$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa File: 60a013d0-02a4-37bc-80b4-e210514778da.roa (raw, json) Hash identifier: i5nQR9E0Y94rREEMV12Z5kcNmwMOEVYhmZkxNFemQJI= Subject key identifier: 2C:3A:12:BD:34:40:7D:A6:E4:D2:CF:78:AF:80:7E:64:9B:2F:D0:32 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841238345737420784DB43C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:38:34:57:37:42:07:84:db:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9f88b0ae-d1b0-43a9-861e-e1bdc36b90c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:a4:e5:72:16:61:17:92:e9:14:94:82:e5: c3:5f:89:85:7f:c2:b5:b6:f6:81:ad:5f:65:56:e0: 3a:22:24:a7:91:b3:73:47:fe:76:a4:08:2f:9a:54: a3:e4:12:ff:73:3e:9e:5f:62:9c:d4:b4:a3:a9:48: 0d:b8:3b:99:35:3c:02:1b:a7:62:c9:8d:e1:60:d2: 23:f1:7c:d0:8b:df:6f:97:2b:de:2b:b1:ea:43:4f: 12:73:1e:80:bb:32:c3:a7:57:19:9e:ab:5b:44:62: 09:9d:0f:bf:bb:00:9b:3f:54:e4:dc:fb:0d:8e:95: 0b:2f:e1:a4:ed:3d:55:ab:42:d2:b0:19:bd:de:e6: 4c:c8:0c:ed:f5:4c:aa:7f:94:39:c7:77:d5:e7:70: 7b:ae:be:2f:9a:37:28:06:db:d8:a4:04:8e:04:0a: 10:05:ae:60:6b:22:a2:02:22:d2:98:3f:fc:15:ff: 41:0f:e9:a0:cd:05:19:66:47:c0:91:66:48:8f:18: 4f:6c:9b:cf:e1:9d:12:12:3f:1f:9c:57:de:88:f1: a2:66:28:8a:d2:42:fe:fe:64:43:09:9b:91:de:78: b8:f2:6f:85:c0:1f:cc:70:fb:5d:32:6a:45:6e:61: 69:4d:7f:57:cb:56:5d:b8:e8:d0:87:78:7e:a0:60: ef:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3A:12:BD:34:40:7D:A6:E4:D2:CF:78:AF:80:7E:64:9B:2F:D0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:09:0e:d2:07:44:6b:c2:78:b6:ae:13:66:e2:76:ff:47:40: d7:29:a5:00:d2:e5:9d:37:06:78:4f:d1:b7:6a:1a:c9:3c:40: d0:bf:04:ac:a4:b7:0e:63:e2:bd:7e:0c:61:7a:2a:9b:d4:6e: 83:08:30:66:9d:1f:c6:e1:77:62:a8:9e:f4:44:4f:a1:96:7e: 0d:7d:98:24:a5:27:9c:f0:05:7d:8f:e2:ba:98:69:0e:60:12: 83:4b:33:db:32:60:44:df:ba:e9:66:61:68:a5:c9:f5:35:b6: d3:03:4e:2e:55:7b:50:e9:a6:85:5f:67:30:e4:72:2d:2c:98: 4c:e9:02:04:52:96:d8:6c:a4:b6:f7:7c:b8:f5:bc:b1:21:a1: 00:02:17:00:ec:17:09:9c:48:86:a2:8c:c6:14:a9:b8:1d:e7: fc:e6:f6:0e:b7:0b:63:08:c7:07:34:53:63:3a:96:14:d5:42: 6e:bd:e5:39:37:e5:0a:92:9d:90:c4:31:5b:f9:2e:69:65:14: a6:af:af:ce:24:f7:4c:e8:5a:20:15:e7:5b:38:4c:eb:91:00: 90:57:f6:99:1a:27:e5:b2:b5:c5:36:c1:51:92:17:db:8e:b3: 72:a2:7a:97:31:ed:64:f2:b5:06:23:d0:f4:dd:18:13:0d:94: 8a:c0:80:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjg0VzdCB4TbQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWY4OGIwYWUtZDFiMC00M2E5LTg2MWUtZTFiZGMzNmI5MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tSk5XIWYReS6RSUguXDX4mFf8K1tvaBrV9l VuA6IiSnkbNzR/52pAgvmlSj5BL/cz6eX2Kc1LSjqUgNuDuZNTwCG6diyY3hYNIj 8XzQi99vlyveK7HqQ08Scx6AuzLDp1cZnqtbRGIJnQ+/uwCbP1Tk3PsNjpULL+Gk 7T1Vq0LSsBm93uZMyAzt9Uyqf5Q5x3fV53B7rr4vmjcoBtvYpASOBAoQBa5gayKi AiLSmD/8Ff9BD+mgzQUZZkfAkWZIjxhPbJvP4Z0SEj8fnFfeiPGiZiiK0kL+/mRD CZuR3ni48m+FwB/McPtdMmpFbmFpTX9Xy1ZduOjQh3h+oGDvKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw6Er00QH2m5NLPeK+AfmSbL9AyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjBhMDEzZDAtMDJhNC0z N2JjLTgwYjQtZTIxMDUxNDc3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkJDtIHRGvCeLauE2bidv9HQNcppQDS5Z03BnhP0bdqGsk8QNC/BKyk tw5j4r1+DGF6KpvUboMIMGadH8bhd2KonvRET6GWfg19mCSlJ5zwBX2P4rqYaQ5g EoNLM9syYETfuulmYWilyfU1ttMDTi5Ve1DppoVfZzDkci0smEzpAgRSlthspLb3 fLj1vLEhoQACFwDsFwmcSIaijMYUqbgd5/zm9g63C2MIxwc0U2M6lhTVQm695Tk3 5QqSnZDEMVv5LmllFKavr84k90zoWiAV51s4TOuRAJBX9pkaJ+WytcU2wVGSF9uO s3Kiepcx7WTytQYj0PTdGBMNlIrAgCE= -----END CERTIFICATE-----Generated at Mon Aug 4 16:15:07 2025 by rpki-client