$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa File: fcffca7c-1a11-39cf-b450-a1243d10e54e.roa (raw, json) Hash identifier: C77l3VL6eGQ3Cz/7EyKAc+XKnlzDd0f5GLAvGNcq+MI= Subject key identifier: 85:E2:6E:A6:FF:7E:DE:8F:D3:57:8F:8C:08:6E:0D:BD:9F:27:1E:A5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2F1C9C91A8EDD7752900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2f:1c:9c:91:a8:ed:d7:75:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=5d4ca982-858d-449a-81d0-1a07800bacd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:fd:94:83:b8:b6:af:2b:81:ca:8b:25:d8: ba:58:9f:0c:e3:22:05:54:2b:27:52:16:8b:2e:54: 63:84:bf:dd:50:c5:4a:06:a5:69:8e:d6:fd:33:b5: 5d:40:56:1a:8c:32:09:e0:68:68:7c:67:08:3f:a3: 34:27:b1:c5:8d:eb:18:74:af:38:ef:10:ed:cd:b5: 18:d7:05:fb:96:98:4c:d8:1c:0d:57:b4:73:40:c0: cd:b9:4e:66:71:2f:8c:48:d1:c2:a7:ee:96:8a:d8: 10:f4:fa:ef:e9:5e:4e:c9:e9:84:a8:f4:0c:4d:af: 00:54:94:85:19:b3:65:95:9b:01:e0:b9:05:a9:08: e6:12:6f:3b:4b:56:8f:ae:4c:74:d4:e2:a6:e0:42: f5:f4:44:40:86:7c:cb:7a:e2:b2:66:f9:5e:2e:13: 05:47:29:f2:62:ee:1f:13:f5:15:fc:71:1e:4e:d6: 09:30:77:ff:4b:62:56:6e:9c:d5:47:df:2f:2e:5e: 81:d4:d2:41:02:5e:06:16:2e:7c:ee:36:2a:d0:c6: d9:87:d7:5c:8d:c7:47:1d:de:d6:e4:59:83:71:2c: 1e:ec:0d:db:de:45:a5:eb:ad:87:03:24:b0:f2:51: 7d:48:4c:0f:d8:94:09:9d:f4:75:a0:87:8a:b3:a0: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E2:6E:A6:FF:7E:DE:8F:D3:57:8F:8C:08:6E:0D:BD:9F:27:1E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:5f:7f:7a:33:ea:88:48:b0:7d:e9:5d:d0:97:0a:d5:a8:76: 52:b6:fd:6c:34:e0:a9:76:fc:0e:84:c8:a2:bb:6b:01:2c:a8: a0:65:55:aa:e0:1c:70:c0:cc:9c:94:15:d0:1b:3c:27:a9:f6: 1c:ab:e0:c4:ae:0e:60:e4:02:f7:92:6e:c5:ca:75:96:d9:0c: 17:a2:7a:99:0e:e2:ff:ea:8a:2e:b3:aa:f1:2c:66:e5:62:f7: b0:00:14:0b:59:27:f6:a4:fb:a9:b1:b5:e0:69:29:c2:0e:39: ea:d2:9b:d6:25:08:07:b7:1c:2a:99:2d:e1:bd:23:a5:ae:bc: d8:7d:18:8b:b4:dc:d5:87:0f:70:6f:1b:d0:2d:16:c6:09:38: c3:ed:1b:1c:31:da:d9:dd:01:91:e6:fe:07:96:ce:a8:ad:0f: 78:f8:27:97:0b:9b:bf:b7:dd:28:9c:cf:bd:f9:5c:5b:c9:99: 33:83:76:d0:c6:d5:a0:25:35:7a:2c:72:5c:31:de:15:d5:de: 40:8c:e6:34:7a:63:cd:a8:90:2f:90:22:61:7e:70:95:5c:af: 1b:3b:b0:35:cf:38:68:ed:87:19:1d:ce:2e:db:05:d1:98:db: 80:11:58:a9:6e:5e:82:0c:43:2f:c6:5f:4a:e6:76:be:aa:e8: 7e:36:f2:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i8cnJGo7dd1KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NWQ0Y2E5ODItODU4ZC00NDlhLTgxZDAtMWEwNzgwMGJhY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/z9lIO4tq8rgcqLJdi6WJ8M4yIFVCsnUhaL LlRjhL/dUMVKBqVpjtb9M7VdQFYajDIJ4GhofGcIP6M0J7HFjesYdK847xDtzbUY 1wX7lphM2BwNV7RzQMDNuU5mcS+MSNHCp+6WitgQ9Prv6V5OyemEqPQMTa8AVJSF GbNllZsB4LkFqQjmEm87S1aPrkx01OKm4EL19ERAhnzLeuKyZvleLhMFRynyYu4f E/UV/HEeTtYJMHf/S2JWbpzVR98vLl6B1NJBAl4GFi587jYq0MbZh9dcjcdHHd7W 5FmDcSwe7A3b3kWl662HAySw8lF9SEwP2JQJnfR1oIeKs6DgEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXibqb/ft6P01ePjAhuDb2fJx6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmNmZmNhN2MtMWExMS0z OWNmLWI0NTAtYTEyNDNkMTBlNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVff3oz6ohIsH3pXdCXCtWodlK2/Ww04Kl2/A6EyKK7awEsqKBlVarg HHDAzJyUFdAbPCep9hyr4MSuDmDkAveSbsXKdZbZDBeiepkO4v/qii6zqvEsZuVi 97AAFAtZJ/ak+6mxteBpKcIOOerSm9YlCAe3HCqZLeG9I6WuvNh9GIu03NWHD3Bv G9AtFsYJOMPtGxwx2tndAZHm/geWzqitD3j4J5cLm7+33Sicz735XFvJmTODdtDG 1aAlNXosclwx3hXV3kCM5jR6Y82okC+QImF+cJVcrxs7sDXPOGjthxkdzi7bBdGY 24ARWKluXoIMQy/GX0rmdr6q6H428pc= -----END CERTIFICATE-----Generated at Sun Jun 15 13:57:20 2025 by rpki-client