$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24e5aa84-4bc4-32d3-a298-7375942417e0.roa File: 24e5aa84-4bc4-32d3-a298-7375942417e0.roa (raw, json) Hash identifier: CpXHRua5+CtlTkRwE5VTO/YIQCMSU2z9fxAhpVXITKU= Subject key identifier: BE:A1:88:72:FF:AA:45:58:18:30:C0:2E:34:83:4D:F8:36:04:0A:7C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8412218C6C16A92D49779B40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24e5aa84-4bc4-32d3-a298-7375942417e0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:21:8c:6c:16:a9:2d:49:77:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0f9d86f4-9b89-448a-a154-c3e8395660d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:a3:7b:0c:ad:01:e7:7d:6d:21:2f:60:73: d2:b4:7c:68:bd:46:b7:4a:be:3d:c8:ed:0c:d2:53: db:c2:d5:89:bd:07:2c:10:cd:7e:6e:18:6f:29:a7: 5e:6e:d1:52:55:ae:ca:0c:1d:4b:16:17:22:e2:3f: d3:7a:c5:f1:2e:7d:fe:9d:4f:5d:35:e1:07:e9:ea: 4f:70:ab:b0:22:fa:14:54:4a:df:09:7a:b7:6e:97: f0:7f:9b:26:8c:df:04:30:99:04:b4:a3:d7:27:b8: e9:f0:44:36:12:db:03:55:c9:ae:e0:3f:27:b0:b6: 04:3c:c4:f1:ea:fa:97:66:be:18:e0:06:42:1e:11: 09:9e:d7:1d:61:2b:a1:9a:99:8c:b9:e3:c8:23:a4: e7:bf:85:bf:85:d5:4d:ed:e0:6a:d5:7f:37:ef:71: 81:54:03:7c:5a:79:09:47:82:6f:7e:36:86:e4:49: 1c:94:b1:97:77:14:be:90:35:8d:48:1e:1f:8b:02: e2:5e:b0:15:6d:0a:24:b9:48:8d:ab:d2:e0:93:6b: 62:05:59:80:9d:bc:57:b8:e2:16:6b:44:fb:7b:77: b9:15:de:99:5e:27:ff:2a:8a:4b:f9:81:19:32:9c: 07:62:c3:7b:a5:c4:21:c8:5d:8f:df:af:8a:af:97: 2a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A1:88:72:FF:AA:45:58:18:30:C0:2E:34:83:4D:F8:36:04:0A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24e5aa84-4bc4-32d3-a298-7375942417e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:cc:f6:87:8b:98:48:66:32:86:18:4b:d0:9c:52:d0:22:ba: c5:72:3a:8a:e7:bf:6b:03:d2:c7:f8:29:0d:d2:29:76:95:bd: 3c:e2:39:94:64:19:47:d8:14:86:e0:35:1e:45:29:4b:d2:aa: 5c:f0:e5:45:94:7a:fe:20:83:b4:1a:7e:31:08:6a:44:c3:c2: 6a:fd:48:c2:f3:30:89:c3:a1:a1:96:f4:ec:e0:9e:ca:a9:f4: 97:4f:4b:dd:81:26:d5:9b:4a:34:b5:ff:6e:fb:df:fd:ce:6b: c9:a6:05:6e:92:be:02:0d:bf:a6:0e:5e:38:48:34:dc:92:e9: 2a:19:98:05:4b:a3:c0:95:d0:aa:f2:b2:7c:95:c0:84:51:a3: a5:cf:36:0c:70:68:a4:d7:74:f1:24:33:15:70:26:ec:65:23: 36:0d:de:3d:d9:13:5e:3b:07:38:58:0d:57:43:0d:2a:2e:b1: 62:4a:b5:94:95:b8:33:ab:f2:10:6e:9d:be:43:a8:80:89:64: 09:37:3b:fc:a3:47:e1:84:74:99:92:f5:e8:01:05:c9:9c:81: 21:79:f4:f7:54:ed:0b:22:01:9d:2b:19:de:13:14:62:de:4c: 8e:da:3a:65:17:e8:a8:c7:23:75:be:15:b6:b7:e4:bc:a4:56: dd:1c:7e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiGMbBapLUl3m0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGY5ZDg2ZjQtOWI4OS00NDhhLWExNTQtYzNlODM5NTY2MGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusmjewytAed9bSEvYHPStHxovUa3Sr49yO0M 0lPbwtWJvQcsEM1+bhhvKadebtFSVa7KDB1LFhci4j/TesXxLn3+nU9dNeEH6epP cKuwIvoUVErfCXq3bpfwf5smjN8EMJkEtKPXJ7jp8EQ2EtsDVcmu4D8nsLYEPMTx 6vqXZr4Y4AZCHhEJntcdYSuhmpmMuePII6Tnv4W/hdVN7eBq1X8373GBVAN8WnkJ R4JvfjaG5EkclLGXdxS+kDWNSB4fiwLiXrAVbQokuUiNq9Lgk2tiBVmAnbxXuOIW a0T7e3e5Fd6ZXif/KopL+YEZMpwHYsN7pcQhyF2P36+Kr5cqFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6hiHL/qkVYGDDALjSDTfg2BAp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjRlNWFhODQtNGJjNC0z MmQzLWEyOTgtNzM3NTk0MjQxN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHM9oeLmEhmMoYYS9CcUtAiusVyOornv2sD0sf4KQ3SKXaVvTziOZRk GUfYFIbgNR5FKUvSqlzw5UWUev4gg7QafjEIakTDwmr9SMLzMInDoaGW9Ozgnsqp 9JdPS92BJtWbSjS1/2773/3Oa8mmBW6SvgINv6YOXjhINNyS6SoZmAVLo8CV0Kry snyVwIRRo6XPNgxwaKTXdPEkMxVwJuxlIzYN3j3ZE147BzhYDVdDDSousWJKtZSV uDOr8hBunb5DqICJZAk3O/yjR+GEdJmS9egBBcmcgSF59PdU7QsiAZ0rGd4TFGLe TI7aOmUX6KjHI3W+Fba35LykVt0cfrM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:37:26 2025 by rpki-client