$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9664285-5f8f-3a45-aa2d-8e2b02dc8d7b.roa File: a9664285-5f8f-3a45-aa2d-8e2b02dc8d7b.roa (raw, json) Hash identifier: cQIS637czyPdz6eiF+yDguNySkpO5Ky4FzVekO3Tc8k= Subject key identifier: D1:3D:B3:45:D2:75:24:56:57:01:56:C8:77:7B:F9:8A:9B:C0:39:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84122A7363077E1E53F93418 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9664285-5f8f-3a45-aa2d-8e2b02dc8d7b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2a:73:63:07:7e:1e:53:f9:34:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f9e4a882-06de-4143-abfd-4e502588ef1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4e:76:ad:34:2b:19:e6:76:27:e6:1a:41:21: d9:02:fd:7f:60:d5:df:b2:9b:89:ff:99:aa:81:16: 70:2e:b8:e9:07:7e:62:2d:d3:1a:00:bc:15:78:cc: fd:85:86:f1:d8:d9:dc:24:28:31:02:3c:5e:04:1b: 09:9a:a7:8b:3b:9f:b8:54:19:e2:43:c6:d6:ad:95: 10:f3:dd:6d:95:f1:d5:7b:d2:72:2f:b2:ad:eb:06: f9:a7:01:27:a0:6c:38:23:0f:d8:46:4d:c7:f9:9b: 8e:63:a1:52:19:fa:28:f9:09:6c:fe:f2:8a:bc:68: 86:be:5b:8e:12:6d:df:60:1f:f9:98:8b:1d:6b:9c: b9:64:1b:55:36:c0:d7:de:7c:f1:21:32:78:7f:d0: ac:46:8f:57:d4:a3:91:e0:1d:13:85:6f:df:07:d1: ec:9b:0a:11:2d:f9:77:cd:6b:cd:31:c3:d1:3f:6d: ff:46:84:df:0a:33:16:ea:62:56:90:8e:e0:79:33: 37:fc:0d:7d:7a:9e:59:3a:63:e3:9b:d7:a7:0e:49: 21:e9:6c:e3:86:4f:a2:91:67:ac:53:d9:4b:65:3a: 63:8f:11:70:4f:15:95:e3:bf:a2:a2:96:e4:63:10: 4f:be:c7:dd:c7:9c:db:56:e7:f5:33:3a:87:67:50: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3D:B3:45:D2:75:24:56:57:01:56:C8:77:7B:F9:8A:9B:C0:39:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9664285-5f8f-3a45-aa2d-8e2b02dc8d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:29:fc:bc:43:06:7a:a5:1b:e7:15:67:4e:5e:32:60:82:e5: a7:23:c0:ff:da:e3:5d:fd:dd:3d:ba:16:01:c7:5c:a6:ae:4b: a7:b3:2a:37:1d:fc:6b:47:03:e7:73:1a:f3:f2:23:7a:12:15: d1:0d:e2:0a:7d:fa:37:8a:ea:97:29:00:ba:c1:33:b1:ed:6f: 5a:59:57:11:5e:3d:74:97:be:60:2e:6c:2c:37:d1:87:48:97: c7:82:12:b8:c1:b3:39:20:1f:d7:0e:ee:f9:99:1a:66:9e:ea: ee:44:78:9c:34:74:5a:7a:5c:34:22:b6:14:5d:7a:a2:47:2c: 35:3f:aa:4c:10:bf:ac:c7:87:fb:1a:a4:d1:1b:fc:82:17:b6: fd:68:09:27:a0:6d:28:10:c3:9a:3f:88:e7:f5:81:16:53:f8: 1c:d1:79:16:f5:d3:20:a1:e4:c1:c9:22:63:68:39:7a:2e:09: cc:9f:74:17:a3:07:9e:10:5d:4d:d4:b3:e0:64:99:77:04:0c: 0e:52:51:52:0f:52:5a:97:1c:86:2b:28:5f:1b:69:78:36:77: 9f:9f:77:11:ec:95:5e:c5:ee:8f:5d:d9:63:91:cf:ae:94:36: 5d:d1:a2:e1:d6:d1:94:58:bc:32:f3:68:5e:0c:b1:46:1c:7b: d0:5a:4a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEipzYwd+HlP5NBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjllNGE4ODItMDZkZS00MTQzLWFiZmQtNGU1MDI1ODhlZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU52rTQrGeZ2J+YaQSHZAv1/YNXfspuJ/5mq gRZwLrjpB35iLdMaALwVeMz9hYbx2NncJCgxAjxeBBsJmqeLO5+4VBniQ8bWrZUQ 891tlfHVe9JyL7Kt6wb5pwEnoGw4Iw/YRk3H+ZuOY6FSGfoo+Qls/vKKvGiGvluO Em3fYB/5mIsda5y5ZBtVNsDX3nzxITJ4f9CsRo9X1KOR4B0ThW/fB9HsmwoRLfl3 zWvNMcPRP23/RoTfCjMW6mJWkI7geTM3/A19ep5ZOmPjm9enDkkh6Wzjhk+ikWes U9lLZTpjjxFwTxWV47+iopbkYxBPvsfdx5zbVuf1MzqHZ1CMlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE9s0XSdSRWVwFWyHd7+YqbwDl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTk2NjQyODUtNWY4Zi0z YTQ1LWFhMmQtOGUyYjAyZGM4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEp/LxDBnqlG+cVZ05eMmCC5acjwP/a41393T26FgHHXKauS6ezKjcd /GtHA+dzGvPyI3oSFdEN4gp9+jeK6pcpALrBM7Htb1pZVxFePXSXvmAubCw30YdI l8eCErjBszkgH9cO7vmZGmae6u5EeJw0dFp6XDQithRdeqJHLDU/qkwQv6zHh/sa pNEb/IIXtv1oCSegbSgQw5o/iOf1gRZT+BzReRb10yCh5MHJImNoOXouCcyfdBej B54QXU3Us+BkmXcEDA5SUVIPUlqXHIYrKF8baXg2d5+fdxHslV7F7o9d2WORz66U Nl3RouHW0ZRYvDLzaF4MsUYce9BaSt8= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:34 2025 by rpki-client