$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90b76b3a-599e-3e1e-a671-858d85a1beaa.roa File: 90b76b3a-599e-3e1e-a671-858d85a1beaa.roa (raw, json) Hash identifier: Q7z9b06ZOpTkudzlOdmajvueZ/LFVzFL3gnQlX6rFZ8= Subject key identifier: 5B:97:4F:59:6F:B7:7F:3F:4A:3F:4E:62:94:80:E2:5F:B9:F0:46:1D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F9BAF5C912CAE98AEE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90b76b3a-599e-3e1e-a671-858d85a1beaa.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.251.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f9:ba:f5:c9:12:ca:e9:8a:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=1462a2ed-b595-424c-8db2-8e39d0fb6f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4c:36:b3:b8:62:ee:fc:ae:a8:ed:dc:ba:83: d2:36:5c:9b:d3:11:19:75:f1:64:68:5e:cf:91:f6: 7f:c2:c4:4f:ac:3f:df:59:49:ff:88:ce:f7:10:53: b4:44:2a:93:45:77:a0:4b:ae:78:08:ea:57:32:81: 24:e9:3e:97:27:a4:5d:a7:26:e3:20:69:e0:55:97: 78:59:6b:53:1b:4f:3f:ce:95:5a:2c:a7:ca:70:8e: 0c:69:46:8d:3d:47:06:68:25:0b:25:65:8f:c2:7e: 9a:50:d6:24:d7:3b:8e:47:3a:50:8b:94:60:a8:1d: 35:6d:cc:bc:8f:d5:32:7c:71:8b:2e:9f:0a:c9:4b: 79:1e:8a:e4:ff:2e:52:14:ba:bf:21:34:37:49:b6: f8:3d:24:74:d7:76:5b:1c:05:ff:32:99:7f:ab:94: 18:46:17:2e:1e:d2:0d:57:1f:12:db:32:5a:9a:01: fc:5a:e4:50:fd:83:4e:4d:a0:1f:90:b1:a7:f0:e5: 4a:42:3c:25:7f:94:8a:23:2e:92:45:e0:70:d7:3e: 9e:48:81:03:6e:6c:09:fb:19:7c:30:26:a2:eb:c6: a3:69:8e:1f:d6:9b:9b:20:3e:af:55:d0:fd:ae:81: ac:7b:de:ba:ed:d2:47:a3:f1:61:af:8d:84:a2:73: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:97:4F:59:6F:B7:7F:3F:4A:3F:4E:62:94:80:E2:5F:B9:F0:46:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90b76b3a-599e-3e1e-a671-858d85a1beaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:df:94:78:e2:63:2a:c2:88:15:97:70:80:ba:81:11:8c:33: 17:25:a8:ce:47:1e:1f:cf:52:92:af:7d:ea:78:b1:0e:13:db: dd:3d:48:ca:eb:8e:45:87:53:5e:70:e5:02:f9:8e:6f:d5:56: 87:12:6e:51:3c:9f:28:27:c9:26:7f:c7:2c:ce:14:85:af:4b: b4:ff:f7:ad:07:7c:c0:54:9d:55:1f:82:97:a4:7b:71:24:31: 3d:06:e5:c4:06:6d:5d:4f:6a:2f:ac:eb:85:f0:8e:b0:56:21: fa:e1:cc:e4:4a:63:27:20:1f:0c:f4:1d:f7:0c:44:da:84:2d: e9:2f:a7:12:f0:5b:ca:16:67:17:ad:53:33:14:84:c8:76:2c: bc:87:08:e2:7e:c6:80:f3:36:2b:3a:85:1a:60:c9:8d:da:79: ff:3a:9a:1f:3e:22:fe:66:c7:88:58:e5:00:1c:9e:0c:df:42: 4c:04:6f:f7:6d:4e:90:17:87:39:ce:3d:8b:73:0c:f2:62:8e: be:84:5e:09:37:4b:2f:ba:aa:aa:f8:db:50:3c:45:4b:4a:d0: a7:ae:26:fc:29:1a:75:5b:80:6d:b1:fe:d0:09:a5:59:51:2e: 4d:2d:a3:98:36:f5:52:83:11:85:d8:fd:ed:02:ab:ec:17:86: 32:68:83:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPm69ckSyumK7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MTQ2MmEyZWQtYjU5NS00MjRjLThkYjItOGUzOWQwZmI2ZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEw2s7hi7vyuqO3cuoPSNlyb0xEZdfFkaF7P kfZ/wsRPrD/fWUn/iM73EFO0RCqTRXegS654COpXMoEk6T6XJ6RdpybjIGngVZd4 WWtTG08/zpVaLKfKcI4MaUaNPUcGaCULJWWPwn6aUNYk1zuORzpQi5RgqB01bcy8 j9UyfHGLLp8KyUt5Hork/y5SFLq/ITQ3Sbb4PSR013ZbHAX/Mpl/q5QYRhcuHtIN Vx8S2zJamgH8WuRQ/YNOTaAfkLGn8OVKQjwlf5SKIy6SReBw1z6eSIEDbmwJ+xl8 MCai68ajaY4f1pubID6vVdD9roGse9667dJHo/Fhr42EonM4QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuXT1lvt38/Sj9OYpSA4l+58EYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTBiNzZiM2EtNTk5ZS0z ZTFlLWE2NzEtODU4ZDg1YTFiZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDflHjiYyrCiBWXcIC6gRGMMxclqM5HHh/PUpKvfep4sQ4T2909SMrr jkWHU15w5QL5jm/VVocSblE8nygnySZ/xyzOFIWvS7T/960HfMBUnVUfgpeke3Ek MT0G5cQGbV1Pai+s64XwjrBWIfrhzORKYycgHwz0HfcMRNqELekvpxLwW8oWZxet UzMUhMh2LLyHCOJ+xoDzNis6hRpgyY3aef86mh8+Iv5mx4hY5QAcngzfQkwEb/dt TpAXhznOPYtzDPJijr6EXgk3Sy+6qqr421A8RUtK0KeuJvwpGnVbgG2x/tAJpVlR Lk0to5g29VKDEYXY/e0Cq+wXhjJog+A= -----END CERTIFICATE-----Generated at Mon Aug 4 14:19:21 2025 by rpki-client