$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a6e1cd7-cde7-331d-b532-920657d287c0.roa File: 0a6e1cd7-cde7-331d-b532-920657d287c0.roa (raw, json) Hash identifier: Z+DehfefVKafIhnLqNJCoVAiPgHQBOD2ZUMIJJQVU5w= Subject key identifier: A8:CB:12:87:39:68:D5:36:33:A9:74:60:9B:67:08:53:09:64:91:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBFE2B793889CE30C4440 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a6e1cd7-cde7-331d-b532-920657d287c0.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.251.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:bf:e2:b7:93:88:9c:e3:0c:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=0957add8-cc68-4cc9-87aa-cc999277afc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ad:ed:f0:b2:40:1f:00:0f:02:70:2c:e5:aa: 70:72:1a:a7:39:fd:ed:ab:a9:25:43:db:ec:c4:7f: 39:b4:2b:75:ef:33:f2:4c:8d:6e:23:5e:13:d7:cf: 96:f0:6b:b9:69:b4:36:55:6b:4e:3a:a4:b1:52:09: 96:f0:63:0d:f4:68:5f:b9:ff:9a:7a:39:36:d7:4e: f3:91:9f:ff:09:37:22:49:29:c2:8b:57:28:f2:01: 9d:10:b1:1e:81:da:1b:10:c3:c3:b6:7b:29:ea:d4: 62:f2:bd:5a:35:2e:56:1f:99:47:10:4e:ea:b8:cc: 4a:81:b5:05:88:e1:e1:64:83:bf:e1:84:98:41:a2: fc:63:d2:2d:22:ec:7a:ee:fb:db:7b:42:83:56:c5: 8a:90:1e:39:17:55:5e:a1:b4:5d:62:a4:b8:85:40: 17:52:03:5c:bf:43:c0:7d:27:b1:fa:17:ae:42:f5: e9:1c:6c:26:9a:13:89:5f:d9:10:8d:71:04:8e:cc: 98:e6:e3:28:41:1a:e6:cd:ab:92:16:79:3a:8f:a1: a4:93:3b:51:42:58:16:0f:d8:db:10:a3:62:1e:07: 2d:1f:38:d1:07:93:07:eb:ae:60:8c:c5:91:08:c1: 71:7c:46:1a:82:f6:44:48:b2:d8:c9:09:c6:3b:9a: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CB:12:87:39:68:D5:36:33:A9:74:60:9B:67:08:53:09:64:91:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a6e1cd7-cde7-331d-b532-920657d287c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b1:68:f1:0f:65:16:eb:12:88:2b:25:e0:21:b1:6d:08:bc: 24:d0:b2:db:40:a1:dd:3e:44:d0:2e:df:d9:4d:fd:e9:1c:78: 6e:9d:51:6c:4c:6c:7e:1e:c0:b5:08:15:37:be:dd:0f:77:44: b7:cb:ec:2e:75:67:35:e0:76:74:8e:6c:45:d2:76:f8:db:f5: 9e:da:fc:f5:1c:f7:42:66:90:49:74:b5:d3:03:b2:32:8e:d0: 25:ba:1c:24:e5:58:6a:cd:b5:1f:9c:ea:61:67:25:61:76:32: e5:1c:ab:bf:24:d6:97:bd:16:e6:63:1d:ff:ab:e6:da:f2:44: 0b:46:0c:3f:ab:52:2f:ff:2a:41:ae:12:b8:6d:f4:13:49:f1: 84:13:e7:7d:7a:a7:f7:12:18:9e:f5:ed:a7:de:8c:bc:fe:25: 06:19:00:da:58:40:ba:e2:6d:ec:ed:1b:b5:5b:10:2a:3f:e1: cf:80:a2:5a:58:24:9b:40:b3:0f:9c:06:9b:e7:35:c5:11:26: fc:36:38:38:0f:8b:09:ca:91:89:51:ec:c2:48:7d:68:b4:1c: 3a:cb:c7:35:f9:c3:04:fc:b4:5a:cb:f8:3b:47:7c:01:d6:5e: ae:06:a4:d5:0d:ba:46:f5:a9:cd:74:ad:21:ad:32:3b:be:c3: 8e:ac:93:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L/it5OInOMMREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MDk1N2FkZDgtY2M2OC00Y2M5LTg3YWEtY2M5OTkyNzdhZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl63t8LJAHwAPAnAs5apwchqnOf3tq6klQ9vs xH85tCt17zPyTI1uI14T18+W8Gu5abQ2VWtOOqSxUgmW8GMN9Ghfuf+aejk2107z kZ//CTciSSnCi1co8gGdELEegdobEMPDtnsp6tRi8r1aNS5WH5lHEE7quMxKgbUF iOHhZIO/4YSYQaL8Y9ItIux67vvbe0KDVsWKkB45F1VeobRdYqS4hUAXUgNcv0PA fSex+heuQvXpHGwmmhOJX9kQjXEEjsyY5uMoQRrmzauSFnk6j6GkkztRQlgWD9jb EKNiHgctHzjRB5MH665gjMWRCMFxfEYagvZESLLYyQnGO5qkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjLEoc5aNU2M6l0YJtnCFMJZJGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGE2ZTFjZDctY2RlNy0z MzFkLWI1MzItOTIwNjU3ZDI4N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6xaPEPZRbrEogrJeAhsW0IvCTQsttAod0+RNAu39lN/ekceG6dUWxM bH4ewLUIFTe+3Q93RLfL7C51ZzXgdnSObEXSdvjb9Z7a/PUc90JmkEl0tdMDsjKO 0CW6HCTlWGrNtR+c6mFnJWF2MuUcq78k1pe9FuZjHf+r5tryRAtGDD+rUi//KkGu Erht9BNJ8YQT5316p/cSGJ717afejLz+JQYZANpYQLribeztG7VbECo/4c+AolpY JJtAsw+cBpvnNcURJvw2ODgPiwnKkYlR7MJIfWi0HDrLxzX5wwT8tFrL+DtHfAHW Xq4GpNUNukb1qc10rSGtMju+w46sk/I= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:03 2025 by rpki-client