$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa File: ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa (raw, json) Hash identifier: yOjcKkcPm8+cf9woro954LygsHWYIZWJr9+V1EyWRKE= Subject key identifier: 90:54:CC:08:44:F3:AB:F7:72:E6:90:44:5F:D6:30:C5:40:8D:F3:AB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841231576AC5891093DA9100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:31:57:6a:c5:89:10:93:da:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=aff86b7f-d5d4-49a2-9131-42c553b02d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:bf:c9:9b:75:ba:86:fc:10:2c:3f:55:f0: 18:7f:98:23:a4:37:7a:96:8d:08:8e:f2:7b:53:e1: ef:a1:22:63:b7:8b:78:87:44:90:9d:f5:50:5d:8d: 49:e8:53:6d:e8:66:c7:f2:22:a4:dc:39:2a:f2:a6: 92:21:90:9a:38:9b:b2:a9:1e:96:e4:0f:e0:08:cd: 37:30:fc:de:7f:0d:65:17:c0:5f:51:9f:f1:04:f1: 3a:2b:26:86:e0:e5:c3:da:b7:fd:37:45:03:97:fa: 1f:6e:22:12:d1:de:ea:3f:6f:87:b5:4b:9f:03:74: fa:fb:41:62:63:45:66:ff:19:91:dc:bb:c7:95:03: 5f:7f:5d:8c:77:b7:a7:a7:91:f7:a7:6a:e8:88:ed: 29:ee:1c:0e:33:b1:e3:dc:10:0b:2a:d7:83:fb:03: fc:fd:e0:b6:62:65:97:ca:ae:22:d2:28:ab:71:6c: 69:07:18:6a:f3:f6:5b:ee:e7:b1:0d:ff:2e:7a:4a: ed:29:f7:70:dc:1f:44:08:d6:d8:d4:5d:fc:05:9d: b8:3a:00:d1:e1:a6:0b:98:37:71:41:c0:8d:30:1d: 51:e8:7f:d2:b3:6a:a6:24:2c:dd:f2:6a:af:66:19: 36:3b:34:56:1e:7b:12:1e:01:cb:20:fb:a4:a1:dd: 78:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:54:CC:08:44:F3:AB:F7:72:E6:90:44:5F:D6:30:C5:40:8D:F3:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:43:4a:fd:d7:bf:42:fb:15:00:79:a3:52:94:13:b5:d3:7f: 0e:e4:2d:2d:09:d0:44:c5:98:68:9b:f7:7b:79:b9:81:db:74: aa:51:d5:5f:fa:8c:63:6a:6b:9d:86:67:9a:0b:79:cb:b7:04: d5:95:3b:4a:2d:85:67:2e:5f:d1:01:97:37:0b:17:b9:28:70: 1f:71:d2:3c:04:63:d4:81:93:74:86:62:38:cc:93:1a:21:0b: d3:a9:0e:73:58:51:4e:08:1a:d0:13:d5:ad:b0:e7:34:17:11: f9:48:11:19:60:e4:0a:f0:b4:aa:fc:c1:16:a0:36:cf:a0:96: 7b:a8:59:cc:66:9c:b5:e7:78:fb:88:84:d8:78:5a:8a:ae:44: ed:8d:72:a4:50:49:48:fb:57:a4:b6:f3:83:92:ff:cc:ce:cd: 71:b6:4a:c0:85:30:20:3e:10:91:db:cd:6e:3f:71:1e:ed:67: d8:e0:2a:0b:a1:c3:64:41:77:9e:5d:66:e1:05:b6:5d:4d:d0: 94:67:6b:ea:fa:2f:52:4d:6a:a3:a2:94:a3:39:5e:bb:79:f0: f5:1e:b9:01:21:ec:b2:1a:2f:18:b5:70:2f:e9:02:f9:5b:0e: 84:db:4e:72:ad:d7:27:87:c2:db:a4:72:43:1d:18:b0:d0:62: b5:a1:54:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjFXasWJEJPakQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWZmODZiN2YtZDVkNC00OWEyLTkxMzEtNDJjNTUzYjAyZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIe/yZt1uob8ECw/VfAYf5gjpDd6lo0IjvJ7 U+HvoSJjt4t4h0SQnfVQXY1J6FNt6GbH8iKk3Dkq8qaSIZCaOJuyqR6W5A/gCM03 MPzefw1lF8BfUZ/xBPE6KyaG4OXD2rf9N0UDl/ofbiIS0d7qP2+HtUufA3T6+0Fi Y0Vm/xmR3LvHlQNff12Md7enp5H3p2roiO0p7hwOM7Hj3BALKteD+wP8/eC2YmWX yq4i0iircWxpBxhq8/Zb7uexDf8uekrtKfdw3B9ECNbY1F38BZ24OgDR4aYLmDdx QcCNMB1R6H/Ss2qmJCzd8mqvZhk2OzRWHnsSHgHLIPukod14uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBUzAhE86v3cuaQRF/WMMVAjfOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2U0ODI4N2YtZTVhYS0z NDNhLWFkOWQtODQ0NWE4ZjY0N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpDSv3Xv0L7FQB5o1KUE7XTfw7kLS0J0ETFmGib93t5uYHbdKpR1V/6 jGNqa52GZ5oLecu3BNWVO0othWcuX9EBlzcLF7kocB9x0jwEY9SBk3SGYjjMkxoh C9OpDnNYUU4IGtAT1a2w5zQXEflIERlg5ArwtKr8wRagNs+glnuoWcxmnLXnePuI hNh4WoquRO2NcqRQSUj7V6S284OS/8zOzXG2SsCFMCA+EJHbzW4/cR7tZ9jgKguh w2RBd55dZuEFtl1N0JRna+r6L1JNaqOilKM5Xrt58PUeuQEh7LIaLxi1cC/pAvlb DoTbTnKt1yeHwtukckMdGLDQYrWhVA8= -----END CERTIFICATE-----Generated at Mon Aug 4 19:15:34 2025 by rpki-client