$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa File: f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa (raw, json) Hash identifier: BZrtn9OJ43yz6cdm53dU6Q78ytghJ2qohzdkKHNn/ao= Subject key identifier: 84:1A:C6:A6:0F:62:AD:2F:4A:44:1F:2B:31:FB:1B:BB:76:A7:91:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA3723BC6DED357D432880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:37:23:bc:6d:ed:35:7d:43:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=ab4764f8-69f6-4639-9c31-bdbc543f5858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:c4:85:f9:b5:95:94:cd:8f:75:de:7e:72: c2:4d:29:ca:8c:1f:38:a9:22:c7:92:2e:7c:0c:ca: 37:95:a3:df:8b:31:60:17:f2:19:cb:98:b0:cb:45: cd:ab:d9:8c:87:a3:58:ea:77:3f:86:69:a6:aa:0c: f1:c5:6f:d0:58:91:7e:4f:f7:66:f1:8b:74:b0:2c: 3a:51:6f:b2:c4:69:5f:e3:f3:94:61:a8:1e:64:77: dd:01:ce:5b:35:c1:78:5d:14:af:db:d5:b6:4e:54: 9f:16:6a:83:88:5e:72:78:47:c3:1e:2b:1f:53:25: 1f:2f:01:a2:4f:a9:fe:90:25:52:dc:2e:c4:72:73: c5:58:ce:46:a4:18:be:a9:39:1f:ba:8e:1e:a1:8a: 22:07:ff:31:3e:ec:fb:19:c7:ae:44:e6:23:91:05: d9:30:96:34:ee:aa:20:24:0d:2b:3d:5f:87:f3:e3: fa:84:58:a5:30:67:3d:e2:ba:4e:78:60:e2:4f:b6: ab:3a:7b:09:74:a0:0e:b6:42:72:0a:52:d9:91:9a: 12:33:21:3d:91:ef:74:97:74:3f:66:ab:58:37:33: b9:a4:5e:30:ee:15:fd:09:36:3e:3c:f1:07:46:7a: 58:c6:d5:4e:9d:14:9b:1a:1a:3d:34:d3:6f:e3:ee: 27:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1A:C6:A6:0F:62:AD:2F:4A:44:1F:2B:31:FB:1B:BB:76:A7:91:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5f7bffa-029e-3fcc-9fe4-98deb68ba3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:95:ae:38:45:e9:f6:56:6b:14:62:8e:0c:16:33:9d:6e:80: dd:3b:86:18:6b:45:b1:be:f5:1c:95:fc:fa:de:e7:ef:2b:b2: 94:d1:57:a5:5d:c0:62:7b:f6:0a:fe:46:fb:24:e1:51:57:be: be:b2:76:00:1a:7d:b6:b9:42:e0:3d:dc:0f:e5:80:60:fa:03: c9:9e:4f:b1:c9:57:a1:51:c2:b1:17:cd:20:0b:25:ed:64:73: 41:97:e8:92:b7:2c:dc:7c:c0:9d:95:00:55:04:78:5b:7a:11: a9:a0:cd:8b:82:7c:53:78:18:b4:3e:6b:13:d9:dc:51:c4:11: 68:85:c6:1a:04:57:1b:e8:9e:7a:41:c0:1e:01:f9:c6:b7:97: c2:65:8f:93:75:b8:45:42:00:7c:dc:59:76:f7:99:39:d7:27: e0:16:fe:02:7e:4d:b8:64:b8:99:0a:77:9a:23:84:92:1e:13: db:ac:d7:96:3a:49:de:d6:a1:0a:de:98:47:9b:80:2c:cd:bf: 4e:18:1f:71:e8:24:65:62:b5:fa:67:b4:56:80:4e:1b:ab:b3: 98:81:a3:28:32:1b:b0:4d:c3:56:21:48:c4:03:e0:d0:2a:40: 28:14:60:ac:be:91:5a:41:65:20:d7:5f:44:e5:db:cb:df:1c: a1:cd:ed:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jcjvG3tNX1DKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YWI0NzY0ZjgtNjlmNi00NjM5LTljMzEtYmRiYzU0M2Y1ODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJPEhfm1lZTNj3XefnLCTSnKjB84qSLHki58 DMo3laPfizFgF/IZy5iwy0XNq9mMh6NY6nc/hmmmqgzxxW/QWJF+T/dm8Yt0sCw6 UW+yxGlf4/OUYageZHfdAc5bNcF4XRSv29W2TlSfFmqDiF5yeEfDHisfUyUfLwGi T6n+kCVS3C7EcnPFWM5GpBi+qTkfuo4eoYoiB/8xPuz7GceuROYjkQXZMJY07qog JA0rPV+H8+P6hFilMGc94rpOeGDiT7arOnsJdKAOtkJyClLZkZoSMyE9ke90l3Q/ ZqtYNzO5pF4w7hX9CTY+PPEHRnpYxtVOnRSbGho9NNNv4+4n6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQaxqYPYq0vSkQfKzH7G7t2p5GMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjVmN2JmZmEtMDI5ZS0z ZmNjLTlmZTQtOThkZWI2OGJhM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6VrjhF6fZWaxRijgwWM51ugN07hhhrRbG+9RyV/Pre5+8rspTRV6Vd wGJ79gr+Rvsk4VFXvr6ydgAafba5QuA93A/lgGD6A8meT7HJV6FRwrEXzSALJe1k c0GX6JK3LNx8wJ2VAFUEeFt6EamgzYuCfFN4GLQ+axPZ3FHEEWiFxhoEVxvonnpB wB4B+ca3l8Jlj5N1uEVCAHzcWXb3mTnXJ+AW/gJ+TbhkuJkKd5ojhJIeE9us15Y6 Sd7WoQremEebgCzNv04YH3HoJGVitfpntFaAThurs5iBoygyG7BNw1YhSMQD4NAq QCgUYKy+kVpBZSDXX0Tl28vfHKHN7RI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:07:50 2025 by rpki-client