$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa File: a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa (raw, json) Hash identifier: kzM7DMp1u8jHpT6clWMuSWxjBQI0q+xFmtJXDNLiZUQ= Subject key identifier: FC:7E:34:78:0E:8E:8C:2E:AB:CE:C9:A1:80:66:5C:2C:F0:AE:1E:C8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30EF930ADCBC6E872E0340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.251.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:ef:93:0a:dc:bc:6e:87:2e:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=50f1cbe0-81c1-4e11-97d1-602c3d223a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:63:8f:c7:ae:ed:52:c8:f7:3f:52:6e:ae:42: 1b:b3:22:56:f2:99:04:a7:55:41:ac:31:84:b4:73: 2a:59:8d:10:51:17:ce:c8:a0:ad:86:31:c3:74:ed: 6d:4d:77:d5:7d:7b:5a:7b:bf:b5:d1:e5:a6:d2:a4: f8:16:93:ce:41:7a:81:e4:b4:e4:a8:89:a0:9c:eb: b8:a9:0c:a3:38:77:4e:29:59:95:e6:99:42:c3:7b: 48:cd:db:40:ec:04:a0:fa:55:85:c7:ed:ba:63:9e: 60:b7:9e:d5:b1:6f:8a:5b:69:84:5e:7a:39:a1:4a: 8d:bf:fe:5c:1b:56:77:03:09:64:86:73:e4:bc:33: 3d:05:94:21:43:20:47:a6:1d:22:8b:79:07:c5:78: e9:88:73:e5:7a:7a:c6:bd:3a:1d:11:47:8c:f5:ff: 22:ee:4b:0f:f5:d9:6c:79:bc:9d:83:c4:6b:7b:4f: 4e:68:ad:d2:68:4d:84:0f:47:fb:d2:47:92:c1:6c: 3a:ce:3f:ca:83:9b:58:56:b0:0f:69:1d:a8:42:9f: 13:30:83:1d:1f:12:16:5e:fd:f9:0f:ef:06:66:a3: ee:4f:37:75:be:aa:33:0b:d1:3c:b1:30:29:8a:bc: 96:a5:6d:a7:a2:a1:9a:eb:8d:f3:25:d9:72:52:f9: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7E:34:78:0E:8E:8C:2E:AB:CE:C9:A1:80:66:5C:2C:F0:AE:1E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ca:36:4f:10:a6:c2:0b:80:a4:3f:b2:a7:16:32:39:63:cf: 45:36:8b:e2:e3:4a:63:ec:bb:ba:2a:bf:86:49:fd:d0:f0:4d: 34:01:60:dd:2a:e6:3e:8a:02:c7:26:1b:88:c9:50:43:d4:b6: fc:83:34:fc:16:3c:c5:92:cc:42:93:7e:68:36:41:bd:94:ea: 2e:7d:c9:98:b6:b5:15:57:c0:a8:40:ec:b6:a2:cb:38:19:df: 9d:98:f4:22:1b:11:e8:0e:bd:96:d9:9f:b1:0d:12:0a:f4:e5: da:17:59:f0:3f:4a:4a:24:ed:4d:0f:97:b6:3f:d8:75:22:ad: 62:e6:ac:da:e7:75:34:cc:17:77:0f:9d:26:4f:d9:a4:a3:ca: c2:5a:58:a8:b3:f7:1c:8c:07:2d:29:d2:5f:0b:2f:75:93:dc: eb:b9:b3:ee:93:70:60:c8:68:02:88:6a:6f:92:4d:2e:2c:12: 9d:b8:0a:37:81:d4:de:24:c6:ea:8c:f0:d4:fd:ab:61:9a:54: 29:da:ae:b6:60:4e:76:88:a1:ab:d1:d6:f0:c1:ea:e1:aa:25: e0:e5:b6:e3:ed:e7:d4:c3:e1:7c:53:f3:89:b0:e7:d9:b7:00: ec:f9:32:a2:d8:f4:d6:fa:22:6f:38:9a:52:eb:c3:e8:b8:65: dd:b2:6f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMO+TCty8bocuA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NTBmMWNiZTAtODFjMS00ZTExLTk3ZDEtNjAyYzNkMjIzYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGOPx67tUsj3P1JurkIbsyJW8pkEp1VBrDGE tHMqWY0QURfOyKCthjHDdO1tTXfVfXtae7+10eWm0qT4FpPOQXqB5LTkqImgnOu4 qQyjOHdOKVmV5plCw3tIzdtA7ASg+lWFx+26Y55gt57VsW+KW2mEXno5oUqNv/5c G1Z3AwlkhnPkvDM9BZQhQyBHph0ii3kHxXjpiHPlenrGvTodEUeM9f8i7ksP9dls ebydg8Rre09OaK3SaE2ED0f70keSwWw6zj/Kg5tYVrAPaR2oQp8TMIMdHxIWXv35 D+8GZqPuTzd1vqozC9E8sTApiryWpW2noqGa643zJdlyUvnbawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPx+NHgOjowuq87JoYBmXCzwrh7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYThkNjVhZTEtODYyMi0z ZjlhLTk1ZTEtZDRiYTI2ZjJhYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHKNk8QpsILgKQ/sqcWMjljz0U2i+LjSmPsu7oqv4ZJ/dDwTTQBYN0q 5j6KAscmG4jJUEPUtvyDNPwWPMWSzEKTfmg2Qb2U6i59yZi2tRVXwKhA7LaiyzgZ 352Y9CIbEegOvZbZn7ENEgr05doXWfA/Skok7U0Pl7Y/2HUirWLmrNrndTTMF3cP nSZP2aSjysJaWKiz9xyMBy0p0l8LL3WT3Ou5s+6TcGDIaAKIam+STS4sEp24CjeB 1N4kxuqM8NT9q2GaVCnarrZgTnaIoavR1vDB6uGqJeDltuPt59TD4XxT84mw59m3 AOz5MqLY9Nb6Im84mlLrw+i4Zd2yb5o= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:27 2025 by rpki-client