$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7dab097b-2aa3-3c91-a1b1-1a94a9419fc2.roa File: 7dab097b-2aa3-3c91-a1b1-1a94a9419fc2.roa (raw, json) Hash identifier: QeMpL+RuGFbPgI4p/8A+XqVVLyBXDs+5DKNLlvN/tK4= Subject key identifier: 7C:D9:25:04:E6:28:ED:BA:14:A4:3E:1D:21:A1:7F:51:3B:BB:DB:09 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F6134E76D636CC72C980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7dab097b-2aa3-3c91-a1b1-1a94a9419fc2.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.251.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f6:13:4e:76:d6:36:cc:72:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=254048cc-264a-40e7-a78a-3c5de9a422f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0f:6d:39:80:db:ea:23:9c:55:e8:bd:87:4c: f3:8d:25:ef:3b:2e:44:e5:e4:7d:ac:de:5a:fb:62: 5c:4c:dc:1e:e1:a1:83:f4:4b:13:f7:17:d9:c1:29: b4:f1:14:d4:f8:ed:b2:f3:48:53:42:f4:f5:6e:1c: 0d:eb:37:99:d1:90:7f:5d:3d:c7:7f:3e:42:ea:54: c8:cb:58:96:5f:48:40:d0:6a:7e:92:68:f7:42:b9: 28:06:f2:11:aa:be:a7:4b:8f:5e:fa:3f:b5:de:67: 66:68:4a:4b:26:48:87:15:ff:17:51:b3:e1:aa:dc: 11:60:8e:9c:90:e5:ce:74:9c:29:7d:33:0f:73:1a: 00:84:08:52:1e:bd:9f:1b:d0:15:96:16:9e:86:4e: 0d:b4:49:ed:3e:57:82:c9:91:ba:92:71:da:59:03: 12:d0:15:f4:a0:8b:b2:8f:c1:3c:6b:4b:c1:c3:b7: c8:9f:bb:c4:4c:37:09:48:83:30:a5:20:f8:09:b2: 3e:54:e4:9c:f3:ee:c1:4d:46:90:45:1a:b1:06:ee: 09:73:c2:4b:0c:ce:1d:23:8d:9c:a0:6d:f4:2c:5c: b3:61:39:d2:be:31:94:c7:18:1d:57:69:0f:e8:bd: d7:53:d6:4a:1f:02:c1:c3:85:d3:10:22:cb:5c:e2: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D9:25:04:E6:28:ED:BA:14:A4:3E:1D:21:A1:7F:51:3B:BB:DB:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7dab097b-2aa3-3c91-a1b1-1a94a9419fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9d:4a:21:39:3e:91:40:56:f6:a4:0b:45:a1:b1:6a:9b:69: d8:f5:8d:74:6d:23:c1:a5:a0:2d:e6:7a:6d:29:f6:76:73:4c: ee:4e:87:fb:99:3b:ed:fd:68:16:d3:89:d9:9d:e1:4f:84:4b: 40:55:04:61:62:a3:bf:26:88:e6:cb:c1:2b:87:67:97:c7:c6: 73:66:69:67:e9:51:86:fe:2a:d3:90:00:d2:a2:61:38:d0:4c: 82:a2:09:5d:2d:63:12:22:04:07:ba:8a:46:85:6a:be:d3:3b: 6f:b7:fe:88:e7:56:58:71:80:22:d2:8e:a4:74:ec:d3:99:81: dd:cd:98:98:7a:ed:48:6f:32:6f:74:1f:32:26:92:c0:5c:6a: 78:f4:7c:54:60:bf:f6:f9:26:04:86:fb:e9:98:fa:e3:b6:cf: cf:d5:10:71:b1:28:3e:71:be:f4:06:31:6a:da:f9:7b:84:53: 7c:71:5e:17:57:48:9d:dd:3d:ae:71:82:35:6f:ee:0a:98:e1: 2b:b9:ad:ba:4f:fa:47:67:6e:de:9b:a5:4a:18:92:89:d9:a7: 7c:08:44:53:77:61:5c:82:99:6d:ce:37:41:19:22:92:e9:31: b1:73:13:c4:25:39:7f:f7:d0:78:99:48:30:9d:f9:d2:2a:98: 61:46:b2:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPYTTnbWNsxyyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MjU0MDQ4Y2MtMjY0YS00MGU3LWE3OGEtM2M1ZGU5YTQyMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q9tOYDb6iOcVei9h0zzjSXvOy5E5eR9rN5a +2JcTNwe4aGD9EsT9xfZwSm08RTU+O2y80hTQvT1bhwN6zeZ0ZB/XT3Hfz5C6lTI y1iWX0hA0Gp+kmj3QrkoBvIRqr6nS49e+j+13mdmaEpLJkiHFf8XUbPhqtwRYI6c kOXOdJwpfTMPcxoAhAhSHr2fG9AVlhaehk4NtEntPleCyZG6knHaWQMS0BX0oIuy j8E8a0vBw7fIn7vETDcJSIMwpSD4CbI+VOSc8+7BTUaQRRqxBu4Jc8JLDM4dI42c oG30LFyzYTnSvjGUxxgdV2kP6L3XU9ZKHwLBw4XTECLLXOL7OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzZJQTmKO26FKQ+HSGhf1E7u9sJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2RhYjA5N2ItMmFhMy0z YzkxLWExYjEtMWE5NGE5NDE5ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEadSiE5PpFAVvakC0WhsWqbadj1jXRtI8GloC3mem0p9nZzTO5Oh/uZ O+39aBbTidmd4U+ES0BVBGFio78miObLwSuHZ5fHxnNmaWfpUYb+KtOQANKiYTjQ TIKiCV0tYxIiBAe6ikaFar7TO2+3/ojnVlhxgCLSjqR07NOZgd3NmJh67UhvMm90 HzImksBcanj0fFRgv/b5JgSG++mY+uO2z8/VEHGxKD5xvvQGMWra+XuEU3xxXhdX SJ3dPa5xgjVv7gqY4Su5rbpP+kdnbt6bpUoYkonZp3wIRFN3YVyCmW3ON0EZIpLp MbFzE8QlOX/30HiZSDCd+dIqmGFGspc= -----END CERTIFICATE-----Generated at Mon Aug 4 15:28:54 2025 by rpki-client