$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa File: 308f5d06-7ebf-3daf-b45c-37864122c3d4.roa (raw, json) Hash identifier: KbgyFKftid4pVfbfF5ONXIiwaHY95vjPSj65nwMp4Bs= Subject key identifier: 9E:B0:13:A6:44:D4:AF:D6:18:1F:37:CC:61:78:EC:0C:E4:05:9F:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F28638DE0FE3F1A53480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.251.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f2:86:38:de:0f:e3:f1:a5:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=92a28a93-0c00-4119-a930-fbe245c3c048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:e0:1c:53:46:ac:03:1d:fb:ad:a3:af:51: 84:d7:c3:49:f4:14:bf:72:e9:94:8e:63:d2:eb:46: fa:8d:31:8d:74:1b:5d:c9:48:9a:40:c5:c4:eb:88: 00:8b:dd:12:f6:df:04:e4:06:da:ac:7c:b2:90:c3: 65:70:da:10:17:69:6c:17:62:ba:3c:77:4e:74:31: 8e:b3:2a:94:9a:e2:e7:e6:ba:41:27:e5:ef:1f:5c: 4d:a5:7b:0d:7c:09:50:bb:9c:ed:2c:90:01:48:dd: d4:31:b2:44:61:e5:a4:d9:13:de:7b:0b:cc:f8:d3: 2f:05:cc:43:0a:00:72:8c:07:b3:b5:ac:45:72:a1: 85:76:68:87:10:7f:50:df:6f:bc:f1:98:7b:dd:37: 2d:2f:f8:44:fd:40:b3:60:c6:3d:6b:97:10:64:fe: b0:75:a4:aa:a8:8d:e4:1f:c4:1e:64:d5:7f:a2:d1: 0b:d6:ef:d3:44:bb:ce:27:af:0a:16:7f:52:94:69: e6:4d:ca:c6:91:1e:c2:d2:93:7a:8a:5f:9d:57:91: a3:76:90:01:9f:54:94:02:e1:74:bc:2f:fc:a2:d5: e5:f4:4d:63:35:54:95:a7:1b:28:e2:f8:22:0c:c5: 5c:59:d1:aa:7c:d4:9b:04:98:ee:3e:58:58:2b:69: 9c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B0:13:A6:44:D4:AF:D6:18:1F:37:CC:61:78:EC:0C:E4:05:9F:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3b:0c:29:35:4e:4f:53:f8:10:04:8e:e2:86:6f:4d:59:8d: 6e:90:d5:e1:7d:75:63:66:a8:6c:4b:c8:20:15:7c:4e:ef:60: 9a:5d:d8:e3:34:79:14:93:32:5d:17:7f:ae:bc:d3:09:3e:cd: 53:df:f7:48:5e:94:af:d3:3d:74:26:8b:8a:0f:aa:d9:d8:11: af:da:59:db:b9:18:c4:7a:97:c0:08:5a:c9:fd:8d:50:2b:ed: 95:75:45:c0:63:f8:e0:6c:ad:7a:d5:be:5f:96:fc:56:99:c5: 7c:b8:ab:14:9a:4a:f7:19:8a:1f:72:0e:64:fa:f4:d0:10:95: 88:48:b1:66:fb:1c:b8:41:2d:a4:fa:f7:3b:26:44:d4:4a:97: 57:15:60:0c:5e:9d:5d:7a:91:b0:63:7e:0c:45:c9:90:c2:1e: fc:40:b8:39:f0:1f:1c:ba:af:35:27:cb:13:cd:48:8e:01:3d: 04:c0:65:4c:b6:3b:e5:00:97:35:7e:66:b0:79:96:a0:94:27: 0a:6d:ae:09:8d:06:90:8e:d4:41:23:08:d9:77:c7:e8:fd:63: 31:99:08:89:a3:54:38:66:d8:96:e7:59:b8:94:f9:15:48:58: 36:14:3a:53:f5:4f:22:43:14:b3:81:63:b7:df:e1:cf:5f:5d: 5d:1c:93:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPKGON4P4/GlNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk OTJhMjhhOTMtMGMwMC00MTE5LWE5MzAtZmJlMjQ1YzNjMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UPgHFNGrAMd+62jr1GE18NJ9BS/cumUjmPS 60b6jTGNdBtdyUiaQMXE64gAi90S9t8E5AbarHyykMNlcNoQF2lsF2K6PHdOdDGO syqUmuLn5rpBJ+XvH1xNpXsNfAlQu5ztLJABSN3UMbJEYeWk2RPeewvM+NMvBcxD CgByjAeztaxFcqGFdmiHEH9Q32+88Zh73TctL/hE/UCzYMY9a5cQZP6wdaSqqI3k H8QeZNV/otEL1u/TRLvOJ68KFn9SlGnmTcrGkR7C0pN6il+dV5GjdpABn1SUAuF0 vC/8otXl9E1jNVSVpxso4vgiDMVcWdGqfNSbBJjuPlhYK2mcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6wE6ZE1K/WGB83zGF47AzkBZ8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzA4ZjVkMDYtN2ViZi0z ZGFmLWI0NWMtMzc4NjQxMjJjM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ7DCk1Tk9T+BAEjuKGb01ZjW6Q1eF9dWNmqGxLyCAVfE7vYJpd2OM0 eRSTMl0Xf6680wk+zVPf90helK/TPXQmi4oPqtnYEa/aWdu5GMR6l8AIWsn9jVAr 7ZV1RcBj+OBsrXrVvl+W/FaZxXy4qxSaSvcZih9yDmT69NAQlYhIsWb7HLhBLaT6 9zsmRNRKl1cVYAxenV16kbBjfgxFyZDCHvxAuDnwHxy6rzUnyxPNSI4BPQTAZUy2 O+UAlzV+ZrB5lqCUJwptrgmNBpCO1EEjCNl3x+j9YzGZCImjVDhm2JbnWbiU+RVI WDYUOlP1TyJDFLOBY7ff4c9fXV0ck1M= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:39 2025 by rpki-client