$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa File: fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa (raw, json) Hash identifier: jEVLeeUtIsu0lsUefsrBW7wyFKuwFS4Q6orQR8lVTUc= Subject key identifier: DC:27:DC:97:6D:86:16:99:A8:25:88:EF:11:B2:1C:BA:28:84:33:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411715BFEB352B2FDB39480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.250.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:71:5b:fe:b3:52:b2:fd:b3:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6dffa88f-2c1a-4383-9861-6d6509b7c2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:11:54:8b:a4:31:5b:6a:ba:f7:92:79:0b: 08:b2:20:85:18:87:56:3c:ea:94:e5:d9:26:dd:c5: bd:ed:29:08:68:d2:ca:f1:b3:55:b8:e0:24:43:74: e3:69:a3:7e:9d:90:b6:88:05:52:38:64:d6:be:68: c9:6d:55:80:cb:c7:f0:e9:35:5c:d4:3f:5e:13:7d: d3:5b:ab:12:73:ff:e2:62:cf:65:6d:ab:a1:93:b0: d6:39:b3:02:cd:ab:ee:dc:09:5d:3d:d2:9e:d7:b3: 4a:21:c0:8e:a2:c3:88:a5:50:36:d9:13:98:37:6e: d5:06:38:70:12:f3:92:3e:d9:52:49:f6:8a:bb:96: 0c:a0:44:e1:85:92:0b:86:e5:38:aa:00:12:04:0c: 43:c9:38:34:c1:ce:17:bc:ca:c1:e2:6a:60:25:0a: b6:bf:d5:d5:e7:19:18:b0:d7:00:9e:51:e2:c4:bf: cf:0e:4a:ee:b6:14:ed:28:71:04:5a:4e:0f:23:7f: 7d:3b:11:77:ed:de:8c:8b:d4:00:c1:a8:e5:75:a1: 75:60:ed:bf:1f:94:ac:98:70:2b:7e:db:8e:12:e0: ff:c5:ee:bc:56:f9:4c:a9:82:a2:29:4e:d5:83:e1: d7:15:eb:a0:73:54:15:78:5c:55:16:bf:95:11:a0: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:27:DC:97:6D:86:16:99:A8:25:88:EF:11:B2:1C:BA:28:84:33:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a2:36:44:d9:cb:46:2e:93:6e:41:18:c0:45:9f:1a:4b:dc: 97:62:02:54:92:5c:a1:3d:5c:db:41:c6:6b:cc:a0:19:8f:f0: 33:b2:68:02:c5:0f:b7:c5:0c:ec:93:53:30:c2:3a:05:79:f4: d3:d2:6d:64:03:8f:b4:66:6a:93:b5:50:4b:12:ee:92:7e:4f: 68:41:f4:72:3b:86:14:19:6f:11:ba:0e:86:a3:56:7b:e0:d5: 83:f1:b7:1c:e9:8f:18:7d:8a:fc:6a:cd:e2:70:2f:36:d5:91: 7e:c3:3d:2d:e5:11:c5:f5:55:db:d4:19:6d:a4:e3:14:8a:14: d6:84:75:75:e6:d2:e4:e7:33:b6:9f:3b:f5:63:9c:8b:ed:89: ac:f3:be:2f:89:75:87:c2:a3:42:69:e6:90:46:32:07:4d:7f: 2f:19:2a:0c:96:65:be:22:4d:65:79:a0:b7:0b:7f:a4:4c:c7: 19:85:2e:0e:84:da:a1:ea:99:7b:a8:63:eb:1d:dc:33:db:33: bd:3a:ea:8d:f1:60:28:d7:35:ae:1a:92:a7:d9:f7:eb:2f:af: f9:60:79:4e:90:c2:85:03:19:a4:60:7d:5a:f7:1b:4b:1b:40: 4b:ce:86:f1:69:8f:32:26:8d:81:f4:4c:93:e7:bd:26:18:72: 7c:5d:4b:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXFb/rNSsv2zlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmRmZmE4OGYtMmMxYS00MzgzLTk4NjEtNmQ2NTA5YjdjMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL8RVIukMVtquveSeQsIsiCFGIdWPOqU5dkm 3cW97SkIaNLK8bNVuOAkQ3TjaaN+nZC2iAVSOGTWvmjJbVWAy8fw6TVc1D9eE33T W6sSc//iYs9lbauhk7DWObMCzavu3AldPdKe17NKIcCOosOIpVA22ROYN27VBjhw EvOSPtlSSfaKu5YMoEThhZILhuU4qgASBAxDyTg0wc4XvMrB4mpgJQq2v9XV5xkY sNcAnlHixL/PDkruthTtKHEEWk4PI399OxF37d6Mi9QAwajldaF1YO2/H5SsmHAr ftuOEuD/xe68VvlMqYKiKU7Vg+HXFeugc1QVeFxVFr+VEaBIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwn3JdthhaZqCWI7xGyHLoohDN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmE0ZGY3YzgtZmM0MC0z MTQzLWE1NzAtNGE0Y2UzMDE5ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6iNkTZy0Yuk25BGMBFnxpL3JdiAlSSXKE9XNtBxmvMoBmP8DOyaALF D7fFDOyTUzDCOgV59NPSbWQDj7RmapO1UEsS7pJ+T2hB9HI7hhQZbxG6DoajVnvg 1YPxtxzpjxh9ivxqzeJwLzbVkX7DPS3lEcX1VdvUGW2k4xSKFNaEdXXm0uTnM7af O/VjnIvtiazzvi+JdYfCo0Jp5pBGMgdNfy8ZKgyWZb4iTWV5oLcLf6RMxxmFLg6E 2qHqmXuoY+sd3DPbM7066o3xYCjXNa4akqfZ9+svr/lgeU6QwoUDGaRgfVr3G0sb QEvOhvFpjzImjYH0TJPnvSYYcnxdSwo= -----END CERTIFICATE-----Generated at Mon Aug 4 22:28:45 2025 by rpki-client