$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b1af465-c310-3f84-8c9a-7ac58d62f231.roa File: 2b1af465-c310-3f84-8c9a-7ac58d62f231.roa (raw, json) Hash identifier: mKLgZVyXV4qlMRlEpYyLeenI9z1GpSSUuOAiCB9hLHQ= Subject key identifier: 62:54:1E:2E:2E:AA:AB:4B:D4:54:35:B7:78:83:2B:89:F5:0E:22:50 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841238BB5DD0A8924DB03A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b1af465-c310-3f84-8c9a-7ac58d62f231.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:38:bb:5d:d0:a8:92:4d:b0:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9be94c6b-0b3c-4e5d-ade2-754f0a63c8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:40:34:a4:4c:be:f6:1f:c2:21:dd:e6:86:53: b6:4b:d6:e4:46:8b:1e:6e:2a:63:97:79:a1:15:9a: b0:3e:eb:52:f8:a7:46:82:02:36:0e:25:0f:a4:b8: 33:9b:d0:d2:61:dc:6b:d3:a1:63:cd:eb:c0:8b:26: 29:b5:f1:f9:36:52:42:08:7b:8a:e5:eb:72:a8:b8: 33:d8:f4:24:c0:c7:c7:5c:9c:74:59:cf:81:f4:61: 48:7b:e2:75:d6:73:2d:17:0d:77:16:b4:83:7c:4e: be:14:73:8d:2a:bf:90:7b:f4:98:fc:50:90:8e:6a: 15:46:45:0a:d8:76:24:74:68:17:f1:6c:da:e5:6a: 48:27:d3:65:26:14:1f:dd:70:e2:e9:40:ef:f4:c3: e5:69:bf:31:ec:70:56:9f:fb:b4:8b:42:64:9f:50: 14:b6:02:ff:2e:d8:90:b6:24:2f:59:72:b2:dd:b4: 7a:0c:4d:2b:be:3d:c9:43:1c:9f:58:ef:12:9b:e5: 66:ef:4c:ac:38:a8:ce:30:01:4b:ef:b3:c3:51:f9: 9f:62:6a:fd:8a:0f:aa:b7:34:66:ef:cc:c2:00:2b: 26:49:e3:cb:df:e4:d2:c9:62:5a:61:61:f3:84:4e: 56:ad:77:b8:fa:3a:dd:98:c2:32:49:22:e7:78:21: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:54:1E:2E:2E:AA:AB:4B:D4:54:35:B7:78:83:2B:89:F5:0E:22:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b1af465-c310-3f84-8c9a-7ac58d62f231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:86:14:37:fa:19:0f:30:cf:8f:e5:1a:02:90:e9:f0:0a:3a: 16:6d:2c:55:87:9f:be:29:d3:4c:f0:06:0e:46:8a:4d:6f:b0: 6b:1a:bb:5b:84:08:71:cb:10:9e:37:1f:75:cc:f2:0e:df:8d: 57:b1:7b:b2:01:84:6a:4b:d1:c2:08:1d:5a:f6:9c:ef:10:d0: 0c:01:36:83:03:a2:64:2e:1f:dd:26:ac:54:b1:7e:ac:d9:06: ae:ec:fe:e6:a5:59:c6:b0:40:fc:e1:79:1b:8e:d6:88:d3:ad: 5f:a5:f5:69:8f:2d:dc:29:00:50:d7:8e:55:f2:a0:23:5f:28: f7:31:d9:75:25:27:d2:f5:82:17:57:2c:eb:d1:80:93:51:7a: dd:bb:95:b1:1d:a7:1c:95:db:59:38:66:1e:f5:3b:b8:7f:1c: f6:ce:d8:c8:e5:8f:7c:d6:e5:e5:a7:84:e4:e4:29:ae:2e:d6: 8f:72:62:a3:a3:c0:37:e6:52:7f:a8:69:8c:00:ef:48:b2:d5: ea:67:ed:af:b7:3e:6a:21:54:31:5f:8a:43:6d:87:cc:95:0f: c8:92:08:d7:3b:56:40:80:27:9d:6b:c6:d5:35:60:96:c0:d9: a4:da:3f:b3:59:f3:23:0b:cd:ac:13:70:3f:69:08:07:b1:7e: 8e:d3:e7:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEji7XdCokk2wOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWJlOTRjNmItMGIzYy00ZTVkLWFkZTItNzU0ZjBhNjNjOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEA0pEy+9h/CId3mhlO2S9bkRosebipjl3mh FZqwPutS+KdGggI2DiUPpLgzm9DSYdxr06FjzevAiyYptfH5NlJCCHuK5etyqLgz 2PQkwMfHXJx0Wc+B9GFIe+J11nMtFw13FrSDfE6+FHONKr+Qe/SY/FCQjmoVRkUK 2HYkdGgX8Wza5WpIJ9NlJhQf3XDi6UDv9MPlab8x7HBWn/u0i0Jkn1AUtgL/LtiQ tiQvWXKy3bR6DE0rvj3JQxyfWO8Sm+Vm70ysOKjOMAFL77PDUfmfYmr9ig+qtzRm 78zCACsmSePL3+TSyWJaYWHzhE5WrXe4+jrdmMIySSLneCGkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJUHi4uqqtL1FQ1t3iDK4n1DiJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmIxYWY0NjUtYzMxMC0z Zjg0LThjOWEtN2FjNThkNjJmMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKGFDf6GQ8wz4/lGgKQ6fAKOhZtLFWHn74p00zwBg5Gik1vsGsau1uE CHHLEJ43H3XM8g7fjVexe7IBhGpL0cIIHVr2nO8Q0AwBNoMDomQuH90mrFSxfqzZ Bq7s/ualWcawQPzheRuO1ojTrV+l9WmPLdwpAFDXjlXyoCNfKPcx2XUlJ9L1ghdX LOvRgJNRet27lbEdpxyV21k4Zh71O7h/HPbO2Mjlj3zW5eWnhOTkKa4u1o9yYqOj wDfmUn+oaYwA70iy1epn7a+3PmohVDFfikNth8yVD8iSCNc7VkCAJ51rxtU1YJbA 2aTaP7NZ8yMLzawTcD9pCAexfo7T55U= -----END CERTIFICATE-----Generated at Mon Aug 4 22:28:29 2025 by rpki-client