$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa File: a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa (raw, json) Hash identifier: DX3p3Vb5UrITXxFHtIEyU1NMjtW5Xpv/jjeDVFFhNlI= Subject key identifier: 86:A2:C3:9E:E5:42:41:4E:AE:E6:D5:AC:AA:EE:DA:28:BA:F8:0F:5A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411929E3576C4C04570B2E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:92:9e:35:76:c4:c0:45:70:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=52e43a1e-cb7c-479b-a3a0-70406ddd5c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:44:c2:59:2b:5c:40:54:d8:37:81:c3:bf: 59:70:36:f3:c6:75:29:17:49:54:8a:d5:26:5c:3c: 8f:1f:c5:f0:5e:51:99:e2:69:e8:99:f7:b0:59:03: 48:d8:11:d2:79:39:77:fe:06:2d:57:7f:b8:65:51: 02:77:3c:16:ac:17:7a:d0:8d:c8:a8:91:ce:03:b6: f2:09:8d:44:ff:15:9f:7f:13:74:f0:30:8d:2f:2f: 26:b2:7b:e6:d1:8a:77:19:ad:b0:1d:a8:6a:46:d1: ef:6d:f3:ba:af:2f:b5:60:41:ef:42:d2:bb:96:ee: 93:19:2f:cb:6e:84:46:8c:6b:74:88:0c:aa:86:0f: d5:5a:31:6e:17:73:b7:54:60:d6:35:a2:25:b7:32: 6b:96:84:28:c7:b0:16:98:70:25:cb:31:97:7c:1d: ed:76:47:c0:5f:db:1f:ca:73:a1:ec:5b:0c:8b:92: 1f:a5:71:41:da:67:b5:a7:77:1e:4d:99:b4:e9:cb: 31:8b:c0:35:ae:72:7b:37:93:61:fa:4c:50:26:3d: e9:c9:9f:1c:f1:2d:52:16:a2:47:e9:c3:29:23:ae: a2:fa:9e:13:a0:f8:9b:57:33:aa:21:ad:fd:62:0f: 3e:57:d6:e5:7d:c3:11:ed:99:74:8e:a8:03:43:bf: 89:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A2:C3:9E:E5:42:41:4E:AE:E6:D5:AC:AA:EE:DA:28:BA:F8:0F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1a:96:eb:e2:1e:01:28:2f:6c:c6:eb:59:28:0a:13:de:70: 01:3a:2a:9f:0d:e6:a3:ed:1e:5c:73:3e:de:a6:0f:93:14:ce: 2e:3b:39:aa:f1:7e:32:27:b1:6e:2f:f3:0d:99:69:18:ba:1d: 87:45:39:dc:02:22:c2:e4:2e:7a:30:ed:f1:98:3c:cc:6f:c0: 2c:98:e1:3b:3c:79:23:de:71:f7:59:5c:f8:c9:1c:62:7d:41: a5:c0:cf:ef:99:43:d5:b0:15:ef:a8:e3:b0:b0:f7:6a:d7:38: 4e:e5:c1:54:e4:ba:a4:e0:1f:7e:eb:37:b2:c2:b5:f6:35:25: 2f:22:d7:55:5b:0c:b5:91:c7:d6:e8:49:a7:aa:da:35:57:ba: 5d:4f:76:b8:75:22:7f:1d:cf:93:71:6b:18:28:63:11:f9:91: 2f:0a:25:ec:cd:e8:2f:9b:6b:66:08:34:36:7b:53:86:b5:3b: 55:9f:fa:4c:7c:34:57:df:51:1a:08:61:9e:b2:b2:bc:57:b1: f8:83:6f:04:5f:ad:b4:5e:62:08:cb:49:5f:56:e2:84:b6:b6: 9f:41:a4:8d:c1:b2:93:37:bb:ae:72:61:d1:94:e9:f5:68:85: a1:b4:03:fe:85:31:f8:33:fd:cd:22:a4:50:d8:eb:84:83:87: 47:a8:df:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZKeNXbEwEVwsuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTJlNDNhMWUtY2I3Yy00NzliLWEzYTAtNzA0MDZkZGQ1YzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowdEwlkrXEBU2DeBw79ZcDbzxnUpF0lUitUm XDyPH8XwXlGZ4mnomfewWQNI2BHSeTl3/gYtV3+4ZVECdzwWrBd60I3IqJHOA7by CY1E/xWffxN08DCNLy8msnvm0Yp3Ga2wHahqRtHvbfO6ry+1YEHvQtK7lu6TGS/L boRGjGt0iAyqhg/VWjFuF3O3VGDWNaIltzJrloQox7AWmHAlyzGXfB3tdkfAX9sf ynOh7FsMi5IfpXFB2me1p3ceTZm06csxi8A1rnJ7N5Nh+kxQJj3pyZ8c8S1SFqJH 6cMpI66i+p4ToPibVzOqIa39Yg8+V9blfcMR7Zl0jqgDQ7+JJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaiw57lQkFOrubVrKru2ii6+A9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTU0ZjNmN2ItMzVjYy0z NTkyLTliOGItZjc5NjNiYTcwOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0aluviHgEoL2zG61koChPecAE6Kp8N5qPtHlxzPt6mD5MUzi47Oarx fjInsW4v8w2ZaRi6HYdFOdwCIsLkLnow7fGYPMxvwCyY4Ts8eSPecfdZXPjJHGJ9 QaXAz++ZQ9WwFe+o47Cw92rXOE7lwVTkuqTgH37rN7LCtfY1JS8i11VbDLWRx9bo Saeq2jVXul1Pdrh1In8dz5NxaxgoYxH5kS8KJezN6C+ba2YINDZ7U4a1O1Wf+kx8 NFffURoIYZ6ysrxXsfiDbwRfrbReYgjLSV9W4oS2tp9BpI3BspM3u65yYdGU6fVo haG0A/6FMfgz/c0ipFDY64SDh0eo36Q= -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:26 2025 by rpki-client