$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa File: 574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa (raw, json) Hash identifier: Vpw1aF1EP1u2CblZ1FHlgSkxwo9Z94d2Dlpo7ajFtH8= Subject key identifier: 2D:20:6D:AD:05:D8:7E:FF:F5:2B:2F:F5:DB:AB:AA:CB:0E:55:8A:F3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A42758FED8A86F8AF50E60900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 142.251.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8f:ed:8a:86:f8:af:50:e6:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=21481a84-bf27-4adf-aa3c-2dd15181aa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:87:e2:ca:71:db:6a:eb:73:5d:7d:b3:90: b3:cb:7b:16:d7:11:eb:ac:2c:d3:4a:14:9a:58:1d: a0:82:e0:a8:e0:70:95:8f:3e:c7:b0:31:fc:d5:0d: da:ce:da:ed:f6:3f:93:81:bb:8c:fb:e1:f6:86:78: 10:e4:68:7d:eb:6b:3d:d8:69:e0:28:35:8c:f7:b8: 02:b9:40:ff:66:f5:76:74:8b:7a:49:95:6c:e1:99: cd:ab:9f:8b:96:79:71:23:d1:e0:92:24:ec:68:50: c3:5e:fd:76:3a:15:6e:57:31:4e:52:ad:8a:21:ef: 28:80:a9:c5:cf:0b:77:a3:b7:f5:2b:83:ed:ef:58: 13:71:3f:ce:9c:4f:04:a1:7a:cc:73:cc:33:05:0b: 2f:f9:90:53:fd:67:da:8c:9d:72:0a:69:36:22:55: ec:10:9e:4a:b9:54:d3:9d:cb:08:ab:0f:33:0f:4d: 4b:15:da:bb:a9:a5:cf:de:61:52:5b:28:d7:9e:9e: e0:07:f6:a8:b9:0a:ce:f9:96:a7:56:73:c8:78:bf: b3:64:bf:f2:10:4f:e4:0e:5f:2e:0d:bb:bd:b9:d9: ea:e1:a1:17:b7:71:f6:01:43:d9:cf:55:fb:00:c2: 23:32:0c:f5:02:a7:82:8c:75:6a:78:e6:93:23:9b: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:20:6D:AD:05:D8:7E:FF:F5:2B:2F:F5:DB:AB:AA:CB:0E:55:8A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:83:89:2c:21:92:04:8d:af:76:3e:9d:72:39:68:0d:98:fa: 97:3a:3a:bf:2b:a0:79:98:3e:76:02:00:57:e7:d3:de:60:f6: 0e:d9:8f:86:c2:68:d4:01:a8:aa:1a:5c:2e:72:52:83:96:2b: b0:00:fd:04:70:f7:1f:91:60:61:9e:80:70:df:61:b9:41:53: 45:b6:22:bd:8f:04:da:f6:88:49:8b:2a:7d:72:99:31:f0:9b: 53:60:50:dd:33:27:8e:b4:f4:1f:da:e4:25:4e:04:55:82:78: 67:19:2c:df:25:23:79:25:fb:89:5c:1f:d9:e4:53:40:13:f7: 50:1d:c0:0c:00:e6:4b:6c:7c:4c:fb:3b:ec:1a:4c:6d:5c:9f: 89:d3:50:f7:1f:e8:2a:58:0a:2e:94:c2:17:24:61:23:22:48: 25:5b:23:0f:d5:29:c2:dd:a1:f0:7b:90:6c:97:00:b4:f2:b7: 6f:03:85:8c:a8:d5:06:f3:7d:50:cb:cc:64:60:87:65:39:f6: a9:0e:53:52:bc:38:da:fd:da:ce:c3:c0:e7:65:67:4b:ed:b4: 6e:51:ea:7c:dd:b3:6c:1d:fa:ad:5a:9a:80:35:09:eb:54:b8: a4:51:fb:5f:48:bd:76:1c:49:4b:43:e7:56:4f:30:d2:ab:94: 0b:06:a2:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdY/tiob4r1DmCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MjE0ODFhODQtYmYyNy00YWRmLWFhM2MtMmRkMTUxODFhYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFGH4spx22rrc119s5Czy3sW1xHrrCzTShSa WB2gguCo4HCVjz7HsDH81Q3aztrt9j+TgbuM++H2hngQ5Gh962s92GngKDWM97gC uUD/ZvV2dIt6SZVs4ZnNq5+LlnlxI9HgkiTsaFDDXv12OhVuVzFOUq2KIe8ogKnF zwt3o7f1K4Pt71gTcT/OnE8EoXrMc8wzBQsv+ZBT/WfajJ1yCmk2IlXsEJ5KuVTT ncsIqw8zD01LFdq7qaXP3mFSWyjXnp7gB/aouQrO+ZanVnPIeL+zZL/yEE/kDl8u Dbu9udnq4aEXt3H2AUPZz1X7AMIjMgz1AqeCjHVqeOaTI5uABwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0gba0F2H7/9Ssv9durqssOVYrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTc0ZDQyYjgtNmJhNi0z ZDI4LThiZmEtM2IxOGE4ZTkxMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvu/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuDiSwhkgSNr3Y+nXI5aA2Y+pc6Or8roHmYPnYCAFfn095g9g7Zj4bC aNQBqKoaXC5yUoOWK7AA/QRw9x+RYGGegHDfYblBU0W2Ir2PBNr2iEmLKn1ymTHw m1NgUN0zJ4609B/a5CVOBFWCeGcZLN8lI3kl+4lcH9nkU0AT91AdwAwA5ktsfEz7 O+waTG1cn4nTUPcf6CpYCi6UwhckYSMiSCVbIw/VKcLdofB7kGyXALTyt28DhYyo 1QbzfVDLzGRgh2U59qkOU1K8ONr92s7DwOdlZ0vttG5R6nzds2wd+q1amoA1CetU uKRR+19IvXYcSUtD51ZPMNKrlAsGojU= -----END CERTIFICATE-----Generated at Mon Jun 30 07:24:30 2025 by rpki-client