$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa File: eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa (raw, json) Hash identifier: YdCZOqNfFMVk7q5UzuCscO1U5Jqr770F2vpB8t9Zqr0= Subject key identifier: C5:32:AE:79:DC:F1:81:8A:EF:81:C3:67:94:1F:7D:0E:15:A0:3D:B3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA2DD7DDB4EB917BDEEA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:2d:d7:dd:b4:eb:91:7b:de:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=750b5c6d-48c6-4526-b3aa-6c3c3a03ee61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1e:57:39:e6:6b:1b:a7:48:7b:e4:49:10:db: 5a:65:d4:78:87:fa:c5:16:f0:80:18:8c:99:47:2b: 1e:74:2f:1d:e9:cb:63:3a:45:3f:9b:75:99:e3:b8: 09:55:1c:4c:92:1c:61:87:c9:5d:cb:c0:11:e8:cb: da:09:57:01:7a:d4:51:d9:d7:cf:fa:c7:87:60:69: 47:3a:e3:c7:f0:c2:c7:9a:39:2e:5f:1d:74:f6:cd: 36:13:54:88:83:a8:8e:8b:f6:00:44:1f:e2:d5:d4: 55:4c:c2:13:73:77:e0:fd:ba:20:e0:2b:f8:59:52: d6:78:cb:2c:a5:16:7c:c2:ce:98:cc:db:76:2a:b1: c1:25:92:b0:47:95:7a:c7:41:bd:ae:ce:83:63:71: b4:c0:a9:ef:47:cd:ab:1d:82:d8:e8:35:fa:32:a7: 51:ad:91:62:97:57:02:75:8d:b2:e8:14:ca:dc:98: 74:f2:f8:ee:ba:ac:15:cb:60:71:9a:28:d1:f3:a5: a5:ec:f5:2f:ce:4d:41:6e:f5:5b:68:84:9b:2b:6a: eb:7e:bb:9a:27:f0:7d:00:58:be:7e:e9:a7:40:39: 97:bd:4e:44:91:a7:8a:2e:38:ec:3a:7e:bc:57:ef: 02:e0:f3:0d:9d:09:45:9e:cf:54:c7:47:ef:98:0c: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:32:AE:79:DC:F1:81:8A:EF:81:C3:67:94:1F:7D:0E:15:A0:3D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eea6d957-9ae8-3114-bb09-f6bdb5dfd129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:68:32:26:9c:3c:19:2d:a7:10:36:1d:94:62:ea:cb:e5:df: bb:da:13:9d:4e:1c:83:86:11:e6:3a:23:8d:35:f8:67:52:dd: 1d:02:e2:97:8e:cc:43:4b:b8:0e:d7:d2:55:b9:01:3c:44:ef: 75:aa:87:38:65:dd:61:40:86:8b:75:83:7f:93:f1:62:51:30: 23:7e:aa:de:cf:a1:57:83:99:99:57:8c:8f:ed:9b:d0:66:d7: be:35:3e:e9:25:e0:6c:a4:c2:3e:08:6a:c3:5f:f7:c3:16:a7: a0:3d:5b:53:6e:e0:8c:2e:c1:fa:d7:f7:ce:d8:b6:26:01:41: 27:19:78:3d:3f:11:04:7c:78:90:40:e0:db:fc:34:55:13:09: 73:cf:c7:39:50:e0:79:c0:0d:f7:59:1f:b3:90:21:4a:90:5f: 1a:dc:8a:82:9b:fc:00:9f:a5:a0:93:81:5e:1d:3c:5b:0a:8c: 7d:c6:0f:ae:6d:e7:fa:3d:25:e3:da:88:c7:1f:fb:5e:b1:5c: fd:0e:e9:87:6b:3b:d8:9a:5c:46:4c:db:10:03:7c:0c:9a:93: ab:f9:ad:fe:af:fb:be:62:eb:3c:fc:c6:65:21:dd:e3:b3:3e: 3e:af:02:b4:69:33:47:28:c0:73:b4:fd:71:75:2f:6c:ae:4a: e8:86:0d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92i3X3bTrkXve6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NzUwYjVjNmQtNDhjNi00NTI2LWIzYWEtNmMzYzNhMDNlZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9x5XOeZrG6dIe+RJENtaZdR4h/rFFvCAGIyZ RysedC8d6ctjOkU/m3WZ47gJVRxMkhxhh8ldy8AR6MvaCVcBetRR2dfP+seHYGlH OuPH8MLHmjkuXx109s02E1SIg6iOi/YARB/i1dRVTMITc3fg/bog4Cv4WVLWeMss pRZ8ws6YzNt2KrHBJZKwR5V6x0G9rs6DY3G0wKnvR82rHYLY6DX6MqdRrZFil1cC dY2y6BTK3Jh08vjuuqwVy2BxmijR86Wl7PUvzk1BbvVbaISbK2rrfruaJ/B9AFi+ fumnQDmXvU5EkaeKLjjsOn68V+8C4PMNnQlFns9Ux0fvmAwgvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUyrnnc8YGK74HDZ5QffQ4VoD2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWVhNmQ5NTctOWFlOC0z MTE0LWJiMDktZjZiZGI1ZGZkMTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhoMiacPBktpxA2HZRi6svl37vaE51OHIOGEeY6I401+GdS3R0C4peO zENLuA7X0lW5ATxE73Wqhzhl3WFAhot1g3+T8WJRMCN+qt7PoVeDmZlXjI/tm9Bm 1741Pukl4Gykwj4IasNf98MWp6A9W1Nu4IwuwfrX987YtiYBQScZeD0/EQR8eJBA 4Nv8NFUTCXPPxzlQ4HnADfdZH7OQIUqQXxrcioKb/ACfpaCTgV4dPFsKjH3GD65t 5/o9JePaiMcf+16xXP0O6YdrO9iaXEZM2xADfAyak6v5rf6v+75i6zz8xmUh3eOz Pj6vArRpM0cowHO0/XF1L2yuSuiGDc4= -----END CERTIFICATE-----Generated at Sun Jun 15 17:18:27 2025 by rpki-client