$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa File: a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa (raw, json) Hash identifier: h0GLvm8EmSMsRYxh3ASlwAj6ZhEVB1ccI6qdcR+1m1Y= Subject key identifier: 10:85:76:B9:08:54:71:14:65:F0:5E:0A:0D:EA:3E:A0:0E:9E:1E:9B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841230767651BF8D5681D480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:30:76:76:51:bf:8d:56:81:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=508c66a8-9d81-45e1-8a57-8c027de10d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fa:2a:bf:e0:a7:2c:d4:79:fb:3c:a7:6c:fc: d4:1b:8e:4c:6b:38:99:80:3f:9f:0f:c6:5d:f4:ad: 67:84:cd:d5:fa:ed:96:cd:97:3f:6d:35:8f:93:7c: f4:81:66:d7:3b:9b:03:fe:5a:52:b7:5d:1f:09:ce: ef:c6:3a:99:82:bb:6e:c4:ba:e6:31:4d:a9:b2:0d: 5f:fd:57:79:d0:07:f7:56:8b:01:6d:5a:3f:e1:ee: ce:10:70:fb:5b:19:47:92:52:17:aa:ad:72:63:40: 42:56:50:c5:56:ce:51:f8:f2:06:3e:a2:08:df:5c: be:59:98:ba:a8:4f:b6:8f:22:f8:42:a6:00:84:ab: a1:ee:76:19:81:d5:42:e5:73:ac:12:3f:19:ae:d8: b5:3a:6b:ee:1c:29:16:d1:69:19:98:cd:72:89:d3: d6:be:8b:59:36:77:7a:18:28:5d:0b:1c:e4:09:fe: 9a:11:36:ab:6f:58:40:cb:30:a5:4c:14:9e:14:c8: dc:65:ca:6c:f5:26:26:85:96:59:62:24:8c:f6:d4: 56:55:10:95:8d:3d:34:14:27:76:bd:6e:ea:2a:75: b6:87:09:15:0f:40:da:1d:84:cd:d4:3f:8b:98:ab: c3:83:49:82:9a:4e:fd:5c:58:77:ec:61:1b:d7:05: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:85:76:B9:08:54:71:14:65:F0:5E:0A:0D:EA:3E:A0:0E:9E:1E:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a09e4db4-7d2b-3bd8-a369-11b4d1714a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:22:da:1f:66:2e:36:57:21:fb:64:2f:22:31:99:db:db:dc: be:ae:80:f1:0e:2c:90:8b:f4:2d:50:ab:16:70:29:9e:d7:5a: 30:b5:29:16:92:73:51:7d:64:4f:56:79:27:71:fe:ac:a3:b0: c4:bb:43:b6:9a:2e:2e:be:72:c6:eb:dd:d6:f4:0b:87:74:fb: 01:f5:e5:96:c5:8c:e4:76:3d:29:f5:be:2f:58:7a:69:a4:44: 3b:8d:b2:36:eb:38:da:f7:4a:c0:40:29:45:9b:c1:a7:65:0e: b7:50:3d:5f:24:ad:95:43:5f:79:a0:d6:4e:30:c5:c1:b2:d8: 46:44:c0:b2:f4:77:5c:0b:79:4f:85:5e:d4:15:2e:cd:1a:9a: d8:39:eb:28:ee:b6:a2:95:3f:b2:bd:34:f8:1d:f2:97:44:6a: 6d:34:a1:62:40:2a:e2:79:b2:9e:1c:6c:92:1f:6f:d4:26:fa: 90:6e:fb:73:c2:c9:07:15:60:0a:45:78:c2:53:14:e3:10:da: b4:37:2c:47:b1:57:b1:34:57:63:fe:6c:f2:a5:a9:48:3d:11: d7:e2:1c:7a:b4:1c:55:60:ab:ff:61:2e:fe:63:2a:9f:11:8d: 83:3a:f5:06:a1:01:6b:42:26:40:f8:c6:b3:39:0f:da:11:26: b7:e6:cc:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjB2dlG/jVaB1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTA4YzY2YTgtOWQ4MS00NWUxLThhNTctOGMwMjdkZTEwZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPoqv+CnLNR5+zynbPzUG45MaziZgD+fD8Zd 9K1nhM3V+u2WzZc/bTWPk3z0gWbXO5sD/lpSt10fCc7vxjqZgrtuxLrmMU2psg1f /Vd50Af3VosBbVo/4e7OEHD7WxlHklIXqq1yY0BCVlDFVs5R+PIGPqII31y+WZi6 qE+2jyL4QqYAhKuh7nYZgdVC5XOsEj8Zrti1OmvuHCkW0WkZmM1yidPWvotZNnd6 GChdCxzkCf6aETarb1hAyzClTBSeFMjcZcps9SYmhZZZYiSM9tRWVRCVjT00FCd2 vW7qKnW2hwkVD0DaHYTN1D+LmKvDg0mCmk79XFh37GEb1wUg/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCFdrkIVHEUZfBeCg3qPqAOnh6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA5ZTRkYjQtN2QyYi0z YmQ4LWEzNjktMTFiNGQxNzE0YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYi2h9mLjZXIftkLyIxmdvb3L6ugPEOLJCL9C1QqxZwKZ7XWjC1KRaS c1F9ZE9WeSdx/qyjsMS7Q7aaLi6+csbr3db0C4d0+wH15ZbFjOR2PSn1vi9Yemmk RDuNsjbrONr3SsBAKUWbwadlDrdQPV8krZVDX3mg1k4wxcGy2EZEwLL0d1wLeU+F XtQVLs0amtg56yjutqKVP7K9NPgd8pdEam00oWJAKuJ5sp4cbJIfb9Qm+pBu+3PC yQcVYApFeMJTFOMQ2rQ3LEexV7E0V2P+bPKlqUg9EdfiHHq0HFVgq/9hLv5jKp8R jYM69QahAWtCJkD4xrM5D9oRJrfmzPI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:41:16 2025 by rpki-client