$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa File: fa32539a-0dbd-3810-a010-b81c403c8b41.roa (raw, json) Hash identifier: Ge1sHctnbEIrHyxwh77ocatSMRfdAuVn+A/2L9Vjc90= Subject key identifier: AE:BC:6D:5A:A6:36:71:10:67:9D:E9:71:68:6E:D8:1F:35:27:A4:B1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411767F1B299107FC0FCE60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:76:7f:1b:29:91:07:fc:0f:ce:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4d1e4f32-be02-4b23-894e-38c9ee760c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:63:cc:0d:c2:a5:fa:d7:57:bf:ee:f0:28: ae:5e:b9:54:bf:57:3d:90:04:2c:ef:cb:8c:4a:a5: 9c:ec:58:f7:30:6c:17:62:d3:96:3d:fc:6d:8f:79: 28:d7:d0:78:06:e1:4d:a7:8b:8b:96:14:fb:21:59: 35:7a:c3:f4:c5:15:b6:22:d9:d3:00:c3:02:64:0c: 01:44:52:9a:5b:b7:97:cf:f0:6f:0c:f8:d5:ea:e7: 96:f2:f5:11:41:cf:a3:05:f1:63:43:67:ab:1a:20: 1a:8c:bb:2b:2a:f5:5f:ea:0a:8b:a9:64:e7:73:09: e1:ce:d7:13:92:4f:b5:5a:37:b9:14:41:16:b2:73: e2:e5:f3:a2:6d:ff:6f:50:b6:d4:7f:cd:06:49:c0: ba:24:d8:03:e1:e3:5e:82:8c:1c:c6:86:a5:ff:1e: 92:c8:49:eb:f6:e3:d7:af:83:8b:eb:94:79:21:b4: d8:06:3e:99:24:7d:ab:48:6b:eb:31:6f:ac:e8:d8: 98:83:5d:34:61:9b:1d:bd:7c:06:5f:41:3f:85:a2: e4:64:62:9c:6b:73:bf:81:78:bf:54:1d:45:a2:81: 67:90:13:ec:89:90:db:91:c4:5d:c2:c4:65:91:7f: 49:74:d1:1e:5f:e4:66:28:21:3f:62:71:6c:b7:8a: 54:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BC:6D:5A:A6:36:71:10:67:9D:E9:71:68:6E:D8:1F:35:27:A4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:13:1e:fd:73:bc:bc:41:56:68:34:87:56:42:de:48:c5:4f: 62:9f:39:17:df:cf:45:04:31:4f:83:ed:52:87:f0:92:91:f0: 16:94:34:60:9c:e0:18:31:92:36:12:04:f0:25:d9:2a:88:6e: 9e:91:d2:0b:40:7c:d1:d4:b3:f1:05:a2:9a:02:a5:36:5b:03: ae:26:3b:c2:52:7b:5f:63:f4:c1:fa:62:ed:e7:2e:65:06:21: 7c:fc:d7:b7:f8:a2:68:3e:a3:4c:56:0f:62:ab:2a:e3:19:d4: a0:52:b5:17:b2:14:c4:eb:84:c7:8c:82:be:e6:a2:73:79:ba: 8c:d7:4a:64:8c:d3:f2:7d:af:3a:23:2b:b6:0a:2c:86:b8:6f: 98:f9:fa:2b:63:24:14:14:11:25:42:d7:f1:a8:df:14:5e:8d: 5e:c0:85:07:b1:f9:e0:5f:b6:b7:ac:c7:3d:e3:5b:c7:de:fe: 7c:5b:55:b6:fb:e6:51:8d:1d:d4:13:6e:1f:dc:14:f7:32:4d: ce:3b:a3:e5:4f:55:4d:aa:81:01:43:55:36:ab:20:44:93:35: 05:f5:d2:63:18:10:59:3c:3f:53:58:2d:d6:4f:51:34:58:03: 5e:85:d6:fa:d4:26:c0:76:e5:77:e3:ee:7d:d1:9e:84:06:c1: a7:23:04:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEXZ/GymRB/wPzmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGQxZTRmMzItYmUwMi00YjIzLTg5NGUtMzhjOWVlNzYwYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlotjzA3CpfrXV7/u8CiuXrlUv1c9kAQs78uM SqWc7Fj3MGwXYtOWPfxtj3ko19B4BuFNp4uLlhT7IVk1esP0xRW2ItnTAMMCZAwB RFKaW7eXz/BvDPjV6ueW8vURQc+jBfFjQ2erGiAajLsrKvVf6gqLqWTncwnhztcT kk+1Wje5FEEWsnPi5fOibf9vULbUf80GScC6JNgD4eNegowcxoal/x6SyEnr9uPX r4OL65R5IbTYBj6ZJH2rSGvrMW+s6NiYg100YZsdvXwGX0E/haLkZGKca3O/gXi/ VB1FooFnkBPsiZDbkcRdwsRlkX9JdNEeX+RmKCE/YnFst4pUvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK68bVqmNnEQZ53pcWhu2B81J6SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmEzMjUzOWEtMGRiZC0z ODEwLWEwMTAtYjgxYzQwM2M4YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMTHv1zvLxBVmg0h1ZC3kjFT2KfORffz0UEMU+D7VKH8JKR8BaUNGCc 4BgxkjYSBPAl2SqIbp6R0gtAfNHUs/EFopoCpTZbA64mO8JSe19j9MH6Yu3nLmUG IXz817f4omg+o0xWD2KrKuMZ1KBStReyFMTrhMeMgr7monN5uozXSmSM0/J9rzoj K7YKLIa4b5j5+itjJBQUESVC1/Go3xRejV7AhQex+eBftresxz3jW8fe/nxbVbb7 5lGNHdQTbh/cFPcyTc47o+VPVU2qgQFDVTarIESTNQX10mMYEFk8P1NYLdZPUTRY A16F1vrUJsB25Xfj7n3RnoQGwacjBJ4= -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:43 2025 by rpki-client