$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa File: fcffca7c-1a11-39cf-b450-a1243d10e54e.roa (raw, json) Hash identifier: YReUF9xs66RdGvhjqhfB8mkVcmAIQJa2uy9Ep7JCljY= Subject key identifier: C4:00:32:B1:41:F5:D4:C9:BD:32:AC:8B:C2:33:13:75:10:36:96:BE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F0A8A2532C2E075C6A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.250.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f0:a8:a2:53:2c:2e:07:5c:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=582ef99f-9a12-4207-a39d-8a396c0cefce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9e:1d:47:53:29:a3:46:4e:3a:17:95:f9:78: 5e:0d:f5:d2:92:c3:10:23:c5:be:0f:8e:4f:8f:22: be:48:ca:5e:a3:a7:7c:0b:e5:72:70:a4:13:68:93: 97:a1:51:cb:f6:46:0d:90:c4:59:5c:4e:e2:63:98: c1:86:a2:a8:03:85:1f:28:ec:50:b3:e4:e5:cb:d8: cf:c5:9f:f9:6a:09:7b:63:df:b2:4b:8b:51:7c:16: 9d:2d:40:ac:8d:a2:69:b8:8a:b5:99:85:fe:2f:f7: 14:6a:48:34:7c:ea:69:3a:53:01:d2:33:46:dd:dd: c1:94:f1:0d:77:1e:a3:47:ee:af:d1:e5:f9:2b:e9: dd:ce:25:21:65:a6:11:af:df:3f:dc:a1:e6:96:cf: 53:a3:a7:fc:ea:6b:17:78:31:6d:c9:75:43:2b:10: 04:cc:a0:ed:61:ad:b5:c7:6a:32:cb:cb:fa:43:c6: b3:9c:2f:ba:ba:9c:cf:cf:cb:54:0c:36:ca:0a:0b: e1:0a:91:1e:6a:00:90:27:e5:91:04:4b:c3:d0:b4: ce:28:0d:4f:ae:34:a7:bf:01:48:20:a7:be:78:ea: 3c:f3:64:32:a3:1e:85:c1:eb:a2:df:9f:ce:00:ca: d4:10:07:19:98:ad:a5:7e:25:1f:a0:0f:56:a9:be: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:00:32:B1:41:F5:D4:C9:BD:32:AC:8B:C2:33:13:75:10:36:96:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:15:c7:53:76:fb:17:6c:0e:31:a8:4e:e9:63:3b:08:35:38: 15:af:2b:a3:92:00:00:ea:e5:61:ba:b4:e8:f0:99:d1:de:7b: 21:d9:9a:b6:3d:79:bc:72:e3:f4:63:4a:5c:fd:8e:7b:c9:77: 5d:07:54:71:5b:72:51:ac:2d:1d:be:64:c0:6b:d3:15:01:ba: f6:9d:e2:c8:8f:07:d3:96:3c:d7:cb:5b:b1:53:cd:aa:91:d4: 85:a3:f4:88:14:7f:cc:a3:a1:8d:46:c8:eb:7b:4f:b3:6b:f3: 7d:09:c0:a8:07:7b:78:40:14:46:28:ac:c1:f2:43:fb:dd:da: cc:a1:6b:ad:4c:f0:40:e6:3a:75:cb:5e:6c:00:b0:46:02:24: 8e:a6:01:82:b9:a7:d5:d9:6a:30:58:d9:a6:f2:1e:9f:57:65: 1b:d3:a8:37:85:b5:cf:36:43:c4:3b:ec:5b:2c:61:91:40:ed: 0e:ba:2d:08:5e:03:40:48:56:70:3d:20:04:39:81:8e:d0:ad: f9:1a:72:8a:b3:3b:4f:5f:fc:9c:f7:da:ed:c9:1a:3a:2b:af: 49:55:82:6b:a4:25:ce:8d:33:4a:da:58:72:2a:2d:72:a7:58: f0:11:f9:5d:79:3f:34:1f:80:d4:cb:e6:62:00:c2:d7:46:67: 82:01:b8:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPCoolMsLgdcagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NTgyZWY5OWYtOWExMi00MjA3LWEzOWQtOGEzOTZjMGNlZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA754dR1Mpo0ZOOheV+XheDfXSksMQI8W+D45P jyK+SMpeo6d8C+VycKQTaJOXoVHL9kYNkMRZXE7iY5jBhqKoA4UfKOxQs+Tly9jP xZ/5agl7Y9+yS4tRfBadLUCsjaJpuIq1mYX+L/cUakg0fOppOlMB0jNG3d3BlPEN dx6jR+6v0eX5K+ndziUhZaYRr98/3KHmls9To6f86msXeDFtyXVDKxAEzKDtYa21 x2oyy8v6Q8aznC+6upzPz8tUDDbKCgvhCpEeagCQJ+WRBEvD0LTOKA1PrjSnvwFI IKe+eOo882Qyox6Fweui35/OAMrUEAcZmK2lfiUfoA9Wqb4JOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQAMrFB9dTJvTKsi8IzE3UQNpa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmNmZmNhN2MtMWExMS0z OWNmLWI0NTAtYTEyNDNkMTBlNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkVx1N2+xdsDjGoTuljOwg1OBWvK6OSAADq5WG6tOjwmdHeeyHZmrY9 ebxy4/RjSlz9jnvJd10HVHFbclGsLR2+ZMBr0xUBuvad4siPB9OWPNfLW7FTzaqR 1IWj9IgUf8yjoY1GyOt7T7Nr830JwKgHe3hAFEYorMHyQ/vd2syha61M8EDmOnXL XmwAsEYCJI6mAYK5p9XZajBY2abyHp9XZRvTqDeFtc82Q8Q77FssYZFA7Q66LQhe A0BIVnA9IAQ5gY7QrfkacoqzO09f/Jz32u3JGjorr0lVgmukJc6NM0raWHIqLXKn WPAR+V15PzQfgNTL5mIAwtdGZ4IBuJ4= -----END CERTIFICATE-----Generated at Tue Aug 5 21:36:07 2025 by rpki-client