$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa File: f3bba627-40b1-380e-8d96-0765b451c30c.roa (raw, json) Hash identifier: NslOLrG08dw/Hx6MqcbDG8pqHeTk2De/kT9L6i3D/ng= Subject key identifier: 33:5C:72:44:F1:8A:19:A3:67:E1:97:12:F4:D1:0C:32:6B:CF:85:37 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA3634206C928C0B52AE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:36:34:20:6c:92:8c:0b:52:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=a381f1ad-02b5-41d2-af37-0d8a27a17f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:e0:bc:34:41:31:02:73:58:14:65:93:51: b0:be:72:8b:7d:c0:ba:c7:06:25:54:7e:7b:eb:60: 4c:dd:25:90:ff:9a:87:3d:df:89:3f:a6:f4:a4:46: a9:05:aa:af:ae:99:f4:ab:5f:5d:30:3b:2d:77:13: 96:ac:f6:b8:f1:8d:9a:25:1f:64:fd:d0:f6:b6:20: e9:51:3a:a1:44:be:e6:ae:a3:af:1a:7a:0c:2d:b2: 30:e6:f0:89:05:7e:e3:ed:3e:c2:30:86:41:4c:62: b7:bb:12:09:3e:89:d3:9b:00:c5:5b:65:a7:e1:a0: 07:42:7b:a2:35:86:1c:2f:0c:29:c8:93:7e:bb:31: 4a:92:3d:50:3e:9e:b0:6e:31:9b:ef:71:fd:71:a7: f9:56:52:cd:3e:bb:9c:67:9f:cf:1d:08:a0:aa:f5: 08:ab:db:70:ac:92:e7:c8:37:55:b0:b7:d3:a8:ab: d0:73:79:e0:bf:78:6c:02:d4:98:a5:cf:ab:a1:d4: 29:08:03:66:6b:0a:66:b8:25:77:7a:6f:85:6d:6c: c1:6f:75:3c:43:32:8a:94:a3:da:10:5f:73:ab:5e: 81:7b:71:43:0f:c1:ca:c3:9a:4c:d0:79:ca:11:09: 52:c4:cf:fe:07:9e:92:a0:24:c4:1d:b2:37:da:df: f2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5C:72:44:F1:8A:19:A3:67:E1:97:12:F4:D1:0C:32:6B:CF:85:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:9a:69:d8:30:6e:02:2f:69:da:96:11:9b:cf:8d:a3:06:eb: 7b:42:8f:6d:fc:48:b7:a4:84:f9:53:f1:6d:b4:49:04:25:2a: 0f:76:e1:ba:06:ce:00:ed:7b:6e:63:36:1e:64:3f:d5:29:f9: 7b:1d:2e:63:ee:5b:a0:a0:54:88:15:52:2f:f3:99:0f:84:b6: 62:39:9c:60:2e:5c:11:ff:a8:68:35:af:fb:c0:00:c8:53:bd: 27:ae:27:81:10:ec:3d:14:e5:96:f3:4c:85:7f:83:1f:6c:72: 60:b9:2f:69:9e:4c:b1:56:d0:b1:ec:00:0c:c8:2b:af:5a:d1: 38:e3:3c:bd:c1:61:7d:d4:dc:78:82:5f:76:98:d4:19:b1:ba: f5:d2:cf:a5:52:d1:21:eb:ae:60:ff:1e:4e:b9:a6:ab:c6:b9: 66:6c:4d:45:fc:df:30:23:3d:aa:6c:ec:34:b4:a2:30:0b:bc: 29:ff:e8:49:ec:54:b6:f5:5f:70:5b:a5:0b:91:79:76:35:c8: 59:33:0b:88:0f:83:5a:6a:1d:99:ed:f0:11:ed:33:65:f9:a0: 53:f3:b4:f3:ad:87:0b:98:5b:02:5e:8c:52:5a:b5:ca:12:b6: 3f:93:dc:14:13:5a:53:3e:cc:77:78:86:14:de:34:40:9b:1a: 03:0f:32:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jY0IGySjAtSroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk YTM4MWYxYWQtMDJiNS00MWQyLWFmMzctMGQ4YTI3YTE3ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig/gvDRBMQJzWBRlk1GwvnKLfcC6xwYlVH57 62BM3SWQ/5qHPd+JP6b0pEapBaqvrpn0q19dMDstdxOWrPa48Y2aJR9k/dD2tiDp UTqhRL7mrqOvGnoMLbIw5vCJBX7j7T7CMIZBTGK3uxIJPonTmwDFW2Wn4aAHQnui NYYcLwwpyJN+uzFKkj1QPp6wbjGb73H9caf5VlLNPrucZ5/PHQigqvUIq9twrJLn yDdVsLfTqKvQc3ngv3hsAtSYpc+rodQpCANmawpmuCV3em+FbWzBb3U8QzKKlKPa EF9zq16Be3FDD8HKw5pM0HnKEQlSxM/+B56SoCTEHbI32t/yUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNcckTxihmjZ+GXEvTRDDJrz4U3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjNiYmE2MjctNDBiMS0z ODBlLThkOTYtMDc2NWI0NTFjMzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCaadgwbgIvadqWEZvPjaMG63tCj238SLekhPlT8W20SQQlKg924boG zgDte25jNh5kP9Up+XsdLmPuW6CgVIgVUi/zmQ+EtmI5nGAuXBH/qGg1r/vAAMhT vSeuJ4EQ7D0U5ZbzTIV/gx9scmC5L2meTLFW0LHsAAzIK69a0TjjPL3BYX3U3HiC X3aY1BmxuvXSz6VS0SHrrmD/Hk65pqvGuWZsTUX83zAjPaps7DS0ojALvCn/6Ens VLb1X3BbpQuReXY1yFkzC4gPg1pqHZnt8BHtM2X5oFPztPOthwuYWwJejFJatcoS tj+T3BQTWlM+zHd4hhTeNECbGgMPMmY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:04:53 2025 by rpki-client