$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa File: 6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa (raw, json) Hash identifier: IJDkW3tOU/GkSJ7kdWxWdrdNlBTfAskuJtY58kvQ+H0= Subject key identifier: F2:21:0A:8A:1D:14:12:8C:4D:CB:25:71:E4:D4:BB:5C:75:53:F6:CE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84118D3EE84A975F0B072AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:8d:3e:e8:4a:97:5f:0b:07:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4a7d0c2d-f011-4722-b2d0-e1c106b26ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:fe:97:0d:03:02:0f:24:77:22:2e:68:48: b7:f3:cf:a3:1b:bf:6e:5d:45:2c:33:4d:31:bd:ef: f3:fd:d7:5e:69:7b:89:09:7a:e4:30:63:f7:40:f2: 2c:d7:4b:0a:12:b1:bf:05:31:35:a9:48:34:37:ef: 47:d7:99:bb:35:5c:04:eb:5c:2d:c5:c0:56:23:b9: 29:48:95:b8:34:70:d9:b2:8c:f4:d1:9e:ff:56:43: cd:17:49:1f:6b:b0:20:e2:f0:b9:47:76:0b:32:3b: 70:9d:cc:ac:f1:3d:53:7d:bc:13:a0:16:4c:a6:cf: 7e:43:0b:66:dd:5f:f2:01:cb:80:53:b9:e5:6f:35: b4:2f:7e:35:e0:06:8c:55:27:c1:32:38:35:b4:b1: 64:18:11:4d:31:f4:75:37:13:24:2c:a9:52:39:7e: da:5f:a8:65:3d:eb:24:94:5a:53:0e:0a:62:29:36: 11:d4:53:6c:f0:22:1b:8c:48:ea:77:42:f3:9c:c1: 1e:84:ab:c9:82:64:16:5a:cc:f5:6d:d5:3c:a5:06: a0:35:60:62:08:ff:46:50:9c:d6:0f:ac:35:f3:f3: 2b:55:60:45:58:62:32:b0:2b:6b:d0:3a:16:8f:a5: 00:c2:5e:d2:3a:84:7a:fa:e2:a9:80:f2:49:89:2e: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:21:0A:8A:1D:14:12:8C:4D:CB:25:71:E4:D4:BB:5C:75:53:F6:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ec:84:8d:3f:d1:eb:28:04:aa:d3:31:8d:dc:99:95:0c:08: ac:5a:2c:79:3f:fa:37:73:21:07:09:af:6e:f9:1c:6e:5b:c0: f0:53:00:ff:73:b2:7c:5b:c9:06:4c:11:81:82:60:5f:22:36: bb:bd:e9:e5:47:33:90:cb:9c:bd:c7:0d:39:41:65:cf:98:0f: ca:b2:cd:c3:33:37:8b:f6:42:ba:67:dc:cd:88:10:67:eb:5b: 33:b5:ad:4a:d3:1e:77:3b:da:89:10:ac:9d:0d:ba:c1:75:5c: 93:ab:c0:6e:8d:38:04:ef:89:dc:59:58:16:ed:2a:7b:79:8e: 2c:2d:bc:9b:f1:57:ff:cd:67:87:84:b1:26:02:42:87:64:98: 38:57:20:69:e0:ef:5a:1f:05:aa:72:2b:de:ff:ee:c4:c1:f8: 3d:da:67:23:ba:7d:a9:2b:c5:69:60:cb:1c:3e:8c:80:e2:9c: 50:2f:59:a1:7d:e6:65:1f:96:bc:b0:3b:7b:4b:c5:5f:4a:b9: 6d:12:08:8e:55:3c:e4:e5:d6:da:69:09:b2:61:ba:07:b1:fc: 52:6a:9a:67:d7:c8:dd:06:88:8a:14:5c:63:2a:7b:75:78:0c: d9:31:63:29:15:cd:e3:5c:78:71:70:77:82:d0:8e:1d:93:b3: fd:3b:26:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEY0+6EqXXwsHKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGE3ZDBjMmQtZjAxMS00NzIyLWIyZDAtZTFjMTA2YjI2Y2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pv+lw0DAg8kdyIuaEi388+jG79uXUUsM00x ve/z/ddeaXuJCXrkMGP3QPIs10sKErG/BTE1qUg0N+9H15m7NVwE61wtxcBWI7kp SJW4NHDZsoz00Z7/VkPNF0kfa7Ag4vC5R3YLMjtwncys8T1TfbwToBZMps9+Qwtm 3V/yAcuAU7nlbzW0L3414AaMVSfBMjg1tLFkGBFNMfR1NxMkLKlSOX7aX6hlPesk lFpTDgpiKTYR1FNs8CIbjEjqd0LznMEehKvJgmQWWsz1bdU8pQagNWBiCP9GUJzW D6w18/MrVWBFWGIysCtr0DoWj6UAwl7SOoR6+uKpgPJJiS4K6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIhCoodFBKMTcslceTUu1x1U/bOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmM1ZWE5OWUtYTA5Ny0z NTNiLWExZTItZmFlZjQ1YzRlMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArshI0/0esoBKrTMY3cmZUMCKxaLHk/+jdzIQcJr275HG5bwPBTAP9z snxbyQZMEYGCYF8iNru96eVHM5DLnL3HDTlBZc+YD8qyzcMzN4v2Qrpn3M2IEGfr WzO1rUrTHnc72okQrJ0NusF1XJOrwG6NOATvidxZWBbtKnt5jiwtvJvxV//NZ4eE sSYCQodkmDhXIGng71ofBapyK97/7sTB+D3aZyO6fakrxWlgyxw+jIDinFAvWaF9 5mUflrywO3tLxV9KuW0SCI5VPOTl1tppCbJhugex/FJqmmfXyN0GiIoUXGMqe3V4 DNkxYykVzeNceHFwd4LQjh2Ts/07JgM= -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:30 2025 by rpki-client