$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0c3da11a-d992-3add-a1e2-38e222b4bb5b.roa File: 0c3da11a-d992-3add-a1e2-38e222b4bb5b.roa (raw, json) Hash identifier: DV7awnV4Axvz1ifLsZv+xgPir2aUtEh3LcFdB/3aVAs= Subject key identifier: 71:7D:85:D8:C7:9A:F4:78:C1:FB:68:A9:39:08:E3:0F:F0:BD:71:C1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2FC3097FD39541A24E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0c3da11a-d992-3add-a1e2-38e222b4bb5b.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2f:c3:09:7f:d3:95:41:a2:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=7b7cd850-3870-462e-bed9-e680eaf91cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:53:aa:3a:91:1f:18:72:6d:5d:1d:8c:3d: b6:a4:29:7d:6a:e7:d2:bd:08:6e:a9:4a:30:64:ca: c2:25:ca:4e:c3:55:a7:ff:03:f1:19:8d:a8:42:27: 33:4f:33:c4:2a:2b:13:2e:36:ef:cd:e4:89:7a:a3: 35:f3:ac:2f:3f:9e:70:fb:6d:1b:2b:29:28:3c:6b: 75:08:ea:62:bf:2d:e5:ee:a8:f1:10:d3:0f:a5:bf: c6:b6:12:f0:1a:ff:53:f9:ef:f2:f4:fe:65:12:1a: bf:d0:45:de:a4:11:0e:04:c1:df:ca:2e:84:bb:f4: 5b:36:1a:79:fb:30:54:50:d9:84:39:1a:c7:f3:cb: 38:e4:7f:ed:a0:b6:af:8a:cd:01:cd:fc:fa:28:0c: 3d:9c:67:55:0e:e7:f1:a0:67:4b:df:de:69:ab:3f: 6b:e0:1c:23:b3:d3:07:88:4d:19:05:12:98:ae:f2: c7:7e:0c:82:63:2b:17:99:38:c8:99:5e:06:96:8c: f4:60:6a:a1:1f:fe:71:4f:74:9f:45:df:34:de:3c: 48:7b:3b:1f:8a:de:ae:32:f8:31:fc:38:df:fc:5a: c6:be:5b:67:b6:31:fb:25:a3:31:61:31:50:65:9d: 34:bf:f4:f3:2c:56:04:71:e2:4f:0a:0c:aa:c6:1a: 97:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7D:85:D8:C7:9A:F4:78:C1:FB:68:A9:39:08:E3:0F:F0:BD:71:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0c3da11a-d992-3add-a1e2-38e222b4bb5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d6:42:8e:77:88:79:c0:b0:48:96:14:3e:e0:4d:7f:b8:b1: bd:86:15:44:b5:01:e1:66:86:93:07:6f:e3:2b:d6:63:2c:07: 98:77:96:c9:17:b6:cb:61:0e:b2:50:4d:ce:ae:3b:d0:aa:06: 7f:0e:6b:53:43:ac:2c:2e:56:2d:00:68:10:88:4a:8e:1a:b8: c7:03:16:c1:2c:14:f2:7a:84:65:e9:3d:d4:d9:2a:ab:a1:dd: c5:8c:00:77:68:66:04:ab:aa:da:f0:c4:d4:ec:80:76:e7:7b: 0c:7e:54:87:79:01:b0:86:c1:af:45:a0:ea:de:19:3f:1d:aa: 33:2b:f1:10:dc:83:1d:cf:60:8f:30:ad:53:d9:be:e6:37:34: cb:1a:a5:e9:a3:a5:74:4e:30:05:88:05:8d:96:d1:d7:99:8b: ac:75:f5:68:8a:72:5b:79:f3:ce:d9:e6:c9:06:7a:f1:b2:89: 18:45:d6:84:87:3e:b8:15:fb:85:18:26:bd:c6:5f:a5:09:82: c7:38:cc:d9:5c:97:fa:d9:f4:1e:e2:dc:85:60:9d:d1:21:ad: 06:6a:27:c1:bf:2a:23:df:f9:0c:d1:76:b3:50:a7:4a:5e:f2: 58:09:1b:62:2c:dd:9f:00:ac:3e:59:ab:12:59:3b:a4:cd:10: f5:74:71:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i/DCX/TlUGiToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk N2I3Y2Q4NTAtMzg3MC00NjJlLWJlZDktZTY4MGVhZjkxY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX5TqjqRHxhybV0djD22pCl9aufSvQhuqUow ZMrCJcpOw1Wn/wPxGY2oQiczTzPEKisTLjbvzeSJeqM186wvP55w+20bKykoPGt1 COpivy3l7qjxENMPpb/GthLwGv9T+e/y9P5lEhq/0EXepBEOBMHfyi6Eu/RbNhp5 +zBUUNmEORrH88s45H/toLavis0Bzfz6KAw9nGdVDufxoGdL395pqz9r4Bwjs9MH iE0ZBRKYrvLHfgyCYysXmTjImV4Gloz0YGqhH/5xT3SfRd803jxIezsfit6uMvgx /Djf/FrGvltntjH7JaMxYTFQZZ00v/TzLFYEceJPCgyqxhqXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF9hdjHmvR4wftoqTkI4w/wvXHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGMzZGExMWEtZDk5Mi0z YWRkLWExZTItMzhlMjIyYjRiYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzWQo53iHnAsEiWFD7gTX+4sb2GFUS1AeFmhpMHb+Mr1mMsB5h3lskX tsthDrJQTc6uO9CqBn8Oa1NDrCwuVi0AaBCISo4auMcDFsEsFPJ6hGXpPdTZKquh 3cWMAHdoZgSrqtrwxNTsgHbnewx+VId5AbCGwa9FoOreGT8dqjMr8RDcgx3PYI8w rVPZvuY3NMsapemjpXROMAWIBY2W0deZi6x19WiKclt5887Z5skGevGyiRhF1oSH PrgV+4UYJr3GX6UJgsc4zNlcl/rZ9B7i3IVgndEhrQZqJ8G/KiPf+QzRdrNQp0pe 8lgJG2Is3Z8ArD5ZqxJZO6TNEPV0cUU= -----END CERTIFICATE-----Generated at Mon Jun 30 07:32:58 2025 by rpki-client