$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58cdf329-5176-32d3-b118-65451af59ce4.roa File: 58cdf329-5176-32d3-b118-65451af59ce4.roa (raw, json) Hash identifier: V5+iQbHQRUiUm4c62qToaw8UKimY/lxOC9QG4XTUXns= Subject key identifier: 5C:FB:F6:CC:FC:55:73:34:A0:EC:76:A7:FE:17:04:1A:5D:B0:5E:B6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA381E2C00E9E009691480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58cdf329-5176-32d3-b118-65451af59ce4.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:38:1e:2c:00:e9:e0:09:69:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=5a16915a-b3a0-4d4e-a6ba-23278c3cbc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6c:d2:00:3b:c9:19:16:3d:80:03:53:c2:1f: 3b:c7:63:e9:63:8a:d9:bc:d1:af:3c:f2:8f:3a:c7: ce:1b:f5:88:59:45:c3:5e:43:7d:cd:27:bb:43:63: 90:3d:11:5b:2c:92:28:c8:1e:2d:10:f3:e0:3a:76: 1e:76:56:54:61:a2:26:da:26:47:7b:fb:b8:5f:bb: 64:f2:b9:a4:f6:d2:d1:0d:9a:de:a4:e0:0a:4b:6b: ac:74:1b:48:52:90:39:20:c5:93:eb:b3:0f:7b:55: 23:b6:79:cb:3c:49:4d:65:12:1d:37:d9:b6:8f:14: 2e:c8:a4:93:1d:9b:d7:7e:1a:49:b3:83:7b:1b:3f: d8:8d:6f:4f:f1:38:8b:4f:0b:57:95:5e:06:de:27: 9d:3f:9b:e5:fb:b7:3b:64:5e:02:4f:7f:bb:49:b2: 37:8e:5d:d0:3e:6b:90:49:25:3d:b3:67:05:13:c5: 2b:09:39:8d:11:96:05:91:b2:ca:ba:e8:65:68:4d: 4d:60:69:56:5a:46:0e:9e:e5:bd:f1:c6:61:59:91: 2b:1f:f3:94:b4:62:4c:91:c1:21:57:26:b0:0c:10: e8:f3:61:c0:ab:22:be:e6:33:80:d2:c2:7d:c9:90: d0:a9:f2:79:fc:a8:4f:0e:1f:71:7c:a8:34:8f:86: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FB:F6:CC:FC:55:73:34:A0:EC:76:A7:FE:17:04:1A:5D:B0:5E:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58cdf329-5176-32d3-b118-65451af59ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:fc:09:4c:80:94:f9:ad:a8:07:0f:55:fc:9f:6e:5b:c8:00: 24:88:91:d4:1c:ab:ff:f5:39:5f:36:66:28:90:ad:83:fb:e8: 02:da:e1:e0:d1:c3:93:48:5c:f1:62:c3:61:31:ad:ac:5c:18: 0b:b0:8f:a5:0f:8f:1d:6e:03:22:ac:62:c4:81:74:b4:ef:98: 16:c6:ad:c7:d1:15:38:2d:0f:a4:af:55:92:9e:06:24:00:4d: ab:9c:2d:16:fb:99:5b:22:3b:2d:aa:77:90:30:d1:59:c0:8d: 3f:98:70:f5:14:dd:c2:73:48:55:d2:77:bb:0d:d9:cb:6d:14: 7f:e9:93:6c:ac:fc:7b:dc:b5:45:c4:03:33:c6:17:bd:5d:ab: 2f:f0:e6:67:81:81:d7:3d:52:e2:e2:8a:c9:c3:b1:bf:fb:d9: cf:35:46:94:84:63:c0:44:f6:9d:f2:64:58:97:87:05:e3:bc: 08:3d:b1:af:a4:f3:2e:27:7f:80:92:14:33:ef:e7:e3:f5:cb: 69:6c:2f:ab:88:e6:de:83:66:41:18:25:fb:fb:ad:d3:13:08: 78:13:6f:14:2d:d4:22:ba:bf:67:f5:3f:03:d2:06:54:81:19: a9:30:90:b0:c3:e1:54:b0:d2:b4:a5:d1:cc:06:8f:4b:9e:52: 98:2e:68:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jgeLADp4AlpFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NWExNjkxNWEtYjNhMC00ZDRlLWE2YmEtMjMyNzhjM2NiYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WzSADvJGRY9gANTwh87x2PpY4rZvNGvPPKP OsfOG/WIWUXDXkN9zSe7Q2OQPRFbLJIoyB4tEPPgOnYedlZUYaIm2iZHe/u4X7tk 8rmk9tLRDZrepOAKS2usdBtIUpA5IMWT67MPe1UjtnnLPElNZRIdN9m2jxQuyKST HZvXfhpJs4N7Gz/YjW9P8TiLTwtXlV4G3iedP5vl+7c7ZF4CT3+7SbI3jl3QPmuQ SSU9s2cFE8UrCTmNEZYFkbLKuuhlaE1NYGlWWkYOnuW98cZhWZErH/OUtGJMkcEh VyawDBDo82HAqyK+5jOA0sJ9yZDQqfJ5/KhPDh9xfKg0j4ZdnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz79sz8VXM0oOx2p/4XBBpdsF62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNThjZGYzMjktNTE3Ni0z MmQzLWIxMTgtNjU0NTFhZjU5Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz8CUyAlPmtqAcPVfyfblvIACSIkdQcq//1OV82ZiiQrYP76ALa4eDR w5NIXPFiw2ExraxcGAuwj6UPjx1uAyKsYsSBdLTvmBbGrcfRFTgtD6SvVZKeBiQA TaucLRb7mVsiOy2qd5Aw0VnAjT+YcPUU3cJzSFXSd7sN2cttFH/pk2ys/HvctUXE AzPGF71dqy/w5meBgdc9UuLiisnDsb/72c81RpSEY8BE9p3yZFiXhwXjvAg9sa+k 8y4nf4CSFDPv5+P1y2lsL6uI5t6DZkEYJfv7rdMTCHgTbxQt1CK6v2f1PwPSBlSB GakwkLDD4VSw0rSl0cwGj0ueUpguaE0= -----END CERTIFICATE-----Generated at Tue Jul 1 09:03:38 2025 by rpki-client