$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d295118f-b684-3470-ba2a-8cb115fab04a.roa File: d295118f-b684-3470-ba2a-8cb115fab04a.roa (raw, json) Hash identifier: kmYZD2+QedpmFO4MwUgLhSRPWd7DQllsBaUGSiCSxIQ= Subject key identifier: 27:B8:19:87:B1:29:38:94:FD:0E:F7:80:67:FD:79:52:7E:09:9A:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F72F5E67F45DBE784980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d295118f-b684-3470-ba2a-8cb115fab04a.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 142.251.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f7:2f:5e:67:f4:5d:be:78:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=56b7b999-5c66-449d-895f-e15940552ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:8f:b1:e8:d0:db:dc:80:77:a1:6a:d2:50: 7f:82:9e:45:8c:c5:a9:28:d3:a0:b2:57:1a:f4:ab: ca:de:29:5e:9d:2a:95:5a:90:c8:be:34:84:84:45: e8:af:8b:33:d9:a7:2e:80:25:91:88:8a:15:ca:4f: db:02:31:9f:e5:19:79:39:17:ac:8b:4b:89:6b:ff: 9b:c7:7f:bd:83:7b:aa:9f:03:eb:6f:b4:bf:ed:37: 73:6a:f0:41:c8:c2:6c:f0:2c:25:fd:6b:67:d0:6e: 78:cc:c5:80:aa:47:97:12:4f:9b:eb:32:50:8a:31: b1:bc:e6:3b:ec:de:ee:7e:92:56:73:b4:6a:18:e0: e1:0a:27:83:2f:09:39:44:9f:71:ed:c5:80:ec:1d: b6:46:bd:a4:3e:71:27:4f:91:7a:bf:f4:f7:3a:28: c2:9f:66:44:6c:64:a8:3a:4b:98:d4:6e:8b:73:7e: 3c:09:a5:74:f9:9e:e2:eb:76:f7:b1:43:ac:0c:c2: d7:ad:43:94:ee:14:45:cf:4d:9d:4e:72:3a:99:1b: 1e:0c:3f:87:54:fb:e3:b4:b8:59:04:62:fc:71:78: 19:97:ea:2a:18:74:0d:d7:b9:61:37:28:cb:e6:50: f0:05:97:b2:0c:53:e5:fd:06:67:62:34:75:32:c7: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:19:87:B1:29:38:94:FD:0E:F7:80:67:FD:79:52:7E:09:9A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d295118f-b684-3470-ba2a-8cb115fab04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:37:b7:ea:55:c7:57:84:d4:d6:bf:e9:38:2e:52:24:b7:7e: de:d5:6f:a7:fd:ed:67:19:c2:d5:60:a3:85:9a:b9:52:19:e8: e2:e4:a9:6d:7c:94:6d:cd:26:c4:7e:60:56:b4:bb:b4:a0:66: 4f:4c:23:01:72:a6:de:ab:5b:d9:09:f5:11:25:b5:37:cc:5e: bd:df:16:40:d4:53:99:be:5f:de:23:68:7e:2d:3b:91:c0:7c: 6d:c0:b2:8f:d9:51:fa:07:66:c3:41:29:4c:fa:e9:bd:35:49: 25:b1:99:8d:cc:52:4d:34:2a:38:07:21:0d:95:de:a9:12:49: 8d:c0:84:63:75:af:1a:e4:a8:81:9a:34:f2:6f:ed:94:29:5e: f2:34:0e:10:22:74:49:d1:3e:5f:df:d0:26:80:3a:91:58:e3: 28:a3:9c:8a:b8:92:de:50:c5:f8:c2:50:81:41:b9:e2:15:16: aa:c4:f3:f9:3e:52:7e:85:8a:d7:f5:0a:65:de:3a:a5:e5:94: 1f:49:e7:7f:e9:5a:b8:bd:23:29:b6:07:59:ba:c2:b8:87:9f: bf:e8:9a:1b:68:75:4f:e5:4a:89:0c:4a:7d:75:9b:a8:6b:03: 4b:ac:54:6e:d5:18:1d:61:a0:55:dc:b4:18:30:69:12:24:8b: 98:b6:44:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPcvXmf0Xb54SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NTZiN2I5OTktNWM2Ni00NDlkLTg5NWYtZTE1OTQwNTUyZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRiPsejQ29yAd6Fq0lB/gp5FjMWpKNOgslca 9KvK3ilenSqVWpDIvjSEhEXor4sz2acugCWRiIoVyk/bAjGf5Rl5OResi0uJa/+b x3+9g3uqnwPrb7S/7TdzavBByMJs8Cwl/Wtn0G54zMWAqkeXEk+b6zJQijGxvOY7 7N7ufpJWc7RqGODhCieDLwk5RJ9x7cWA7B22Rr2kPnEnT5F6v/T3OijCn2ZEbGSo OkuY1G6Lc348CaV0+Z7i63b3sUOsDMLXrUOU7hRFz02dTnI6mRseDD+HVPvjtLhZ BGL8cXgZl+oqGHQN17lhNyjL5lDwBZeyDFPl/QZnYjR1MseolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe4GYexKTiU/Q73gGf9eVJ+CZooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDI5NTExOGYtYjY4NC0z NDcwLWJhMmEtOGNiMTE1ZmFiMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA3t+pVx1eE1Na/6TguUiS3ft7Vb6f97WcZwtVgo4WauVIZ6OLkqW18 lG3NJsR+YFa0u7SgZk9MIwFypt6rW9kJ9REltTfMXr3fFkDUU5m+X94jaH4tO5HA fG3Aso/ZUfoHZsNBKUz66b01SSWxmY3MUk00KjgHIQ2V3qkSSY3AhGN1rxrkqIGa NPJv7ZQpXvI0DhAidEnRPl/f0CaAOpFY4yijnIq4kt5QxfjCUIFBueIVFqrE8/k+ Un6Fitf1CmXeOqXllB9J53/pWri9Iym2B1m6wriHn7/omhtodU/lSokMSn11m6hr A0usVG7VGB1hoFXctBgwaRIki5i2RCg= -----END CERTIFICATE-----Generated at Wed Aug 6 09:42:27 2025 by rpki-client