$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa File: 9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa (raw, json) Hash identifier: 0hLHi+dkgw5tKnCj3gIbhO3jNKoIP5p+RiRUfmC/l0g= Subject key identifier: 0A:6A:21:7C:E2:1A:F3:39:53:D8:57:BA:80:38:90:20:AE:08:04:9B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A3A157EF6196132BA89586D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 15169 IP address blocks: 142.251.123.0/24 maxlen: 24 142.251.124.0/24 maxlen: 24 142.251.125.0/24 maxlen: 24 142.251.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7e:f6:19:61:32:ba:89:58:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=fc8d6be7-94db-4239-8622-f7a40fbc2f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:fc:7b:dc:65:8b:3a:e1:bc:77:89:92:91: 4f:76:58:66:c2:42:5f:d8:69:87:f3:4e:06:cb:81: 46:b0:e5:3a:5e:39:d9:01:1a:88:c4:95:30:41:23: a8:5b:5d:69:f6:9b:f0:6b:0e:ad:37:55:7f:62:d1: ba:93:42:52:e8:21:34:49:15:d1:fa:2f:4a:9f:5d: 2f:dc:c5:89:ba:bc:61:e6:7d:81:27:89:de:4d:92: 6a:c0:b6:4e:61:f8:1c:6c:ef:85:75:a1:46:b4:b9: ba:0a:17:52:0e:84:e2:2f:4a:ef:65:ed:b4:1b:70: 28:d0:4d:bb:3c:b1:81:19:09:f1:96:1f:cf:45:77: 20:54:c0:02:20:99:84:c9:7b:bf:91:88:1c:9e:c3: 7c:26:d3:7f:08:fd:23:5d:2e:99:63:88:a2:04:cf: c0:51:36:68:f9:80:bf:00:18:34:c3:be:31:21:09: 18:7a:0d:ff:0e:71:1a:22:36:a5:fc:f7:11:59:29: f6:ba:21:f7:63:62:10:2b:1b:77:5f:2d:d2:9d:b8: 88:c8:32:88:ec:4f:d3:85:e4:bb:47:5e:75:76:c0: a1:92:23:96:88:aa:7a:14:61:50:b4:8c:60:dd:ef: 3c:36:ef:ab:5e:cf:a1:f4:9d:73:d6:5e:44:f2:e2: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6A:21:7C:E2:1A:F3:39:53:D8:57:BA:80:38:90:20:AE:08:04:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.123.0-142.251.126.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9b:eb:f4:ad:f6:3a:99:05:57:e4:04:16:09:e0:12:b0:c9: cc:8e:fa:68:ab:d2:4e:64:87:a7:c5:9b:e2:7e:fa:70:19:bc: 4e:2f:06:c8:24:7a:10:1c:1d:86:59:05:ad:0a:0b:64:b7:93: 7a:76:72:df:2a:78:7c:09:b1:f4:37:34:dc:54:ee:9d:48:b2: 7f:1d:4e:22:f8:01:f7:80:65:d7:85:3f:61:e0:d2:23:99:8c: 6e:19:70:83:e5:56:e4:bb:cf:70:17:fe:b2:ed:52:f6:80:87: ec:4b:34:9b:c4:82:51:e0:06:4f:cf:cb:6d:82:ee:78:c5:14: 5d:b3:d8:b4:a8:28:83:60:f2:65:ae:e4:bb:5e:4d:61:54:0f: 7a:57:d1:03:5f:7a:2c:81:fa:f8:ac:51:4c:7d:97:70:37:42: 72:58:f3:99:3a:ae:bf:79:75:c8:64:9d:65:48:a5:e6:b6:2f: 99:2f:52:3c:65:4b:a3:10:67:f2:c7:46:38:ce:4a:48:08:e7: 40:15:11:ea:3a:de:e0:2e:79:90:38:9d:33:08:3a:15:c4:92: 26:e0:2c:54:aa:b1:2e:0f:7c:b9:58:0a:c8:4e:75:c2:3c:4f: 34:14:fb:bd:c6:8b:eb:6b:a0:1e:b8:bd:62:70:50:6b:28:2c: 71:ee:45:ec -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEo6FX72GWEyuolYbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk ZmM4ZDZiZTctOTRkYi00MjM5LTg2MjItZjdhNDBmYmMyZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLb8e9xlizrhvHeJkpFPdlhmwkJf2GmH804G y4FGsOU6XjnZARqIxJUwQSOoW11p9pvwaw6tN1V/YtG6k0JS6CE0SRXR+i9Kn10v 3MWJurxh5n2BJ4neTZJqwLZOYfgcbO+FdaFGtLm6ChdSDoTiL0rvZe20G3Ao0E27 PLGBGQnxlh/PRXcgVMACIJmEyXu/kYgcnsN8JtN/CP0jXS6ZY4iiBM/AUTZo+YC/ ABg0w74xIQkYeg3/DnEaIjal/PcRWSn2uiH3Y2IQKxt3Xy3SnbiIyDKI7E/TheS7 R151dsChkiOWiKp6FGFQtIxg3e88Nu+rXs+h9J1z1l5E8uIX9wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFApqIXziGvM5U9hXuoA4kCCuCASbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWYyOTlmZDItMWE3OC0z OWY2LTlmYjMtNTY3YTZiMDBhZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACO+3sD BACO+34wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAUJvr9K32OpkFV+QEFgngErDJzI76aKvSTmSHp8Wb4n76 cBm8Ti8GyCR6EBwdhlkFrQoLZLeTenZy3yp4fAmx9Dc03FTunUiyfx1OIvgB94Bl 14U/YeDSI5mMbhlwg+VW5LvPcBf+su1S9oCH7Es0m8SCUeAGT8/LbYLueMUUXbPY tKgog2DyZa7ku15NYVQPelfRA196LIH6+KxRTH2XcDdCcljzmTquv3l1yGSdZUil 5rYvmS9SPGVLoxBn8sdGOM5KSAjnQBUR6jre4C55kDidMwg6FcSSJuAsVKqxLg98 uVgKyE51wjxPNBT7vcaL62ugHri9YnBQaygsce5F7A== -----END CERTIFICATE-----Generated at Mon Jun 30 10:33:54 2025 by rpki-client