$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa File: 967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa (raw, json) Hash identifier: lxgL7oo5kzjsN79+ay43rF179I4s54w+pXZVip+ZpLQ= Subject key identifier: AE:DA:6C:1E:79:37:FB:63:67:88:28:83:8D:3B:0B:70:53:B1:FA:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849BDDA36822AF2D854255E8E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 15169 IP address blocks: 142.251.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:36:82:2a:f2:d8:54:25:5e:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=580a0448-6c7b-44fe-b3d1-4b8958fe545e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:d0:1f:5a:63:86:a3:15:ca:55:7f:54:6f: 79:ab:30:cc:a7:d8:1e:66:2e:7a:92:8a:23:50:a4: db:a9:5c:66:c6:69:e5:db:8a:1a:5e:d4:b4:e5:d1: f6:5b:75:3a:8b:af:4b:77:22:7d:3f:1c:47:7a:4c: 87:48:1c:75:01:3a:29:6c:55:39:38:57:60:44:8f: 99:0e:41:ce:63:10:0f:34:5e:9a:ee:a3:60:bd:fa: 77:f5:62:fc:f4:f6:4d:73:0f:60:3a:f0:77:21:d4: 5e:ec:d9:c8:19:8c:fe:2f:8e:ec:9d:7d:83:8f:76: e2:c7:a8:a3:ad:0b:e0:6f:75:03:e4:8f:1e:8d:61: d3:e4:36:06:d5:06:62:7e:c8:1e:6e:d8:06:da:d9: 7a:a3:71:f5:6c:f4:15:2d:8d:99:b1:e4:7c:28:94: d0:c7:be:f8:a1:c3:9a:8c:ee:af:76:c9:b9:f2:91: 83:da:1e:2e:b2:37:0d:bd:bb:5a:11:80:7a:5b:0b: e4:90:12:8c:61:a3:2b:8d:6c:c6:19:90:8e:63:9f: 29:c6:54:4a:99:15:f5:7e:19:2c:f9:33:5f:6d:7f: 75:2c:16:9b:25:71:13:e1:80:0d:f7:31:f4:7f:78: 46:05:57:ce:c1:1e:24:56:88:1f:5c:ec:5a:5f:89: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DA:6C:1E:79:37:FB:63:67:88:28:83:8D:3B:0B:70:53:B1:FA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1a:5f:fb:f0:4b:c0:2d:15:3f:e0:32:d4:17:27:1e:86:a6: 24:f0:67:c3:57:45:d7:b0:39:17:e3:bd:b6:ab:20:ee:2a:8e: c7:41:17:60:b0:a3:76:80:44:b9:46:dd:9c:c0:9d:ab:4a:c3: 6c:52:75:68:ca:4d:ff:5c:2e:ba:36:83:00:0f:73:5f:52:b0: b4:2d:8f:c4:bc:d6:55:18:ec:d3:73:cc:b1:6c:cb:40:dd:f8: 88:68:b7:e6:90:ca:55:f6:7f:01:4b:42:77:38:bc:00:95:95: 59:46:4b:ea:c3:76:cf:04:e0:83:c7:ed:90:91:7e:6b:9a:fa: 1b:ce:e8:d6:bc:c8:24:fe:51:e6:b3:c5:b0:53:69:32:b2:0a: 41:ee:69:f2:6d:02:f0:01:fc:0b:73:8c:da:92:34:61:d3:20: 08:c2:8f:5e:6e:4e:91:c4:49:89:22:1f:a2:ce:fc:27:1f:16: e6:ea:43:2a:51:8f:7d:8d:84:da:f0:99:20:17:c1:89:0e:e4: 5b:ae:7f:85:7c:26:12:14:39:0e:e2:7d:77:4e:9e:8e:24:fd: 87:dc:db:ad:0b:d1:43:d1:43:df:52:55:48:f4:a8:90:50:28: 05:f0:45:d2:82:31:67:f8:ec:15:2c:d6:d8:5a:82:02:7c:db: 84:9c:30:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jaCKvLYVCVejgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NTgwYTA0NDgtNmM3Yi00NGZlLWIzZDEtNGI4OTU4ZmU1NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09nQH1pjhqMVylV/VG95qzDMp9geZi56kooj UKTbqVxmxmnl24oaXtS05dH2W3U6i69LdyJ9PxxHekyHSBx1ATopbFU5OFdgRI+Z DkHOYxAPNF6a7qNgvfp39WL89PZNcw9gOvB3IdRe7NnIGYz+L47snX2Dj3bix6ij rQvgb3UD5I8ejWHT5DYG1QZifsgebtgG2tl6o3H1bPQVLY2ZseR8KJTQx774ocOa jO6vdsm58pGD2h4usjcNvbtaEYB6WwvkkBKMYaMrjWzGGZCOY58pxlRKmRX1fhks +TNfbX91LBabJXET4YAN9zH0f3hGBVfOwR4kVogfXOxaX4nblwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7abB55N/tjZ4gog407C3BTsfpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTY3ZTk5MmMtMzZmNS0z MmQ1LWFlNWEtODJhNTJiOWY2YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0aX/vwS8AtFT/gMtQXJx6GpiTwZ8NXRdewORfjvbarIO4qjsdBF2Cw o3aARLlG3ZzAnatKw2xSdWjKTf9cLro2gwAPc19SsLQtj8S81lUY7NNzzLFsy0Dd +Ihot+aQylX2fwFLQnc4vACVlVlGS+rDds8E4IPH7ZCRfmua+hvO6Na8yCT+Ueaz xbBTaTKyCkHuafJtAvAB/AtzjNqSNGHTIAjCj15uTpHESYkiH6LO/CcfFubqQypR j32NhNrwmSAXwYkO5Fuuf4V8JhIUOQ7ifXdOno4k/Yfc260L0UPRQ99SVUj0qJBQ KAXwRdKCMWf47BUs1thaggJ824ScMIk= -----END CERTIFICATE-----Generated at Mon Jun 30 10:36:11 2025 by rpki-client