$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa File: 34c28d43-5060-326b-b054-88ca80c8af57.roa (raw, json) Hash identifier: ma1Or0n6aM6InLbNsC5N+OhnmLgUOJHUWyu4WzCiXBw= Subject key identifier: A8:74:B7:EB:97:9F:60:DD:EC:5D:7A:F0:61:27:1A:71:B9:A0:5E:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F1C4251FF0CECDB8CE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.251.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f1:c4:25:1f:f0:ce:cd:b8:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=2bbc68ac-00e9-4b73-8848-5c18369b5668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:83:aa:94:ae:fe:7c:6c:28:b6:b4:87:3c:a9: 48:18:74:4f:39:0d:b6:30:33:87:2a:56:6f:2b:a8: 18:8b:ba:db:f9:d0:f0:08:3c:22:c8:25:52:9b:5e: 35:82:a7:29:ca:fb:f1:61:61:4c:42:b1:5a:1e:23: e6:94:27:dd:a8:82:1a:dd:70:b0:82:fd:b7:10:cc: 6d:0b:a6:b9:03:d5:bd:be:52:f3:de:b2:e4:d5:bb: 67:56:be:62:fa:11:44:43:6c:6f:76:67:4d:ee:6e: 17:6d:ba:c9:79:c9:b0:ec:84:76:11:48:4a:0b:c5: 58:c4:d6:74:f6:c0:26:3b:bd:2f:e9:c1:18:c6:72: 6f:b0:e8:77:fc:c8:e5:01:87:0f:a5:e8:37:9f:6d: 3f:6b:37:a6:9f:34:42:c4:8c:d9:83:11:dc:88:03: f5:ad:55:b2:5b:9b:70:aa:6c:26:46:c3:03:25:5f: 8d:aa:ad:a9:91:51:c4:c1:96:8b:e4:f2:28:a7:c2: 96:34:94:b0:3d:d4:f2:13:75:d5:dd:fb:49:6d:b5: da:8a:8f:54:db:c0:72:fe:99:1f:51:23:1f:48:9f: 3c:71:02:35:33:c3:6d:55:8f:da:8e:7c:bd:0d:75: fe:44:ad:68:6a:ee:a0:bd:7f:b3:dc:f2:8e:2c:0c: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:74:B7:EB:97:9F:60:DD:EC:5D:7A:F0:61:27:1A:71:B9:A0:5E:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:0c:95:89:54:3d:16:9f:7f:1d:d0:90:f4:5d:d3:d9:b3:24: 2f:36:b9:f4:df:d5:0f:73:52:d6:fc:18:e7:5f:42:8c:30:23: 82:a9:35:c2:e7:d3:88:8a:1c:f6:0b:f2:f2:9d:6b:70:c0:90: b6:ab:af:2f:a6:aa:94:5d:f7:61:87:0f:55:83:9d:c9:4e:9e: 85:a5:87:5e:b7:1b:80:00:e6:f7:d7:10:5c:d4:64:c2:7d:98: a0:b9:90:49:be:93:43:44:07:9d:74:be:8b:fc:c5:a1:c5:c3: f2:42:f5:58:e8:45:3a:c6:8a:1b:45:f4:bb:a8:2e:be:9a:d1: 39:bc:6b:8f:97:28:9b:bd:1f:b0:9b:07:e8:11:3c:4a:ca:fb: 17:85:3c:c5:16:65:db:2d:e4:57:68:fe:08:f6:e5:7c:49:2a: 73:2a:27:03:ad:0f:ca:9a:3e:dd:5d:f3:0d:cf:2e:da:55:45: 20:44:c6:f5:ea:b7:e8:8b:1a:03:ba:5d:a7:d8:e1:21:8f:5b: bc:9b:37:a8:ae:0a:58:88:b6:d3:b9:9b:ca:a6:da:71:de:a9: 27:16:9f:91:e0:16:c4:24:c9:87:30:01:3e:8c:a2:b9:ce:0c: 24:0f:28:61:66:53:c3:ef:67:ef:fd:1b:ca:20:4e:3b:30:a0: 9b:39:32:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPHEJR/wzs24zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MmJiYzY4YWMtMDBlOS00YjczLTg4NDgtNWMxODM2OWI1NjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIOqlK7+fGwotrSHPKlIGHRPOQ22MDOHKlZv K6gYi7rb+dDwCDwiyCVSm141gqcpyvvxYWFMQrFaHiPmlCfdqIIa3XCwgv23EMxt C6a5A9W9vlLz3rLk1btnVr5i+hFEQ2xvdmdN7m4XbbrJecmw7IR2EUhKC8VYxNZ0 9sAmO70v6cEYxnJvsOh3/MjlAYcPpeg3n20/azemnzRCxIzZgxHciAP1rVWyW5tw qmwmRsMDJV+Nqq2pkVHEwZaL5PIop8KWNJSwPdTyE3XV3ftJbbXaio9U28By/pkf USMfSJ88cQI1M8NtVY/ajny9DXX+RK1oau6gvX+z3PKOLAwd4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKh0t+uXn2Dd7F168GEnGnG5oF54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzRjMjhkNDMtNTA2MC0z MjZiLWIwNTQtODhjYTgwYzhhZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4MlYlUPRaffx3QkPRd09mzJC82ufTf1Q9zUtb8GOdfQowwI4KpNcLn 04iKHPYL8vKda3DAkLarry+mqpRd92GHD1WDnclOnoWlh163G4AA5vfXEFzUZMJ9 mKC5kEm+k0NEB510vov8xaHFw/JC9VjoRTrGihtF9LuoLr6a0Tm8a4+XKJu9H7Cb B+gRPErK+xeFPMUWZdst5Fdo/gj25XxJKnMqJwOtD8qaPt1d8w3PLtpVRSBExvXq t+iLGgO6XafY4SGPW7ybN6iuCliIttO5m8qm2nHeqScWn5HgFsQkyYcwAT6MornO DCQPKGFmU8PvZ+/9G8ogTjswoJs5MkY= -----END CERTIFICATE-----Generated at Wed Aug 6 00:57:44 2025 by rpki-client