$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdb92959-bfed-393f-b7c3-a78bc25f3869.roa File: bdb92959-bfed-393f-b7c3-a78bc25f3869.roa (raw, json) Hash identifier: /YngVAWIWoxAc7ZpaXwKd5ApWwtWXOldmncvY8c1bX8= Subject key identifier: D8:C2:A1:23:34:3A:B1:34:4E:C5:FF:66:FE:44:8B:D7:43:03:2B:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841181F3DD5BDE4856C9ADD0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdb92959-bfed-393f-b7c3-a78bc25f3869.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 142.251.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:81:f3:dd:5b:de:48:56:c9:ad:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c28e0751-66bf-4191-aa4b-551a7126721f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:bc:02:14:50:59:7e:bc:a6:cc:7e:ae:2b: e3:16:3f:22:4a:43:e7:52:58:52:a2:c2:03:cb:cb: ca:ad:51:db:b0:1f:c4:99:10:4e:f7:b9:60:b1:76: d8:01:3f:44:9a:52:a7:f5:90:82:ae:3b:27:d5:45: 48:aa:c6:2f:cf:c3:45:b4:23:e9:d8:04:00:a8:e6: 17:a3:49:ea:80:fb:e4:3a:56:5f:5b:80:5b:c3:36: b0:2d:bb:00:50:62:44:45:d7:66:86:23:65:dd:af: c2:f1:d7:96:e9:ec:61:c1:7f:9c:f0:3a:54:aa:df: 5b:5d:e2:65:01:55:04:de:9b:f3:90:3e:37:93:5c: a3:4c:56:2b:41:a1:7b:1b:c7:af:a5:58:8f:cb:51: f7:9f:71:11:9b:4a:3b:ad:40:32:b7:a7:26:1f:60: 74:d8:2d:0a:22:98:8f:6b:69:c4:f4:37:4c:e0:ed: b8:45:83:6e:ae:83:be:9e:e1:a9:71:e5:b7:29:29: d0:6c:39:de:38:36:b1:9a:93:6a:09:21:b4:d3:e3: a9:eb:32:2e:dc:f7:9d:d5:3a:78:a7:e5:5e:d8:6e: e3:3c:50:93:86:81:b5:a7:b2:fe:23:9f:79:e9:d2: d0:17:1a:6a:02:d1:0a:4f:a7:51:e7:d4:35:0d:5d: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C2:A1:23:34:3A:B1:34:4E:C5:FF:66:FE:44:8B:D7:43:03:2B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdb92959-bfed-393f-b7c3-a78bc25f3869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:5b:87:75:26:8e:6b:d4:44:78:70:a1:6b:55:05:05:8c:b4: 8a:91:d8:fa:c5:34:35:7f:30:47:37:c6:69:7b:c3:1b:43:be: 72:bd:56:89:28:cb:53:6f:cb:a1:00:97:9b:73:dd:53:e9:8a: 73:b6:c1:e7:92:01:91:86:ba:10:11:eb:0c:90:1b:49:6e:e2: 24:d8:f4:d0:33:79:63:9b:9a:3e:f5:8d:2c:a6:13:54:2e:c6: b4:02:0b:a0:c9:7a:72:8e:5d:f3:79:2e:12:23:72:9a:b1:62: 22:94:57:8a:cc:70:15:5d:c2:f8:16:75:48:d8:c3:b0:e6:7d: 90:6d:d5:8d:c7:99:f3:76:37:e0:b2:70:f0:fd:2a:71:12:b0: fd:d0:8c:5e:b6:97:02:ee:dc:01:62:68:0a:af:de:cf:6a:14: 1a:7a:12:41:b0:8f:0f:df:0c:25:dc:3a:6b:4b:d5:b5:67:d0: d7:55:56:f5:a7:b5:e9:be:38:ad:4a:ff:41:03:6d:6d:6a:f6: bf:e6:55:1b:7b:dc:f7:98:b1:79:68:f8:93:da:93:d3:09:7a: 58:2b:84:d9:70:c4:6a:e8:a0:ed:80:fe:4a:d3:86:15:17:af: 33:1b:5c:8d:2a:56:b4:67:ef:7a:80:5a:42:75:7c:a7:19:27: f8:12:4e:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYHz3VveSFbJrdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzI4ZTA3NTEtNjZiZi00MTkxLWFhNGItNTUxYTcxMjY3MjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuna8AhRQWX68psx+rivjFj8iSkPnUlhSosID y8vKrVHbsB/EmRBO97lgsXbYAT9EmlKn9ZCCrjsn1UVIqsYvz8NFtCPp2AQAqOYX o0nqgPvkOlZfW4BbwzawLbsAUGJERddmhiNl3a/C8deW6exhwX+c8DpUqt9bXeJl AVUE3pvzkD43k1yjTFYrQaF7G8evpViPy1H3n3ERm0o7rUAyt6cmH2B02C0KIpiP a2nE9DdM4O24RYNuroO+nuGpceW3KSnQbDneODaxmpNqCSG00+Op6zIu3Ped1Tp4 p+Ve2G7jPFCThoG1p7L+I5956dLQFxpqAtEKT6dR59Q1DV11XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjCoSM0OrE0TsX/Zv5Ei9dDAyspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmRiOTI5NTktYmZlZC0z OTNmLWI3YzMtYTc4YmMyNWYzODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxbh3UmjmvURHhwoWtVBQWMtIqR2PrFNDV/MEc3xml7wxtDvnK9Voko y1Nvy6EAl5tz3VPpinO2weeSAZGGuhAR6wyQG0lu4iTY9NAzeWObmj71jSymE1Qu xrQCC6DJenKOXfN5LhIjcpqxYiKUV4rMcBVdwvgWdUjYw7DmfZBt1Y3HmfN2N+Cy cPD9KnESsP3QjF62lwLu3AFiaAqv3s9qFBp6EkGwjw/fDCXcOmtL1bVn0NdVVvWn tem+OK1K/0EDbW1q9r/mVRt73PeYsXlo+JPak9MJelgrhNlwxGrooO2A/krThhUX rzMbXI0qVrRn73qAWkJ1fKcZJ/gSThw= -----END CERTIFICATE-----Generated at Sat Aug 23 13:37:19 2025 by rpki-client