$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa File: c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa (raw, json) Hash identifier: q1xggr/B1P5rDDvRJaFy4XARilSiV/DKANJwZ7lNJIw= Subject key identifier: C8:09:ED:87:AD:10:FD:CF:58:CB:4B:FF:4F:93:46:7B:65:23:84:C1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F7C24B5C321119F8E200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.251.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f7:c2:4b:5c:32:11:19:f8:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=3468db98-f1ae-4bad-a2e1-6881be87eaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5a:5a:e7:48:49:60:16:38:bd:aa:35:45:96: 85:b2:eb:d7:f6:f5:07:97:2d:9b:e1:ba:8c:73:c5: 6e:2e:0e:13:4d:9e:2f:1c:64:71:0f:86:8e:ca:46: e5:6e:54:4f:36:2e:b3:94:95:25:f6:7e:56:b6:dd: 4f:e5:ef:da:a1:68:f7:b0:ed:a9:ab:be:66:d5:55: 96:20:b2:1d:99:75:65:ac:88:41:86:cf:a4:78:b1: 40:52:67:77:62:3b:0d:84:4b:64:6e:34:0e:d7:c5: 73:62:cc:b5:f4:69:3b:10:53:40:c9:86:32:9a:64: c9:35:50:66:3d:77:65:54:b5:f4:a4:5f:6b:f6:14: 38:fd:f8:84:bc:ee:56:c3:fd:6f:3f:51:58:3e:22: 10:49:46:db:62:88:aa:19:ec:df:5a:d4:8a:ea:ce: 93:27:ef:fd:ed:47:05:f1:be:cc:cb:45:91:2a:92: d1:07:01:ff:7b:61:c2:6d:1a:ec:fd:30:c3:c7:31: 6f:b1:19:d1:db:6b:d2:90:ef:65:e7:df:f3:f0:80: b9:2c:83:2f:eb:1b:59:9d:57:bc:69:1f:da:f4:78: 8c:91:5d:9d:a4:a0:55:a4:83:c6:8e:cd:63:23:d2: 3a:7a:04:21:12:b2:e3:3e:1c:87:72:ff:17:09:ad: 71:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:09:ED:87:AD:10:FD:CF:58:CB:4B:FF:4F:93:46:7B:65:23:84:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a5:18:39:3e:27:6d:70:eb:05:ab:05:9a:4a:90:ae:04:75: 34:13:3d:9a:55:0f:52:56:a0:02:66:1d:18:44:6e:d4:b5:ee: d2:dd:ca:07:03:84:c3:30:c1:b5:06:3e:d3:5d:08:ee:27:5e: b6:2c:1b:b3:31:72:66:ed:28:c1:68:c5:39:78:62:d2:38:7b: 8d:26:42:ad:6c:7b:75:e9:08:c4:71:18:ed:ae:9a:9c:5f:9c: 94:47:ce:29:db:3d:ac:fd:c8:67:9c:c5:94:aa:c8:66:7c:15: 2f:99:a1:68:88:82:bc:3d:20:a0:cb:a9:36:c4:10:00:2f:02: 35:4f:5b:d5:c2:a4:ff:bc:cb:f5:b7:f2:79:5f:9a:77:84:b8: 55:10:47:0c:ac:32:4b:20:ed:35:8f:7e:a1:b5:91:e4:b9:f6: 84:cc:04:20:ab:1e:d8:85:67:a5:c1:b1:65:52:1b:20:e2:02: b8:ef:44:28:5e:0c:49:c2:3c:62:5f:f6:7f:d9:31:a2:cd:c9: 35:44:2f:47:5c:ad:0f:16:bb:92:d0:92:d2:7e:e2:fc:ab:a7: c1:1c:14:b0:b1:0a:fe:bf:aa:67:70:7a:a3:5b:11:08:d2:27: ed:7c:9a:da:a2:73:47:dd:09:f0:3f:06:aa:17:d1:9b:76:64: 1b:4b:18:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPfCS1wyERn44gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk MzQ2OGRiOTgtZjFhZS00YmFkLWEyZTEtNjg4MWJlODdlYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vpa50hJYBY4vao1RZaFsuvX9vUHly2b4bqM c8VuLg4TTZ4vHGRxD4aOykblblRPNi6zlJUl9n5Wtt1P5e/aoWj3sO2pq75m1VWW ILIdmXVlrIhBhs+keLFAUmd3YjsNhEtkbjQO18VzYsy19Gk7EFNAyYYymmTJNVBm PXdlVLX0pF9r9hQ4/fiEvO5Ww/1vP1FYPiIQSUbbYoiqGezfWtSK6s6TJ+/97UcF 8b7My0WRKpLRBwH/e2HCbRrs/TDDxzFvsRnR22vSkO9l59/z8IC5LIMv6xtZnVe8 aR/a9HiMkV2dpKBVpIPGjs1jI9I6egQhErLjPhyHcv8XCa1xGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgJ7YetEP3PWMtL/0+TRntlI4TBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzlkODFjM2QtYWVjNS0z ODgxLWE3ZTMtNTcxZmRiNjE1ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABClGDk+J21w6wWrBZpKkK4EdTQTPZpVD1JWoAJmHRhEbtS17tLdygcD hMMwwbUGPtNdCO4nXrYsG7MxcmbtKMFoxTl4YtI4e40mQq1se3XpCMRxGO2umpxf nJRHzinbPaz9yGecxZSqyGZ8FS+ZoWiIgrw9IKDLqTbEEAAvAjVPW9XCpP+8y/W3 8nlfmneEuFUQRwysMksg7TWPfqG1keS59oTMBCCrHtiFZ6XBsWVSGyDiArjvRChe DEnCPGJf9n/ZMaLNyTVEL0dcrQ8Wu5LQktJ+4vyrp8EcFLCxCv6/qmdweqNbEQjS J+18mtqic0fdCfA/BqoX0Zt2ZBtLGPo= -----END CERTIFICATE-----Generated at Mon Aug 4 14:42:10 2025 by rpki-client