$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa File: f957cfeb-5830-39ef-9099-bec5d5f55221.roa (raw, json) Hash identifier: gyRldO8Whn7MZYJ65HIXR+7SOkk29QzK4siwLfwU5ds= Subject key identifier: 42:46:33:A8:79:00:AA:D0:0F:79:B1:3E:91:B9:92:94:C5:53:BE:A5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841229A4D8B1E194982724A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:29:a4:d8:b1:e1:94:98:27:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3ec990bf-3c01-40b7-8f9e-48d9cf24acbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:64:49:30:e4:d2:55:5c:ed:af:3a:75:0e: 70:22:17:2a:8c:87:38:16:cb:f6:4c:7f:9d:69:27: 80:9f:bc:d0:1a:1b:2c:69:4b:11:ff:6c:53:80:32: 5d:eb:e6:c8:3e:a4:c9:66:4d:34:17:6e:97:f4:21: 51:0d:6b:47:6f:1d:47:45:54:ac:8e:a8:59:32:b2: 8c:76:71:64:66:1c:b4:e7:7f:4c:43:65:9f:7b:4a: 87:02:b3:55:50:86:ef:74:26:37:03:8c:6a:df:4a: cb:71:54:1d:9e:b7:d5:f4:1e:a7:59:e6:0a:07:23: ea:69:f4:23:3e:64:2f:ff:3b:95:27:8b:7b:ea:62: 8d:68:5f:b4:80:f8:a9:6a:ac:79:ca:4c:82:6c:dc: 97:b1:8c:71:58:9e:21:d5:4d:07:d3:d8:2c:21:29: 47:c3:6f:f0:d3:bd:3d:be:5d:6d:52:ab:4d:08:95: 45:15:0b:3a:92:d8:61:0e:d1:62:0e:51:49:c5:d8: 2c:6d:6f:00:f1:87:35:a0:4d:65:04:b2:3b:b4:27: 93:2c:06:ef:9e:01:ad:be:24:66:96:0a:f8:9e:72: f5:22:05:07:63:81:1d:86:ca:5d:0b:f3:c5:bd:0b: 23:de:38:e5:51:d9:14:16:72:72:25:97:1a:ca:3f: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:46:33:A8:79:00:AA:D0:0F:79:B1:3E:91:B9:92:94:C5:53:BE:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:1c:06:e7:97:b5:e5:fc:d2:ef:7c:5e:6f:92:c9:bf:ec:03: ef:39:66:2f:a4:54:bf:79:77:7a:19:f4:76:1f:50:6f:2f:21: 62:b4:7c:bf:3e:e1:53:6b:57:0a:09:13:a8:47:1f:cd:78:4c: 61:ff:30:c9:40:2f:d4:e5:d0:52:05:a7:16:c8:7a:da:df:08: 05:b1:9b:59:58:dd:a9:05:1a:ac:bf:a6:93:bd:45:af:73:8d: 7c:f4:a1:98:8c:67:f0:e3:83:ce:82:0e:0e:f2:86:ed:b4:73: 12:10:73:2d:c1:94:7c:a0:c0:11:55:13:30:98:06:33:a6:9e: 55:cc:73:aa:7c:04:44:0d:1d:5a:35:ad:ea:f2:64:37:4d:cf: 81:eb:96:0f:49:83:8d:b9:d9:cc:8a:a6:06:ac:4c:fe:2a:c0: 9a:92:82:e2:83:af:16:6b:6c:92:4e:e8:4c:92:9c:7f:8c:5a: 60:57:7e:ee:59:5f:d1:2a:5c:a4:15:c0:0f:ad:02:9d:6b:94: 9c:f0:9d:b7:60:c4:6f:b5:f4:03:58:c0:71:b3:98:f0:de:3b: 65:55:68:a6:e1:fe:84:55:2a:67:e8:f1:0d:d2:91:c5:01:7e: 02:06:f9:86:29:44:79:8f:c7:85:d7:81:90:d8:a1:b6:de:ef: f7:59:f3:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEimk2LHhlJgnJKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2VjOTkwYmYtM2MwMS00MGI3LThmOWUtNDhkOWNmMjRhY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSZkSTDk0lVc7a86dQ5wIhcqjIc4Fsv2TH+d aSeAn7zQGhssaUsR/2xTgDJd6+bIPqTJZk00F26X9CFRDWtHbx1HRVSsjqhZMrKM dnFkZhy0539MQ2Wfe0qHArNVUIbvdCY3A4xq30rLcVQdnrfV9B6nWeYKByPqafQj PmQv/zuVJ4t76mKNaF+0gPipaqx5ykyCbNyXsYxxWJ4h1U0H09gsISlHw2/w0709 vl1tUqtNCJVFFQs6kthhDtFiDlFJxdgsbW8A8Yc1oE1lBLI7tCeTLAbvngGtviRm lgr4nnL1IgUHY4EdhspdC/PFvQsj3jjlUdkUFnJyJZcayj86qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJGM6h5AKrQD3mxPpG5kpTFU76lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjk1N2NmZWItNTgzMC0z OWVmLTkwOTktYmVjNWQ1ZjU1MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0cBueXteX80u98Xm+Syb/sA+85Zi+kVL95d3oZ9HYfUG8vIWK0fL8+ 4VNrVwoJE6hHH814TGH/MMlAL9Tl0FIFpxbIetrfCAWxm1lY3akFGqy/ppO9Ra9z jXz0oZiMZ/Djg86CDg7yhu20cxIQcy3BlHygwBFVEzCYBjOmnlXMc6p8BEQNHVo1 reryZDdNz4Hrlg9Jg4252cyKpgasTP4qwJqSguKDrxZrbJJO6EySnH+MWmBXfu5Z X9EqXKQVwA+tAp1rlJzwnbdgxG+19ANYwHGzmPDeO2VVaKbh/oRVKmfo8Q3SkcUB fgIG+YYpRHmPx4XXgZDYobbe7/dZ8w4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:41:50 2025 by rpki-client