$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/575b4fd3-700b-363b-ae68-3021e2fa154a.roa File: 575b4fd3-700b-363b-ae68-3021e2fa154a.roa (raw, json) Hash identifier: Mbzf0uep8EroxYmHBWrrNMY24GoS1vbTyfmQd+8IJ9k= Subject key identifier: AD:51:D1:21:B6:6B:22:0C:54:9B:12:D1:6A:52:19:03:D7:04:94:6E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118DEAC645159699A3FA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/575b4fd3-700b-363b-ae68-3021e2fa154a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8d:ea:c6:45:15:96:99:a3:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a460092e-4cd1-4585-aa0d-c097afe1fde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:eb:04:c3:8d:77:bb:23:ad:4a:31:c8:94: 1e:ab:a0:f3:c2:99:aa:d5:79:6d:52:2a:6c:d6:9c: de:bd:37:b0:ca:71:e7:bd:70:08:a8:b5:83:4b:76: 7c:c5:31:98:46:b0:dc:a0:90:20:d5:68:96:3b:24: e2:c9:ab:c2:fb:65:cf:18:d4:f2:c3:f4:96:33:9e: 5c:5a:b5:39:19:6c:9f:b0:16:f9:81:00:91:35:fe: 97:10:a5:e6:c6:7f:22:1d:d2:79:c9:fe:48:5f:eb: bd:b7:e5:29:b1:b3:61:92:4a:70:84:31:52:32:4e: b8:ec:40:16:9c:b2:11:1e:40:32:47:6f:4f:d1:c0: db:8d:96:b3:62:e0:19:9e:2a:bf:00:0e:43:e4:96: 2e:4b:71:b4:a7:71:a7:4f:fc:20:52:83:a7:9f:14: c8:92:92:30:dd:ae:a1:25:c8:f8:52:0c:d3:8e:ed: fe:96:fb:6a:2e:08:1c:a4:3f:bb:da:6b:80:b8:7b: 91:09:c3:cb:fd:02:5f:be:03:eb:2b:4a:e5:53:d8: 43:4b:1b:6a:92:4c:c7:18:20:8d:f0:5b:26:96:c4: 75:55:96:df:5f:52:d2:e1:96:18:0a:41:17:9b:15: 4f:f7:b1:2f:39:3a:3e:e0:99:ab:ae:fb:e4:e3:11: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:51:D1:21:B6:6B:22:0C:54:9B:12:D1:6A:52:19:03:D7:04:94:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/575b4fd3-700b-363b-ae68-3021e2fa154a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c0:88:cc:d3:49:cd:ff:85:9e:5e:cf:4f:2e:3f:27:02:91: f1:1b:3d:bb:72:9d:87:c3:e4:66:91:61:93:04:76:7c:3f:ae: 97:65:a8:eb:99:85:8e:9e:05:46:88:48:92:93:0a:1a:ed:50: 42:2c:a5:64:3c:83:5c:2f:5e:fe:82:c1:2d:ce:8b:93:ad:48: c9:da:75:df:ec:e1:9d:d8:d6:7a:74:e8:e3:89:d1:dd:c8:3a: 31:db:2b:0f:6e:d9:85:1a:67:c5:2d:53:9a:2c:80:61:0c:45: 3e:e2:4f:56:c5:f1:a2:87:16:5d:4e:e7:1a:04:8b:8f:31:87: d0:cc:e1:da:8b:0a:f3:43:f5:2c:2f:69:4b:9c:67:2f:bf:65: cc:fb:18:7b:1b:67:1d:e7:5e:f2:30:fd:5b:fc:56:68:4b:60: 4b:f0:cf:f0:b4:6b:96:c2:9c:da:a2:6f:13:bc:6f:f6:6f:64: 59:e2:90:2b:9b:a8:63:34:73:93:d3:17:79:db:90:0b:ad:3a: cf:8e:8e:06:35:9e:59:70:3a:1d:f3:40:d1:cd:35:f1:08:27: 12:cc:ec:e7:16:5b:fe:8e:e7:b5:04:25:ea:e1:2b:d3:c4:ce: 7a:02:cd:37:f4:e2:d6:ab:30:e3:a1:3b:19:de:09:9f:d6:4a: 34:ae:1f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY3qxkUVlpmj+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTQ2MDA5MmUtNGNkMS00NTg1LWFhMGQtYzA5N2FmZTFmZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKfrBMONd7sjrUoxyJQeq6Dzwpmq1XltUips 1pzevTewynHnvXAIqLWDS3Z8xTGYRrDcoJAg1WiWOyTiyavC+2XPGNTyw/SWM55c WrU5GWyfsBb5gQCRNf6XEKXmxn8iHdJ5yf5IX+u9t+UpsbNhkkpwhDFSMk647EAW nLIRHkAyR29P0cDbjZazYuAZniq/AA5D5JYuS3G0p3GnT/wgUoOnnxTIkpIw3a6h Jcj4UgzTju3+lvtqLggcpD+72muAuHuRCcPL/QJfvgPrK0rlU9hDSxtqkkzHGCCN 8FsmlsR1VZbfX1LS4ZYYCkEXmxVP97EvOTo+4Jmrrvvk4xFk3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1R0SG2ayIMVJsS0WpSGQPXBJRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTc1YjRmZDMtNzAwYi0z NjNiLWFlNjgtMzAyMWUyZmExNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzAiMzTSc3/hZ5ez08uPycCkfEbPbtynYfD5GaRYZMEdnw/rpdlqOuZ hY6eBUaISJKTChrtUEIspWQ8g1wvXv6CwS3Oi5OtSMnadd/s4Z3Y1np06OOJ0d3I OjHbKw9u2YUaZ8UtU5osgGEMRT7iT1bF8aKHFl1O5xoEi48xh9DM4dqLCvND9Swv aUucZy+/Zcz7GHsbZx3nXvIw/Vv8VmhLYEvwz/C0a5bCnNqibxO8b/ZvZFnikCub qGM0c5PTF3nbkAutOs+OjgY1nllwOh3zQNHNNfEIJxLM7OcWW/6O57UEJerhK9PE znoCzTf04tarMOOhOxneCZ/WSjSuH3M= -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:03 2025 by rpki-client