$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa File: a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa (raw, json) Hash identifier: avu6Ctf+vBStIHAACPazJo7J9IpAUJDFLi6L0uHaumc= Subject key identifier: 4D:3C:0F:E7:09:B7:5F:83:D7:86:CF:A6:DA:54:42:E4:F8:65:1C:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F6FF1A2B40C94189F680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.251.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f6:ff:1a:2b:40:c9:41:89:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=73c05925-54a2-47b9-8ae2-beed3512cdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:9f:f4:09:da:7c:1f:0e:85:db:3f:d6:6e: c6:98:62:0c:c3:5f:6a:ed:50:a9:82:0c:34:1b:95: a6:96:c1:e0:a7:83:a3:16:e4:db:32:81:d4:c9:97: ca:df:5c:1e:aa:41:14:60:8a:da:67:8b:56:0e:b0: b9:fb:78:dc:a0:39:f2:29:29:73:fa:c6:2e:cb:e6: 1f:81:74:e3:78:05:87:68:41:da:68:3e:fa:2f:cd: c6:94:35:ec:82:98:bf:99:68:9c:7d:3d:84:fe:96: 23:9a:48:c4:cc:9c:00:1f:8f:ba:1b:2c:87:8d:e8: 9e:6a:a6:11:27:7d:c5:69:eb:e0:fc:53:79:27:49: 0b:eb:e3:4e:99:6e:79:84:2a:ca:19:77:6d:79:58: 06:79:2c:dd:60:3d:79:73:c8:dc:a8:9f:77:df:d9: 5f:67:b5:94:13:4f:ba:d8:c2:91:8d:68:b6:71:b3: 4d:95:f8:26:46:6f:19:52:ed:bb:06:ba:cc:72:7a: e9:8f:2e:26:f9:eb:45:02:11:7c:a0:3e:b7:61:c6: ec:63:41:7a:0b:4d:f8:0d:35:83:84:83:cc:21:18: 82:ec:eb:e8:f2:2f:0a:22:84:22:0f:61:c9:05:cb: bc:09:d0:f2:bd:f1:25:ba:ce:da:44:86:c2:8d:cc: c5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3C:0F:E7:09:B7:5F:83:D7:86:CF:A6:DA:54:42:E4:F8:65:1C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c2:e9:74:c7:a3:73:b4:e7:6f:da:11:fe:e5:21:c7:f8:04: 9e:0f:64:b3:74:eb:d1:ca:5a:f6:57:66:ca:89:15:1d:24:ec: 53:f5:2f:a0:1b:64:67:ff:bc:9a:68:17:2c:74:e9:e3:12:61: f2:d2:6c:34:58:6b:6a:f8:04:99:9e:ce:33:46:a2:ec:fc:98: 13:c4:79:67:02:5c:fa:7d:b3:cc:89:3d:c3:7e:c7:4b:9b:32: 16:ab:e2:27:fb:5a:e8:7b:c8:06:19:3f:35:39:90:99:59:04: ba:9b:40:bc:e4:43:00:96:62:e1:0c:1c:a3:20:73:d4:f6:cf: 87:d4:5c:5e:f6:f6:eb:40:77:8b:56:01:28:93:cd:32:45:5b: 74:ea:4d:e3:bc:6d:75:82:3c:62:7a:93:21:f5:e4:e2:0b:2e: d6:c4:f1:2b:ba:07:48:e5:36:cc:99:b6:d9:b3:1d:84:25:e2: 4d:42:28:7e:32:e1:cb:4c:74:4d:b5:31:b0:05:41:a9:a8:4a: 25:95:5b:89:a1:44:0c:d8:7c:53:cf:72:d6:ac:92:1b:d4:dc: 56:9a:32:3b:bc:45:fb:3d:33:59:4c:78:01:b9:0f:b9:53:c1: 20:33:e2:e3:9d:13:d5:a1:f7:15:2d:01:6b:4b:4d:ae:0a:d8: 84:2e:9c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPb/GitAyUGJ9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NzNjMDU5MjUtNTRhMi00N2I5LThhZTItYmVlZDM1MTJjZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwif9AnafB8Ohds/1m7GmGIMw19q7VCpggw0 G5WmlsHgp4OjFuTbMoHUyZfK31weqkEUYIraZ4tWDrC5+3jcoDnyKSlz+sYuy+Yf gXTjeAWHaEHaaD76L83GlDXsgpi/mWicfT2E/pYjmkjEzJwAH4+6GyyHjeieaqYR J33Faevg/FN5J0kL6+NOmW55hCrKGXdteVgGeSzdYD15c8jcqJ9339lfZ7WUE0+6 2MKRjWi2cbNNlfgmRm8ZUu27BrrMcnrpjy4m+etFAhF8oD63YcbsY0F6C034DTWD hIPMIRiC7Ovo8i8KIoQiD2HJBcu8CdDyvfElus7aRIbCjczFqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE08D+cJt1+D14bPptpUQuT4ZRxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTU4MjNhMTYtYTBjOS0z ZDc5LWJhYzAtNTMwMDk5YmI1YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvthMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErC6XTHo3O052/aEf7lIcf4BJ4PZLN069HKWvZXZsqJFR0k7FP1L6Ab ZGf/vJpoFyx06eMSYfLSbDRYa2r4BJmezjNGouz8mBPEeWcCXPp9s8yJPcN+x0ub Mhar4if7Wuh7yAYZPzU5kJlZBLqbQLzkQwCWYuEMHKMgc9T2z4fUXF729utAd4tW ASiTzTJFW3TqTeO8bXWCPGJ6kyH15OILLtbE8Su6B0jlNsyZttmzHYQl4k1CKH4y 4ctMdE21MbAFQamoSiWVW4mhRAzYfFPPctaskhvU3FaaMju8Rfs9M1lMeAG5D7lT wSAz4uOdE9Wh9xUtAWtLTa4K2IQunGo= -----END CERTIFICATE-----Generated at Mon Aug 4 14:20:53 2025 by rpki-client