$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/11fe363d-b183-3cbd-ad77-fcc4ce27a24a.roa File: 11fe363d-b183-3cbd-ad77-fcc4ce27a24a.roa (raw, json) Hash identifier: xCEjW0ojudajq/4UdtYrolvrCWKUDYhiv1A3jXfCPO0= Subject key identifier: A1:92:DA:3B:71:AD:53:34:CF:AD:2B:26:11:A9:F8:14:C3:E7:8D:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122DEF2F165F34D9268B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/11fe363d-b183-3cbd-ad77-fcc4ce27a24a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2d:ef:2f:16:5f:34:d9:26:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=343708e6-2e9e-4b60-ba73-dfa03bbc52b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:24:50:1b:e8:96:a8:4c:1c:46:1f:df:f9:ee: bd:af:5c:0a:5d:5d:26:d2:b5:86:34:e7:bd:64:4a: ae:7c:92:80:b5:e0:bf:81:d2:40:30:c9:fe:0b:44: 1b:a6:ce:fb:5c:48:ac:64:1b:8f:8e:68:64:00:c9: 3c:c3:cd:09:d6:7c:d5:32:c7:3c:36:61:c6:cb:8d: 8d:6f:50:12:7e:6c:b9:16:0f:41:13:ca:9d:13:ef: 2e:11:d3:f7:38:3d:6f:b1:c8:b3:74:65:98:70:84: e6:5d:06:2a:0d:30:5b:f8:54:ca:cf:1b:23:b4:5a: d4:8b:85:6b:c8:71:eb:05:88:0b:9b:2f:cc:9c:dc: 17:60:56:9c:bd:a6:b8:51:96:ef:ce:ad:dc:b1:01: 10:02:67:58:3b:33:42:05:70:08:c7:46:ca:d8:5d: dd:c2:02:84:b6:d9:c3:9f:9c:fc:4a:19:15:ad:dc: 2f:ab:b1:f6:eb:06:d0:c9:dd:7a:38:e0:a5:38:ab: 96:5f:93:4b:ed:df:3d:39:5c:d3:59:a1:45:17:f9: 17:b9:3b:bf:c1:47:b7:3d:83:25:7d:32:82:9a:09: c3:10:ab:a1:6b:02:f0:76:fc:92:c5:46:06:85:76: a8:1c:cb:09:73:d0:4e:41:d7:f4:45:84:57:6b:0b: f9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:92:DA:3B:71:AD:53:34:CF:AD:2B:26:11:A9:F8:14:C3:E7:8D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/11fe363d-b183-3cbd-ad77-fcc4ce27a24a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c8:ab:7a:07:19:af:a1:63:f3:4b:ea:b2:d6:e3:41:d9:c6: c0:12:06:ec:fb:7c:74:54:51:de:7d:04:75:7c:58:f0:c4:b9: 0c:83:dd:bd:75:97:2d:b6:d0:52:a1:44:39:aa:b9:92:d8:97: fb:08:0c:7f:64:d8:d1:ef:94:47:25:81:fc:f5:fc:d2:87:20: 4a:1c:dd:e7:f1:70:7a:24:33:6b:dd:16:e5:55:62:3f:14:f7: 36:54:ea:d7:b3:e7:f7:9f:24:73:4c:28:db:55:b3:21:ec:f7: 2c:3d:d5:c5:e6:2b:37:cf:64:ea:c4:14:e8:40:bb:38:6d:e9: 7d:a7:ed:b7:bf:9a:8e:23:de:50:3e:7d:86:db:a7:e4:3d:d6: 47:81:62:0f:43:3d:02:c1:14:c3:a0:fa:fe:bc:28:af:e9:3e: 6d:cb:d9:61:c3:a8:9c:15:00:9f:d0:42:29:82:ca:b4:cc:b6: b3:41:e9:3d:78:3b:08:2b:73:f7:08:30:d9:98:9e:45:e8:77: 12:e0:eb:8f:2e:11:cf:e7:6a:98:b2:eb:a0:50:9d:73:07:a9: e9:77:00:8d:7b:97:b6:ec:15:ac:fa:a0:21:fd:a6:87:96:3c: 06:a7:9c:24:82:60:0d:24:cb:e8:11:47:8d:84:5a:c5:3c:95: fd:98:93:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEi3vLxZfNNkmi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzQzNzA4ZTYtMmU5ZS00YjYwLWJhNzMtZGZhMDNiYmM1MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCRQG+iWqEwcRh/f+e69r1wKXV0m0rWGNOe9 ZEqufJKAteC/gdJAMMn+C0Qbps77XEisZBuPjmhkAMk8w80J1nzVMsc8NmHGy42N b1ASfmy5Fg9BE8qdE+8uEdP3OD1vscizdGWYcITmXQYqDTBb+FTKzxsjtFrUi4Vr yHHrBYgLmy/MnNwXYFacvaa4UZbvzq3csQEQAmdYOzNCBXAIx0bK2F3dwgKEttnD n5z8ShkVrdwvq7H26wbQyd16OOClOKuWX5NL7d89OVzTWaFFF/kXuTu/wUe3PYMl fTKCmgnDEKuhawLwdvySxUYGhXaoHMsJc9BOQdf0RYRXawv5HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGS2jtxrVM0z60rJhGp+BTD5409MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTFmZTM2M2QtYjE4My0z Y2JkLWFkNzctZmNjNGNlMjdhMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrIq3oHGa+hY/NL6rLW40HZxsASBuz7fHRUUd59BHV8WPDEuQyD3b11 ly220FKhRDmquZLYl/sIDH9k2NHvlEclgfz1/NKHIEoc3efxcHokM2vdFuVVYj8U 9zZU6tez5/efJHNMKNtVsyHs9yw91cXmKzfPZOrEFOhAuzht6X2n7be/mo4j3lA+ fYbbp+Q91keBYg9DPQLBFMOg+v68KK/pPm3L2WHDqJwVAJ/QQimCyrTMtrNB6T14 Owgrc/cIMNmYnkXodxLg648uEc/napiy66BQnXMHqel3AI17l7bsFaz6oCH9poeW PAannCSCYA0ky+gRR42EWsU8lf2Yk3Y= -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:54 2025 by rpki-client