$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa File: 586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa (raw, json) Hash identifier: y29xSN4waEIdrtRBsMlm3wh894sQ7ZjldaIZflaKRNI= Subject key identifier: 7A:A7:BA:CA:73:6A:6E:3B:C9:35:D8:50:42:61:B1:D1:0F:C3:F3:D8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5D93B0D82A6F06CE9500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5d:93:b0:d8:2a:6f:06:ce:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3e3b6591-24f8-484f-83bf-abf737e398e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:f2:3b:ff:ec:6d:05:19:dd:2e:86:7d:87: 32:8f:a6:f4:83:c0:58:d0:95:75:3e:59:4f:b2:f7: 2d:2c:42:9a:54:88:3a:e7:61:1d:65:c4:8e:1d:b1: f2:5c:dd:68:45:c1:46:e2:6a:da:95:6c:80:d2:a1: c8:3f:6a:0e:84:e2:4a:d1:1e:85:0c:57:86:c3:af: 84:d4:f6:b2:ac:12:b6:b7:5a:2f:dd:09:60:01:74: c8:a6:fe:a3:19:62:a1:27:d7:8b:d3:27:8d:ed:76: d0:71:89:eb:d1:02:c8:22:2f:bf:43:02:bd:4c:7e: 02:c9:1b:2a:b3:d0:b8:da:46:cc:a2:37:ef:32:32: 8d:1a:a5:51:71:85:32:2d:dd:0a:ab:18:c3:c7:25: ac:69:8a:c8:a5:81:a5:27:aa:0f:97:06:9a:7f:37: ff:c8:ae:e5:5a:32:ef:0e:a6:4a:60:1d:cf:f3:b6: 81:ba:46:1a:aa:88:8f:39:2c:2c:51:bc:da:73:32: 59:30:0d:1a:2d:e5:30:1d:01:c0:f1:a8:17:ea:ee: 24:4a:93:01:99:84:a0:88:57:8c:1b:e5:3b:b7:3b: 31:45:e2:1f:dc:47:88:d0:dd:86:9e:55:da:5b:36: da:e0:0d:74:b4:cf:38:d0:8f:ae:1f:ff:19:69:fc: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A7:BA:CA:73:6A:6E:3B:C9:35:D8:50:42:61:B1:D1:0F:C3:F3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:1a:20:bb:4a:9a:aa:bb:5c:7e:b7:82:ea:d0:97:7a:b3:c5: 67:3e:93:50:cb:21:1c:df:2d:09:92:5a:38:a3:ed:78:23:90: 28:25:aa:75:23:d4:2b:47:7e:ae:a9:a1:21:4f:4e:30:2b:dc: 41:f1:bc:02:f8:c8:91:a8:32:04:64:11:aa:3d:3d:df:40:1b: 5f:3d:13:1b:b6:27:c0:00:1d:9b:be:cb:f9:83:f5:03:3b:7e: 45:48:83:e4:ce:c5:28:23:70:8d:c3:65:fe:fd:ab:c3:5a:4c: 06:e0:0a:29:0a:1f:98:b9:de:e1:d9:df:58:98:34:64:99:52: e3:bd:91:8a:03:fe:a1:64:47:94:f7:bc:80:79:95:02:20:1b: 6c:be:1e:bb:49:76:d9:98:67:62:98:a7:86:5c:0c:16:d0:8d: 4e:78:de:90:8f:9d:b4:b8:8d:1a:1c:56:25:a9:f2:70:ad:b5: a7:94:cf:01:62:47:91:77:ca:07:fa:7d:11:eb:3a:e0:03:ac: 3e:06:3f:6d:ee:16:22:d5:a5:c6:da:cc:29:25:44:73:6c:df: d7:b3:d1:b1:b9:3e:ea:67:65:de:33:5f:6c:02:1f:85:c4:47: 1a:5e:8b:a9:7c:3b:5e:51:80:26:2f:38:56:66:d3:40:e9:5c: da:92:6d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku12TsNgqbwbOlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2UzYjY1OTEtMjRmOC00ODRmLTgzYmYtYWJmNzM3ZTM5OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4PyO//sbQUZ3S6GfYcyj6b0g8BY0JV1PllP svctLEKaVIg652EdZcSOHbHyXN1oRcFG4mralWyA0qHIP2oOhOJK0R6FDFeGw6+E 1PayrBK2t1ov3QlgAXTIpv6jGWKhJ9eL0yeN7XbQcYnr0QLIIi+/QwK9TH4CyRsq s9C42kbMojfvMjKNGqVRcYUyLd0KqxjDxyWsaYrIpYGlJ6oPlwaafzf/yK7lWjLv DqZKYB3P87aBukYaqoiPOSwsUbzaczJZMA0aLeUwHQHA8agX6u4kSpMBmYSgiFeM G+U7tzsxReIf3EeI0N2GnlXaWzba4A10tM840I+uH/8Zafw8VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqnuspzam47yTXYUEJhsdEPw/PYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg2ZjEyYzktNDhlMS0z ZGM4LWJlN2MtODhlMGFkZmMyZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsaILtKmqq7XH63gurQl3qzxWc+k1DLIRzfLQmSWjij7XgjkCglqnUj 1CtHfq6poSFPTjAr3EHxvAL4yJGoMgRkEao9Pd9AG189Exu2J8AAHZu+y/mD9QM7 fkVIg+TOxSgjcI3DZf79q8NaTAbgCikKH5i53uHZ31iYNGSZUuO9kYoD/qFkR5T3 vIB5lQIgG2y+HrtJdtmYZ2KYp4ZcDBbQjU543pCPnbS4jRocViWp8nCttaeUzwFi R5F3ygf6fRHrOuADrD4GP23uFiLVpcbazCklRHNs39ez0bG5PupnZd4zX2wCH4XE Rxpei6l8O15RgCYvOFZm00DpXNqSbVk= -----END CERTIFICATE-----Generated at Sun May 4 12:41:57 2025 by rpki-client