$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa File: 637ba1ea-5a50-309e-a538-fe7efd71cc38.roa (raw, json) Hash identifier: g1xtdiubO0Lj4U20O7Ia7xH2LUaA+frbSYn7a5ahCig= Subject key identifier: 68:15:37:33:CB:0F:2B:1C:3C:16:D3:82:09:C8:E2:D9:6E:B3:A8:6E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F278AC049A29223EFD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.251.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f2:78:ac:04:9a:29:22:3e:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=f4cb433f-01c5-4222-b2e5-19ff4f18c014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:ae:27:06:6f:f3:89:1e:4f:38:7b:dd:9b: 2d:e3:9f:0b:37:06:d7:a4:fb:7e:e3:7f:f5:91:93: d8:4f:1b:6a:14:d4:86:71:a8:92:e0:3b:92:ff:13: 5d:74:1f:0d:04:e7:75:8b:d1:e0:a3:83:71:67:10: f7:52:85:65:22:17:18:66:32:67:f4:1d:1d:4b:0f: f2:ae:a4:10:ed:00:c5:6c:dd:77:92:e1:a7:49:8f: 5b:5e:60:26:2a:ff:a4:68:37:6c:e1:60:10:2c:8f: ab:be:62:af:08:e3:d2:7a:68:86:4a:0b:16:8a:4a: e6:5b:fe:c9:ce:c1:d8:b5:1b:2d:37:4b:3c:a0:1e: 38:97:38:21:1d:36:2a:86:ce:98:c2:e3:16:06:ff: b8:0e:71:bb:41:5a:1d:98:24:1b:b0:d5:d2:f6:41: 7c:7f:7f:15:b3:f3:7e:22:35:71:da:ee:ab:1b:12: 59:03:8c:74:98:3b:2c:a1:9b:3a:ff:59:57:3a:c5: 00:02:65:4e:70:a1:ed:d0:f3:9f:e9:9e:15:a4:d4: 66:82:11:37:11:99:05:cb:d2:71:45:ed:2f:0b:b5: b6:b4:45:8f:2e:ff:48:34:49:52:ce:f8:01:27:a7: aa:b1:8d:a2:96:4f:aa:e6:d6:fd:7a:67:1b:ef:05: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:15:37:33:CB:0F:2B:1C:3C:16:D3:82:09:C8:E2:D9:6E:B3:A8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:75:ee:95:e4:2e:92:21:8a:cc:a2:3e:1f:3c:6f:58:1f:40: b6:68:14:40:da:46:f7:2e:e8:17:91:af:07:e3:61:8d:a2:e2: 16:98:4f:73:f8:b5:3c:81:81:74:c3:2a:16:ad:b9:f9:dc:7a: b3:79:4e:f7:c7:d1:ec:81:05:01:0a:e8:64:f9:42:43:26:ac: a5:ec:a0:3d:d1:97:73:c8:77:66:50:bf:cd:af:5f:e6:c9:5b: c4:23:43:e1:23:e9:23:4e:a5:67:46:77:65:e9:ce:dd:06:34: bf:27:2f:e3:a0:08:37:d7:74:d3:67:6f:1a:55:9a:40:21:0e: d5:a1:23:4b:b4:8a:64:af:36:73:36:c4:f9:da:8b:85:00:8b: 6e:eb:b7:27:e8:7b:8f:21:60:97:99:21:fd:2b:36:e0:51:7b: 2f:af:38:60:f1:4b:fd:51:3f:fb:b4:c3:f4:bd:a4:6f:f1:15: ed:c2:b8:de:3c:ba:5c:aa:a0:95:74:88:bd:57:94:5c:23:63: 66:0f:0d:0a:28:57:54:c2:de:19:ad:ba:b0:42:41:81:89:25: 91:ce:7d:2a:da:33:59:1e:de:68:41:c4:c8:8d:5b:7c:23:b8: 16:20:6e:0f:38:59:23:0f:65:61:3e:01:3d:fd:cb:1c:6a:c4: 77:74:34:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPJ4rASaKSI+/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk ZjRjYjQzM2YtMDFjNS00MjIyLWIyZTUtMTlmZjRmMThjMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc+uJwZv84keTzh73Zst458LNwbXpPt+43/1 kZPYTxtqFNSGcaiS4DuS/xNddB8NBOd1i9Hgo4NxZxD3UoVlIhcYZjJn9B0dSw/y rqQQ7QDFbN13kuGnSY9bXmAmKv+kaDds4WAQLI+rvmKvCOPSemiGSgsWikrmW/7J zsHYtRstN0s8oB44lzghHTYqhs6YwuMWBv+4DnG7QVodmCQbsNXS9kF8f38Vs/N+ IjVx2u6rGxJZA4x0mDssoZs6/1lXOsUAAmVOcKHt0POf6Z4VpNRmghE3EZkFy9Jx Re0vC7W2tEWPLv9INElSzvgBJ6eqsY2ilk+q5tb9emcb7wV0wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgVNzPLDyscPBbTggnI4tlus6huMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjM3YmExZWEtNWE1MC0z MDllLWE1MzgtZmU3ZWZkNzFjYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF17pXkLpIhisyiPh88b1gfQLZoFEDaRvcu6BeRrwfjYY2i4haYT3P4 tTyBgXTDKhatufncerN5TvfH0eyBBQEK6GT5QkMmrKXsoD3Rl3PId2ZQv82vX+bJ W8QjQ+Ej6SNOpWdGd2Xpzt0GNL8nL+OgCDfXdNNnbxpVmkAhDtWhI0u0imSvNnM2 xPnai4UAi27rtyfoe48hYJeZIf0rNuBRey+vOGDxS/1RP/u0w/S9pG/xFe3CuN48 ulyqoJV0iL1XlFwjY2YPDQooV1TC3hmturBCQYGJJZHOfSraM1ke3mhBxMiNW3wj uBYgbg84WSMPZWE+AT39yxxqxHd0NAg= -----END CERTIFICATE-----Generated at Wed Aug 6 00:55:31 2025 by rpki-client