$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63f7cafe-7c57-37f8-8c91-c0ce23d48f4f.roa File: 63f7cafe-7c57-37f8-8c91-c0ce23d48f4f.roa (raw, json) Hash identifier: OQKicpXI4d29mpKfT79p7jCeu8eukjVtbbBkYYAmhT4= Subject key identifier: 34:B6:8D:21:CD:53:C2:72:A5:2C:10:19:DD:42:DA:0D:67:B7:7C:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2F405FAC1ABB94379A40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63f7cafe-7c57-37f8-8c91-c0ce23d48f4f.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2f:40:5f:ac:1a:bb:94:37:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=1990e9ae-4d5d-4e37-8f25-c77f60a96b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:5e:76:db:a7:0a:ba:c4:f5:d1:43:aa:6c: 7d:5e:40:44:cd:00:ca:35:74:58:3e:6d:b5:3b:fb: c6:80:c5:4b:50:3a:a1:ab:14:2a:3c:a5:5b:6e:45: ab:60:5c:3a:b5:dd:d0:58:e3:1a:da:3b:62:3c:82: b5:bf:89:6e:19:12:fd:cf:bc:b7:92:b4:be:dc:a5: de:37:ce:4d:08:b8:9e:06:b4:b5:73:12:f5:fe:61: f7:5d:24:f0:95:e3:40:a4:41:a4:a1:1d:fa:45:35: 0c:d4:d3:87:53:9a:8b:6e:49:9d:e3:14:68:dd:1b: 72:b1:b6:f9:18:10:11:29:64:60:35:40:ac:c5:3e: 53:05:83:54:b3:f3:d7:f2:bd:3a:77:34:ac:a1:fd: 46:f5:e8:d8:4f:2e:a9:4c:3e:0f:58:13:84:fc:89: f6:ce:09:c7:17:62:76:e6:0d:da:db:57:59:62:c6: 19:52:3c:1e:85:d9:ba:24:0b:2c:38:b1:a8:73:fd: 4d:2c:a3:fd:89:85:bb:b3:a0:46:b0:7f:2e:a7:91: 24:63:e0:36:8c:f8:80:55:bd:91:e7:9c:d9:1f:b1: f2:8c:72:d9:cb:c5:05:5f:a5:3d:b4:d9:0c:01:fa: 51:40:84:8b:8b:21:82:5f:3d:75:68:ae:c1:28:cd: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B6:8D:21:CD:53:C2:72:A5:2C:10:19:DD:42:DA:0D:67:B7:7C:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63f7cafe-7c57-37f8-8c91-c0ce23d48f4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:60:c0:61:0c:73:3f:88:cf:d8:b7:f6:97:62:e0:a6:05:a0: 12:b5:20:1b:e7:c9:f9:b7:0d:37:c3:c7:ec:32:d3:59:a5:2d: 5f:3f:cb:44:71:05:17:79:48:70:3e:3c:66:ba:a4:25:f1:d7: c4:90:e2:20:48:25:e1:2e:51:70:94:c6:98:f0:a9:ce:62:7e: f0:2d:cb:71:f3:2f:44:41:28:2b:d4:1e:2f:89:5d:4a:67:5a: a4:b7:7c:59:d7:cb:07:0f:1e:4e:51:07:b3:e3:c5:f6:69:6b: 84:82:71:47:2a:7d:d4:8b:75:78:a6:7f:98:f7:82:1c:32:e2: d2:6e:b0:9b:21:5d:8b:1b:50:78:31:a9:54:2f:bf:40:34:1e: 7f:8a:3d:24:f2:7d:8a:bf:8c:c7:a2:43:fc:c1:d8:9d:38:5e: 19:81:02:61:a6:bd:3f:49:21:46:9e:0c:65:d3:d3:bc:bd:eb: 57:8e:3f:64:3d:32:54:8a:78:29:1a:0c:d5:f0:12:fd:57:e5: 09:7f:0b:d6:03:44:c4:39:04:24:5c:25:d9:ca:69:52:5a:61: cb:71:ba:b8:1d:37:74:3a:6e:0e:5d:77:ca:fe:09:d6:31:51: 4f:2a:f7:93:a5:c7:4b:fc:4e:98:f5:75:1e:79:ea:18:fc:71: 66:26:fa:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i9AX6wau5Q3mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MTk5MGU5YWUtNGQ1ZC00ZTM3LThmMjUtYzc3ZjYwYTk2YjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0JedtunCrrE9dFDqmx9XkBEzQDKNXRYPm21 O/vGgMVLUDqhqxQqPKVbbkWrYFw6td3QWOMa2jtiPIK1v4luGRL9z7y3krS+3KXe N85NCLieBrS1cxL1/mH3XSTwleNApEGkoR36RTUM1NOHU5qLbkmd4xRo3Rtysbb5 GBARKWRgNUCsxT5TBYNUs/PX8r06dzSsof1G9ejYTy6pTD4PWBOE/In2zgnHF2J2 5g3a21dZYsYZUjwehdm6JAssOLGoc/1NLKP9iYW7s6BGsH8up5EkY+A2jPiAVb2R 55zZH7HyjHLZy8UFX6U9tNkMAfpRQISLiyGCXz11aK7BKM3tGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDS2jSHNU8JypSwQGd1C2g1nt3xWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjNmN2NhZmUtN2M1Ny0z N2Y4LThjOTEtYzBjZTIzZDQ4ZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENgwGEMcz+Iz9i39pdi4KYFoBK1IBvnyfm3DTfDx+wy01mlLV8/y0Rx BRd5SHA+PGa6pCXx18SQ4iBIJeEuUXCUxpjwqc5ifvAty3HzL0RBKCvUHi+JXUpn WqS3fFnXywcPHk5RB7PjxfZpa4SCcUcqfdSLdXimf5j3ghwy4tJusJshXYsbUHgx qVQvv0A0Hn+KPSTyfYq/jMeiQ/zB2J04XhmBAmGmvT9JIUaeDGXT07y961eOP2Q9 MlSKeCkaDNXwEv1X5Ql/C9YDRMQ5BCRcJdnKaVJaYctxurgdN3Q6bg5dd8r+CdYx UU8q95Olx0v8Tpj1dR556hj8cWYm+gM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:44:42 2025 by rpki-client