43:d0:c5:a9:41:f9:5c:e6: ca:8c:08:67:e4:9d:c4:61:c8:72:b7:48:16:ee:f8: 61:b7:51:c8:0f:d9:a8:5c:2f:87:3a:45:87:40:e2: d7:fa:5a:41:81:73:60:10:6b:67:b3:8f:c0:9c:05: 32:76:80:be:62:8a:e3:15:54:ae:35:98:13:ff:1a: 6c:75:d0:51:73:6a:c6:92:09:bd:dc:81:66:d9:da: c6:fb:55:11:fa:ce:89:de:9b:2d:0f:ee:6d:1c:b6: 7c:02:07:ee:1f:6e:1b:90:5e:d0:24:8d:07:85:18: 30:c4:ac:ec:97:2d:c2:83:6e:1e:0f:f4:69:39:59: f0:ce:98:f0:08:62:d4:cc:36:f0:3e:d7:21:23:47: 53:6a:a8:28:9c:55:31:13:4a:1b:de:b2:ef:22:54: 38:4c:14:c0:f2:b4:f7:7d:ed:4e:e1:b3:f5:8d:a6: 8c:97:4a:71:40:72:87:ef:1d:47:9c:7d:2c:f5:0d: cd:ff:c7:e1:44:1d:c5:69:37:81:7c:fc:3e:14:37: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:10:6D:DD:F9:DE:52:F3:AD:99:EC:19:94:02:22:77:FD:32:46:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c9577f-c221-3ac5-ab74-db09890f238d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e0:49:fc:9b:df:16:fc:70:62:f8:c0:78:2c:c3:5f:31:d1: b4:f0:9c:32:fa:76:6e:01:15:c3:27:e7:6d:d4:81:8d:39:74: ec:69:a7:a3:86:80:29:df:69:d2:7b:60:5b:86:47:93:c5:64: a6:ca:f0:cb:2a:cc:0f:b1:49:1a:9b:6d:69:10:e3:ea:33:2a: 3d:ca:69:54:da:c0:5b:12:d9:a9:02:1f:23:34:9a:2c:3b:3c: 60:01:de:cf:b0:d8:72:2d:9e:bb:5f:c0:09:d8:70:21:26:47: e1:aa:f6:5d:77:82:d2:13:d9:28:3d:6f:77:f7:f1:67:6e:af: 1a:f2:82:c1:25:07:1b:2b:62:67:69:9c:0e:57:eb:de:bc:34: 45:a7:7d:a3:15:08:97:07:a2:2f:d4:be:e6:09:44:64:de:44: 25:80:b0:7c:f9:32:e1:45:21:cb:e0:05:3d:b0:84:73:80:ac: 9c:58:3c:60:9a:f7:11:b8:b4:6f:af:94:4a:0d:63:7e:73:1b: 16:ac:f9:d7:e9:9c:b7:d4:4e:e5:ad:9b:ee:8b:bc:e5:ba:ed: 82:cb:be:74:74:91:61:94:97:95:51:8d:94:56:85:29:98:87: f2:2c:ed:f4:43:5c:e3:1b:ba:43:d2:d5:ec:89:e1:9a:ce:1a: 7e:8d:bb:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEi7Vj7NCRwpop4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzgyYTBjZDktZjBhYy00NWU4LThhNGEtNGJmNjliOGRjZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBJELk4/O77KpLhPAuigrtADRh6VKi4iL8vr 0KV6pnzCAgsj8SSpyxjgHPz27wQc7qkEQ9DFqUH5XObKjAhn5J3EYchyt0gW7vhh t1HID9moXC+HOkWHQOLX+lpBgXNgEGtns4/AnAUydoC+YorjFVSuNZgT/xpsddBR c2rGkgm93IFm2drG+1UR+s6J3pstD+5tHLZ8AgfuH24bkF7QJI0HhRgwxKzsly3C g24eD/RpOVnwzpjwCGLUzDbwPtchI0dTaqgonFUxE0ob3rLvIlQ4TBTA8rT3fe1O 4bP1jaaMl0pxQHKH7x1HnH0s9Q3N/8fhRB3FaTeBfPw+FDePKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEQbd353lLzrZnsGZQCInf9MkaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjBjOTU3N2YtYzIyMS0z YWM1LWFiNzQtZGIwOTg5MGYyMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrgSfyb3xb8cGL4wHgsw18x0bTwnDL6dm4BFcMn523UgY05dOxpp6OG gCnfadJ7YFuGR5PFZKbK8MsqzA+xSRqbbWkQ4+ozKj3KaVTawFsS2akCHyM0miw7 PGAB3s+w2HItnrtfwAnYcCEmR+Gq9l13gtIT2Sg9b3f38WdurxrygsElBxsrYmdp nA5X6968NEWnfaMVCJcHoi/UvuYJRGTeRCWAsHz5MuFFIcvgBT2whHOArJxYPGCa 9xG4tG+vlEoNY35zGxas+dfpnLfUTuWtm+6LvOW67YLLvnR0kWGUl5VRjZRWhSmY h/Is7fRDXOMbukPS1eyJ4ZrOGn6Nu/Q= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:15 2025 by rpki-client