$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d73c8666-b3f9-3673-a827-bacb6630c255.roa File: d73c8666-b3f9-3673-a827-bacb6630c255.roa (raw, json) Hash identifier: 3cQyNOPprJno+K4h9/NZQ2ZVDvJb1VUHWg29vfwiW2Y= Subject key identifier: 71:E4:4C:89:1E:0E:E8:59:FE:F1:95:A0:52:52:A9:90:F5:44:86:D5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD58645D1CC4E984D39F0F Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d73c8666-b3f9-3673-a827-bacb6630c255.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.251.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:58:64:5d:1c:c4:e9:84:d3:9f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=055e2c7f-9544-49f2-a27b-580dbe07e284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:43:d6:13:2f:bc:1b:1a:94:27:21:89:89: a6:56:3b:79:f9:70:92:2d:1a:1a:c0:df:4c:14:7b: 38:ce:ab:81:54:17:8f:a6:40:8c:30:3a:8a:d3:d4: fa:e3:00:2f:40:6c:9b:f4:da:00:87:fa:00:64:20: 8b:f8:6a:a1:1d:72:43:57:ed:e4:f1:50:ad:56:8f: 2a:33:32:ce:81:88:95:8c:67:9e:12:05:6e:cd:0b: 13:76:aa:83:e4:af:27:9a:e4:62:d4:55:45:67:19: 1d:c6:0f:8f:7b:8e:b6:f9:11:98:6b:50:a0:19:94: 51:4e:8c:98:26:c7:13:c2:d6:e5:dd:8a:0b:9a:a1: 58:9c:ca:35:7e:27:23:55:a0:0a:72:6a:b7:1f:c8: bd:c5:7d:a6:ef:47:76:16:4c:44:28:eb:6a:07:63: 89:17:1d:9a:cb:c9:bb:9d:cd:9f:42:01:d6:7d:4d: 6a:fa:d1:cf:8f:25:76:c6:91:8e:45:88:bd:ee:74: e3:01:b7:e1:d4:60:49:5b:28:e6:9c:47:76:f0:1f: f1:fc:22:8c:c8:83:75:57:5f:de:85:ac:96:d7:17: d4:97:06:68:ea:e8:5c:90:7d:fa:2a:b9:55:c8:6f: 0f:35:10:6d:ee:94:c5:c5:cb:e8:2b:23:8b:e4:0e: 9d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E4:4C:89:1E:0E:E8:59:FE:F1:95:A0:52:52:A9:90:F5:44:86:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d73c8666-b3f9-3673-a827-bacb6630c255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8e:aa:03:60:ef:5e:7f:de:57:3f:bf:02:b4:3f:ef:89:eb: 83:32:62:3a:ae:74:f2:07:94:47:6f:8e:14:21:79:8f:0f:63: c0:0d:12:67:b8:87:c7:7a:58:35:68:b3:1e:c2:46:7b:63:9c: 67:76:01:ab:cd:dd:99:3c:33:aa:90:c1:37:a8:1b:6d:72:4c: d4:f4:7d:f4:8e:c1:74:96:2a:54:50:f1:82:4f:a9:e9:94:07: 38:c2:0b:93:7e:d2:28:83:41:12:61:2e:c9:38:8c:50:08:c8: ef:9a:f7:f2:b5:4f:d5:ca:ab:d0:2d:69:e4:3d:09:31:5b:d3: ef:c0:b6:76:ef:24:84:f2:b0:2a:87:2e:b5:8c:64:b8:d4:3f: 65:49:5a:f6:bd:66:d3:bf:84:84:b7:2b:21:5d:1d:1a:91:f6: 76:b7:41:aa:1d:ab:40:67:91:76:97:62:4a:42:d8:fc:e1:8e: 02:c3:1a:88:23:3f:86:31:3f:72:0c:52:d1:d1:1a:d5:01:67: 41:cb:93:2b:02:37:a7:de:80:97:69:23:2a:dc:0d:b2:c1:37: 79:3f:fc:8f:67:2c:9c:b3:62:5c:59:77:c2:6f:82:d6:2f:80: e3:bb:40:a2:fe:c1:d3:8e:e6:a6:b9:6e:70:f5:8d:e5:7a:ca: 46:c1:f4:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVhkXRzE6YTTnw8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDU1ZTJjN2YtOTU0NC00OWYyLWEyN2ItNTgwZGJlMDdlMjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzARD1hMvvBsalCchiYmmVjt5+XCSLRoawN9M FHs4zquBVBePpkCMMDqK09T64wAvQGyb9NoAh/oAZCCL+GqhHXJDV+3k8VCtVo8q MzLOgYiVjGeeEgVuzQsTdqqD5K8nmuRi1FVFZxkdxg+Pe462+RGYa1CgGZRRToyY JscTwtbl3YoLmqFYnMo1ficjVaAKcmq3H8i9xX2m70d2FkxEKOtqB2OJFx2ay8m7 nc2fQgHWfU1q+tHPjyV2xpGORYi97nTjAbfh1GBJWyjmnEd28B/x/CKMyIN1V1/e hayW1xfUlwZo6uhckH36KrlVyG8PNRBt7pTFxcvoKyOL5A6dVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHkTIkeDuhZ/vGVoFJSqZD1RIbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDczYzg2NjYtYjNmOS0z NjczLWE4MjctYmFjYjY2MzBjMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6OqgNg715/3lc/vwK0P++J64MyYjqudPIHlEdvjhQheY8PY8ANEme4 h8d6WDVosx7CRntjnGd2AavN3Zk8M6qQwTeoG21yTNT0ffSOwXSWKlRQ8YJPqemU BzjCC5N+0iiDQRJhLsk4jFAIyO+a9/K1T9XKq9AtaeQ9CTFb0+/AtnbvJITysCqH LrWMZLjUP2VJWva9ZtO/hIS3KyFdHRqR9na3Qaodq0BnkXaXYkpC2PzhjgLDGogj P4YxP3IMUtHRGtUBZ0HLkysCN6fegJdpIyrcDbLBN3k//I9nLJyzYlxZd8JvgtYv gOO7QKL+wdOO5qa5bnD1jeV6ykbB9FI= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:45 2025 by rpki-client