$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa File: 66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa (raw, json) Hash identifier: DZ3eQHwvZYTJWQL52oo5ebB6xCsFBuOVJqDH6Z0PQjA= Subject key identifier: AF:50:DD:C4:DC:9B:24:80:9C:C4:02:79:65:FC:E4:2A:C4:AF:FD:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA3900BCCE2ECD7F7839C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.250.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:39:00:bc:ce:2e:cd:7f:78:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=47d2e101-dae6-4311-9862-8c36151646ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:26:60:39:fa:19:47:71:7b:cd:d8:7b:43:84: 06:3b:76:4b:5b:ec:45:99:6c:04:23:84:8f:48:74: 86:74:98:41:87:96:70:fe:89:5c:ff:31:f6:f3:fa: c2:a2:5d:0e:67:0e:f1:5a:8e:3c:26:d4:55:35:94: 33:51:2e:db:19:45:18:0d:00:ae:e6:cb:29:46:ad: 61:a4:02:38:f0:71:19:ff:1d:49:c3:92:ce:b6:99: 1e:7b:86:ef:06:84:95:a4:e8:ce:a1:7e:ab:21:32: 85:e3:64:4b:29:93:21:09:77:df:a8:62:14:b4:48: d5:51:08:ee:a4:d6:af:42:de:9a:05:da:30:29:aa: e3:dd:5c:9c:c8:6f:6c:f3:20:a5:b1:9c:61:57:9f: 09:f0:c7:4a:f0:af:a0:ee:17:6f:31:c8:79:93:5d: 8c:06:52:68:dd:04:d2:b4:27:37:80:c3:48:5c:1c: 07:ab:ce:5b:4b:f3:7f:0f:8a:cf:a2:4b:5a:f8:9f: 81:4b:8e:15:3e:a5:a5:4d:93:f1:31:06:a3:45:25: 57:06:bc:bd:4b:c3:4e:f4:d0:88:6a:06:b0:c1:97: eb:d0:28:ea:af:c9:78:1d:96:7e:98:7f:45:10:d1: 1e:64:a6:53:26:d4:5f:32:ee:2f:b4:5a:cf:ba:4d: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:50:DD:C4:DC:9B:24:80:9C:C4:02:79:65:FC:E4:2A:C4:AF:FD:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:aa:5f:dc:a5:cc:c2:32:03:ee:93:8b:4d:2f:45:ec:da:2a: b5:b1:76:e6:b1:3d:a5:7c:a4:db:29:27:8d:bf:f3:6a:7a:30: 8c:2f:31:1a:6a:ae:42:2d:9f:3f:ce:ac:ad:4c:9e:df:34:26: 96:d0:c7:4e:5b:23:e2:ad:89:bd:05:6e:d8:45:8e:a5:ec:33: be:02:81:b5:0a:0b:66:52:f4:dd:57:f0:d1:3d:5a:cf:b0:f4: 6d:30:24:d1:d5:49:e2:e3:a1:74:6c:e1:75:9e:6b:73:de:d0: e1:b0:83:bb:2b:32:d6:ed:b8:8c:5a:75:57:b0:e3:b6:7d:99: 2b:42:46:05:5c:da:3f:42:03:ea:a5:82:bc:d8:7a:15:99:b3: 3f:13:82:92:6a:12:aa:b0:da:11:7b:1f:96:92:5c:fb:a9:20: b9:9e:a9:62:f9:ec:25:5e:ad:e2:d1:b8:75:7a:c6:14:62:74: a7:52:e5:91:aa:87:f6:de:52:fa:6f:cd:0b:27:cc:56:95:cd: 09:8f:b7:49:74:64:49:eb:ba:f4:19:59:41:9d:29:25:f1:9c: 1c:3a:fd:75:93:33:bd:61:03:35:93:10:2a:ed:91:18:eb:44: ab:96:0d:68:84:f9:45:d9:3d:7f:c5:ee:79:24:9d:53:20:b5: bb:7d:19:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jkAvM4uzX94OcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NDdkMmUxMDEtZGFlNi00MzExLTk4NjItOGMzNjE1MTY0NmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSZgOfoZR3F7zdh7Q4QGO3ZLW+xFmWwEI4SP SHSGdJhBh5Zw/olc/zH28/rCol0OZw7xWo48JtRVNZQzUS7bGUUYDQCu5sspRq1h pAI48HEZ/x1Jw5LOtpkee4bvBoSVpOjOoX6rITKF42RLKZMhCXffqGIUtEjVUQju pNavQt6aBdowKarj3VycyG9s8yClsZxhV58J8MdK8K+g7hdvMch5k12MBlJo3QTS tCc3gMNIXBwHq85bS/N/D4rPokta+J+BS44VPqWlTZPxMQajRSVXBry9S8NO9NCI agawwZfr0Cjqr8l4HZZ+mH9FENEeZKZTJtRfMu4vtFrPuk0TAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9Q3cTcmySAnMQCeWX85CrEr/1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjZkMzhmMGItYWQxNy0z Y2EzLTk3Y2UtYjhmZThkOGU5YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6qX9ylzMIyA+6Ti00vRezaKrWxduaxPaV8pNspJ42/82p6MIwvMRpq rkItnz/OrK1Mnt80JpbQx05bI+Ktib0FbthFjqXsM74CgbUKC2ZS9N1X8NE9Ws+w 9G0wJNHVSeLjoXRs4XWea3Pe0OGwg7srMtbtuIxadVew47Z9mStCRgVc2j9CA+ql grzYehWZsz8TgpJqEqqw2hF7H5aSXPupILmeqWL57CVereLRuHV6xhRidKdS5ZGq h/beUvpvzQsnzFaVzQmPt0l0ZEnruvQZWUGdKSXxnBw6/XWTM71hAzWTECrtkRjr RKuWDWiE+UXZPX/F7nkknVMgtbt9Gb4= -----END CERTIFICATE-----Generated at Mon Jun 30 07:30:18 2025 by rpki-client