$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7dab097b-2aa3-3c91-a1b1-1a94a9419fc2.roa File: 7dab097b-2aa3-3c91-a1b1-1a94a9419fc2.roa (raw, json) Hash identifier: iHREaTNYC/g86nxSXE9cwHvm+baSfqWXtt1w3tjm9pQ= Subject key identifier: 88:C7:C6:13:05:0C:2B:46:C4:23:D6:7C:4D:82:3B:31:C1:8E:E7:39 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA34A630A70B3321A6A380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7dab097b-2aa3-3c91-a1b1-1a94a9419fc2.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:34:a6:30:a7:0b:33:21:a6:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=c3a2ab3f-b74e-4479-bb45-b39b44595045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:55:e6:0a:9e:04:db:69:84:34:a2:02:5a: 5e:e9:f4:89:0c:35:87:30:b0:aa:05:56:1f:a8:24: 74:86:85:86:4c:3d:e1:e6:ea:40:23:6f:f1:0a:ec: 4b:a4:52:45:6e:2f:6a:fa:98:66:60:61:bf:2e:48: ba:0e:1a:0b:0c:10:bc:84:fd:5f:63:c4:85:25:e3: 60:87:9e:21:c7:f9:44:49:24:53:fc:ab:18:7d:d5: d7:8c:56:36:6f:f9:a8:8b:43:9b:51:70:20:e1:fc: cb:50:6c:9b:57:1b:a3:e4:87:b5:2c:81:81:b5:0d: 14:b2:a2:04:0b:c8:b1:4c:58:5d:e4:b2:7c:b8:3f: d4:18:c2:0a:c3:39:81:c3:7c:4f:6d:e4:fd:fc:0f: 2a:37:3d:da:ed:b0:4e:9a:b5:fa:2e:ab:16:7a:9e: ac:e2:9f:a0:16:fe:5a:6e:4e:b1:a9:31:ad:ff:11: cc:68:74:aa:7c:81:f8:af:7f:2f:67:ad:ad:ec:30: 4b:1f:e2:26:55:e4:b7:78:f9:ce:6c:2c:f4:28:68: e2:ca:78:45:93:2d:3f:64:fd:8e:3e:84:ec:7f:11: 80:6f:3d:12:af:19:34:d9:cf:72:9f:c1:f2:16:ba: ce:11:a9:ba:ee:cd:d3:9a:78:d3:37:2f:a3:44:48: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C7:C6:13:05:0C:2B:46:C4:23:D6:7C:4D:82:3B:31:C1:8E:E7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7dab097b-2aa3-3c91-a1b1-1a94a9419fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:df:5b:60:47:d5:d4:b3:7c:f5:49:64:27:92:98:2d:4d:ad: f8:36:02:34:80:a1:55:ec:6e:fd:7a:78:55:e8:97:53:44:2f: f6:7b:0d:d4:1b:91:e6:db:7c:4a:a3:53:b2:19:5c:2a:c8:7c: f9:66:f7:2b:9a:9f:53:91:7f:62:0d:8e:d2:ae:55:1e:38:2a: 2d:d6:5b:5f:92:d5:8c:9a:a4:c0:99:cc:23:08:b4:a0:e9:b7: b7:4a:70:a6:f7:47:cd:2f:57:f8:46:0f:0d:bb:50:b4:a8:aa: c1:91:37:36:78:73:ae:85:76:01:c5:8d:60:29:5d:7d:3b:25: f7:a4:d7:89:c9:e9:4d:23:ef:9e:9b:6b:cf:ad:3b:ce:97:a2: 71:ba:ce:38:7a:cb:fd:a4:42:3f:11:55:bf:17:b7:47:94:5c: 8f:d1:f7:0e:19:19:09:bd:c0:82:92:1a:6d:59:03:43:eb:54: 89:b9:4b:c4:c2:53:f3:20:87:59:0b:05:3b:bc:eb:70:75:30: 8b:78:2d:44:dd:a7:99:a5:3c:ef:f9:7e:f8:e5:6d:b0:ba:e2: d4:c9:b7:dc:e9:b9:b4:ef:24:d9:d7:f4:96:43:9c:84:3c:dd: 73:56:2c:bf:e4:58:cb:af:c7:f9:79:69:14:07:cf:40:9a:36: a9:8d:76:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jSmMKcLMyGmo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YzNhMmFiM2YtYjc0ZS00NDc5LWJiNDUtYjM5YjQ0NTk1MDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gxV5gqeBNtphDSiAlpe6fSJDDWHMLCqBVYf qCR0hoWGTD3h5upAI2/xCuxLpFJFbi9q+phmYGG/Lki6DhoLDBC8hP1fY8SFJeNg h54hx/lESSRT/KsYfdXXjFY2b/moi0ObUXAg4fzLUGybVxuj5Ie1LIGBtQ0UsqIE C8ixTFhd5LJ8uD/UGMIKwzmBw3xPbeT9/A8qNz3a7bBOmrX6LqsWep6s4p+gFv5a bk6xqTGt/xHMaHSqfIH4r38vZ62t7DBLH+ImVeS3ePnObCz0KGjiynhFky0/ZP2O PoTsfxGAbz0Srxk02c9yn8HyFrrOEam67s3TmnjTNy+jREiEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjHxhMFDCtGxCPWfE2COzHBjuc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2RhYjA5N2ItMmFhMy0z YzkxLWExYjEtMWE5NGE5NDE5ZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzfW2BH1dSzfPVJZCeSmC1Nrfg2AjSAoVXsbv16eFXol1NEL/Z7DdQb kebbfEqjU7IZXCrIfPlm9yuan1ORf2INjtKuVR44Ki3WW1+S1YyapMCZzCMItKDp t7dKcKb3R80vV/hGDw27ULSoqsGRNzZ4c66FdgHFjWApXX07Jfek14nJ6U0j756b a8+tO86XonG6zjh6y/2kQj8RVb8Xt0eUXI/R9w4ZGQm9wIKSGm1ZA0PrVIm5S8TC U/Mgh1kLBTu863B1MIt4LUTdp5mlPO/5fvjlbbC64tTJt9zpubTvJNnX9JZDnIQ8 3XNWLL/kWMuvx/l5aRQHz0CaNqmNdmo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:16:09 2025 by rpki-client