$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa File: c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa (raw, json) Hash identifier: OC+h0eE84Z41oS82ROxXZrvbeqjvoNCUPH4EeUjCAzM= Subject key identifier: 9C:EF:F1:AA:15:E8:06:49:25:7C:A7:75:40:20:FA:77:3B:F2:50:AA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411755FD48DC90A7C1D8900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:75:5f:d4:8d:c9:0a:7c:1d:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0a2450cd-6a70-417a-b866-944d2c09d4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:35:6d:9f:74:2a:b6:62:0d:42:05:02:cb:91: 34:c0:dc:29:57:3e:d5:f0:ba:45:93:ad:38:c3:89: 45:8e:59:1f:01:f7:c2:b7:b8:a3:b8:4e:4a:19:3c: ad:2e:4a:02:0a:73:71:37:f4:54:c6:86:09:38:d7: 55:6c:3c:46:63:04:ad:00:be:6c:ce:58:f3:50:74: e4:55:14:ba:c2:72:31:ff:2c:d7:25:e0:5a:6f:df: 6a:f3:d7:ea:24:3a:16:61:13:55:a3:09:53:02:87: 6e:b8:2b:13:02:14:01:8b:93:78:72:8c:e9:6c:c3: 74:85:37:26:11:98:ed:02:06:3d:ea:72:e3:5e:3b: e9:00:cd:8b:9d:1a:e8:ad:25:15:0d:2b:06:30:bd: 88:dd:c8:eb:f1:1a:9e:e3:d6:60:8a:d5:00:cc:55: 0d:ee:5f:e6:fe:e1:15:41:44:2b:48:21:d2:30:74: f0:2c:05:e0:7b:24:d3:e7:86:2e:09:59:5e:3e:02: 6b:a6:40:79:72:20:5e:ec:1c:7e:cc:0c:03:23:84: 84:40:a6:ce:31:bc:58:48:bd:69:cf:e1:c2:3e:c0: 97:36:8c:e7:da:b9:ed:7d:c4:55:14:ac:c3:05:1b: 39:55:2f:8c:8b:e8:95:e0:e6:a0:c8:4f:16:27:66: cd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EF:F1:AA:15:E8:06:49:25:7C:A7:75:40:20:FA:77:3B:F2:50:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ca:d5:da:a3:d6:b4:c9:6d:99:ce:40:ab:a4:6e:70:85:81: 60:a8:55:2d:0c:4a:ac:43:67:6c:13:e4:90:7e:52:88:82:ae: 3f:59:fa:0d:1b:87:d6:9a:d3:92:c6:19:38:11:20:ab:73:d0: 8d:10:7b:b9:19:d2:3a:29:80:58:ab:74:35:c1:a5:d0:10:45: 75:de:82:58:6f:33:24:29:5f:2d:c7:07:ff:b4:cb:a3:06:87: ad:f6:9b:e1:f5:f1:ad:23:97:8e:1f:3c:57:15:0e:bd:91:34: 17:32:95:44:4d:43:02:fe:bb:c4:64:2c:c0:4f:22:02:29:dd: 58:28:61:36:ab:a5:aa:14:bf:db:d3:f7:b0:9e:40:b9:28:5f: 57:07:45:a6:d7:c5:df:2a:c9:60:ec:02:3e:4b:cb:19:33:e7: 50:a9:b2:5a:a7:52:b8:41:cf:75:fb:b1:c9:99:32:84:8d:00: bf:c3:c3:52:38:98:78:7b:98:83:07:c9:ee:94:08:a5:cf:e6: 7a:b3:06:e8:c2:bf:89:1f:a3:b4:2a:4a:4b:e9:b6:c6:73:5c: 11:d3:3d:aa:22:36:c0:8c:78:93:81:3d:bb:6f:d0:61:cd:95: 92:a0:ee:8c:11:0b:9b:de:45:b5:58:a0:9c:32:3c:47:13:a8: 9b:93:a7:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXVf1I3JCnwdiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGEyNDUwY2QtNmE3MC00MTdhLWI4NjYtOTQ0ZDJjMDlkNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDVtn3QqtmINQgUCy5E0wNwpVz7V8LpFk604 w4lFjlkfAffCt7ijuE5KGTytLkoCCnNxN/RUxoYJONdVbDxGYwStAL5szljzUHTk VRS6wnIx/yzXJeBab99q89fqJDoWYRNVowlTAoduuCsTAhQBi5N4cozpbMN0hTcm EZjtAgY96nLjXjvpAM2LnRrorSUVDSsGML2I3cjr8Rqe49ZgitUAzFUN7l/m/uEV QUQrSCHSMHTwLAXgeyTT54YuCVlePgJrpkB5ciBe7Bx+zAwDI4SEQKbOMbxYSL1p z+HCPsCXNozn2rntfcRVFKzDBRs5VS+Mi+iV4OagyE8WJ2bNqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzv8aoV6AZJJXyndUAg+nc78lCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzVjZTBmZDItMDZiYS0z MWI4LWIyODgtYjdkMTFjYzVhN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvs7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDK1dqj1rTJbZnOQKukbnCFgWCoVS0MSqxDZ2wT5JB+UoiCrj9Z+g0b h9aa05LGGTgRIKtz0I0Qe7kZ0jopgFirdDXBpdAQRXXeglhvMyQpXy3HB/+0y6MG h632m+H18a0jl44fPFcVDr2RNBcylURNQwL+u8RkLMBPIgIp3VgoYTarpaoUv9vT 97CeQLkoX1cHRabXxd8qyWDsAj5Lyxkz51CpslqnUrhBz3X7scmZMoSNAL/Dw1I4 mHh7mIMHye6UCKXP5nqzBujCv4kfo7QqSkvptsZzXBHTPaoiNsCMeJOBPbtv0GHN lZKg7owRC5veRbVYoJwyPEcTqJuTpwg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:35:50 2025 by rpki-client