$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa File: fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa (raw, json) Hash identifier: 8k9VqHDlv5gLuJsuMMg8seJdPL5pMqyKrxhCb8EycrE= Subject key identifier: 6B:46:D6:5F:31:B6:EC:85:0C:1F:F9:63:96:FE:13:BE:29:55:35:44 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAB885A4ED3026F1AB8540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b8:85:a4:ed:30:26:f1:ab:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4263f87b-a236-417f-8ff8-bc5ed0ee807b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:07:22:af:51:e7:67:c0:8e:a5:f6:32:f1: 87:0f:c1:12:6c:f1:f0:d1:e3:c1:f2:fb:a2:d0:3d: 9d:a5:92:4d:a9:ac:d4:92:f7:f3:41:53:ad:7a:aa: c3:b3:12:5f:c6:e7:cd:1e:29:b5:05:a7:f0:24:c1: 2e:f4:97:2b:fa:37:df:3c:64:80:cd:82:9a:9c:a5: 13:32:40:f9:80:65:f2:4e:54:4c:b6:b9:52:ba:7e: ef:b0:0d:8f:9a:73:36:b6:33:fb:a6:7d:24:ee:9f: 87:af:f2:c6:47:b1:48:79:7a:41:ac:ae:76:89:1d: 8d:99:29:cc:cd:4d:e4:cd:71:1f:0b:75:cc:4d:d0: 13:8b:bb:c8:25:c4:bb:2a:60:d7:c8:0b:88:e9:07: 2f:88:bb:ba:c4:85:6f:18:17:ec:cb:01:51:7a:c4: 2e:47:27:f1:94:cc:98:f8:a5:9a:ab:6f:0d:46:0c: f3:8b:64:82:fa:fd:c6:19:22:a6:92:ff:cd:3b:f3: d1:75:de:70:f8:c4:76:d7:57:50:a9:49:f7:a1:9d: e3:bc:58:c6:0e:53:b5:e0:56:0c:c3:6d:91:f2:a0: 3b:6e:46:68:10:42:a2:47:91:7a:8c:b1:7c:95:ef: 50:6a:6a:e2:c2:2f:e4:c7:fb:14:66:97:6e:91:75: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:46:D6:5F:31:B6:EC:85:0C:1F:F9:63:96:FE:13:BE:29:55:35:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e7:e6:9b:da:2c:05:81:8e:f1:f5:99:77:29:31:81:ec:99: 32:3d:52:62:14:0a:23:36:e0:af:0d:80:76:a5:0e:8f:2b:b2: 39:e0:5a:2e:ec:a1:64:f0:e7:02:bc:fb:59:9d:39:af:65:4c: 2d:e9:d0:86:f4:87:90:29:c6:1c:1a:86:5b:5a:ec:fb:e8:80: 25:10:35:0e:6f:f7:b5:43:4a:04:6a:d8:3d:09:4c:32:b9:7f: 56:56:9c:d3:d5:25:f9:79:68:d4:ae:42:6d:14:cf:55:93:6f: 7f:72:78:6c:3b:ee:50:c3:3d:f8:b6:77:bb:9a:4f:c5:69:6f: 80:04:e5:d9:9a:b0:e5:1b:aa:72:a8:9a:ea:9c:15:db:cd:f6: be:03:58:b6:8e:8d:ce:9a:fc:1a:68:8e:c9:b4:7b:86:ef:03: 41:1a:e1:76:42:21:cf:ad:e8:2f:95:9f:2e:52:7b:dc:ee:59: 4d:87:04:8b:ef:5d:c8:87:b4:cd:89:a0:d4:7e:85:26:43:fe: 2e:34:96:3d:d7:6b:10:22:c0:80:0e:19:0e:94:a1:e2:f2:42: 73:6f:41:8d:02:4f:84:e3:81:c5:24:46:10:ed:b9:90:2b:23: e8:36:b3:17:8f:6c:ce:12:31:67:1c:07:81:14:52:e5:25:78: 84:b2:7d:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuriFpO0wJvGrhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDI2M2Y4N2ItYTIzNi00MTdmLThmZjgtYmM1ZWQwZWU4MDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6oHIq9R52fAjqX2MvGHD8ESbPHw0ePB8vui 0D2dpZJNqazUkvfzQVOteqrDsxJfxufNHim1BafwJMEu9Jcr+jffPGSAzYKanKUT MkD5gGXyTlRMtrlSun7vsA2PmnM2tjP7pn0k7p+Hr/LGR7FIeXpBrK52iR2NmSnM zU3kzXEfC3XMTdATi7vIJcS7KmDXyAuI6QcviLu6xIVvGBfsywFResQuRyfxlMyY +KWaq28NRgzzi2SC+v3GGSKmkv/NO/PRdd5w+MR211dQqUn3oZ3jvFjGDlO14FYM w22R8qA7bkZoEEKiR5F6jLF8le9Qamriwi/kx/sUZpdukXVhBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtG1l8xtuyFDB/5Y5b+E74pVTVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmE0ZGY3YzgtZmM0MC0z MTQzLWE1NzAtNGE0Y2UzMDE5ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3n5pvaLAWBjvH1mXcpMYHsmTI9UmIUCiM24K8NgHalDo8rsjngWi7s oWTw5wK8+1mdOa9lTC3p0Ib0h5Apxhwahlta7PvogCUQNQ5v97VDSgRq2D0JTDK5 f1ZWnNPVJfl5aNSuQm0Uz1WTb39yeGw77lDDPfi2d7uaT8Vpb4AE5dmasOUbqnKo muqcFdvN9r4DWLaOjc6a/Bpojsm0e4bvA0Ea4XZCIc+t6C+Vny5Se9zuWU2HBIvv XciHtM2JoNR+hSZD/i40lj3XaxAiwIAOGQ6UoeLyQnNvQY0CT4TjgcUkRhDtuZAr I+g2sxePbM4SMWccB4EUUuUleISyfWk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:13 2025 by rpki-client