$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0e7fa46b-74eb-3175-802d-62df1b601831.roa File: 0e7fa46b-74eb-3175-802d-62df1b601831.roa (raw, json) Hash identifier: IJyObSLu/yNF9/UrxUOD9wQYCPhy1cL4sWQxW4/Z25Y= Subject key identifier: 42:A3:71:BB:75:55:2B:C5:0B:43:34:32:92:95:F9:2F:1B:F4:A7:34 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE158B057806382C1EDAC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0e7fa46b-74eb-3175-802d-62df1b601831.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:15:8b:05:78:06:38:2c:1e:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a04f6028-7c50-4c2e-b8aa-505e40f12205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e1:53:02:81:02:4a:7a:50:77:cf:0f:70:40: 33:c9:4e:9e:5e:8a:2e:62:2d:fa:21:3d:50:aa:e8: e7:e2:92:f9:ff:c3:74:f0:07:a6:d3:d6:68:99:e2: 18:b9:b5:ce:07:9f:7a:65:08:2c:c6:e7:37:62:0d: 2e:2e:c4:71:f3:bf:4f:8d:ca:4f:9f:55:ba:47:41: e9:46:ec:23:91:4f:9c:f0:1a:5e:ff:50:43:9c:33: 5e:34:f9:8d:1e:00:7f:d0:c5:52:ed:c2:8f:17:a9: 9a:42:de:33:d6:2c:f5:e6:b1:05:66:2f:ab:c2:01: 07:21:b7:78:03:e2:6a:bc:77:91:2c:36:51:ff:71: f5:ee:63:6d:d9:45:d1:b9:b4:45:90:f7:5f:b0:4b: 67:d9:bc:c6:16:df:54:fa:fb:22:87:d9:83:f5:d4: 88:4f:43:6f:07:ba:d0:25:fa:75:f9:07:74:d2:9f: 1b:23:45:04:e0:94:7b:18:67:9d:61:9b:01:b3:d6: 2e:3b:0e:5b:a8:6d:1d:4f:44:70:16:59:be:e8:3e: f8:85:c8:83:b7:1f:35:7e:15:36:23:d0:92:ce:15: ad:cf:c8:bb:75:58:86:b4:90:4d:7d:93:bb:bb:3d: 44:e7:be:f6:45:15:a9:c5:05:48:7c:9e:55:66:00: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:71:BB:75:55:2B:C5:0B:43:34:32:92:95:F9:2F:1B:F4:A7:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0e7fa46b-74eb-3175-802d-62df1b601831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c6:4b:68:40:50:ff:7a:1e:16:5e:57:81:a4:6a:85:fa:90: fb:79:6e:7a:ed:6a:ad:2f:9f:82:93:5e:cd:cb:23:b0:d3:53: 21:6f:07:10:e5:bc:37:13:09:c6:97:43:82:72:0e:1a:f3:91: 1a:16:68:61:ff:9a:36:6a:25:ff:81:d3:93:77:22:c0:88:3c: 2a:e9:b7:bd:73:8d:20:30:f7:a1:61:29:83:50:e6:01:59:b3: 39:c6:a5:ce:2b:e3:69:ca:00:40:7d:19:a1:59:f1:5a:4c:45: 91:47:75:b8:2c:b1:66:73:1c:30:72:47:98:c6:07:43:b4:23: 91:1d:a2:96:c4:c0:cc:68:fb:cf:02:00:6b:33:43:3d:b3:e6: c9:32:4e:29:37:b0:45:4e:d6:93:48:34:b0:be:30:25:a3:b0: e2:9c:fd:26:72:0e:db:bd:b9:78:d1:55:43:83:5d:a1:df:ef: 67:27:20:90:82:23:bf:cd:3d:46:d6:a9:52:22:21:00:14:c7: ed:3a:16:7e:e7:09:2f:ed:48:b1:ca:50:26:5a:67:86:96:76: 39:f1:3d:b8:af:44:0a:41:d9:d2:87:7e:9c:e9:5d:ce:f5:bd: f3:b8:29:ce:df:49:ed:34:47:53:c6:14:8f:89:67:f5:67:d3: e3:9f:46:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhWLBXgGOCwe2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTA0ZjYwMjgtN2M1MC00YzJlLWI4YWEtNTA1ZTQwZjEyMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+FTAoECSnpQd88PcEAzyU6eXoouYi36IT1Q qujn4pL5/8N08Aem09ZomeIYubXOB596ZQgsxuc3Yg0uLsRx879PjcpPn1W6R0Hp RuwjkU+c8Bpe/1BDnDNeNPmNHgB/0MVS7cKPF6maQt4z1iz15rEFZi+rwgEHIbd4 A+JqvHeRLDZR/3H17mNt2UXRubRFkPdfsEtn2bzGFt9U+vsih9mD9dSIT0NvB7rQ Jfp1+Qd00p8bI0UE4JR7GGedYZsBs9YuOw5bqG0dT0RwFlm+6D74hciDtx81fhU2 I9CSzhWtz8i7dViGtJBNfZO7uz1E5772RRWpxQVIfJ5VZgB+wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKjcbt1VSvFC0M0MpKV+S8b9Kc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGU3ZmE0NmItNzRlYi0z MTc1LTgwMmQtNjJkZjFiNjAxODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnGS2hAUP96HhZeV4GkaoX6kPt5bnrtaq0vn4KTXs3LI7DTUyFvBxDl vDcTCcaXQ4JyDhrzkRoWaGH/mjZqJf+B05N3IsCIPCrpt71zjSAw96FhKYNQ5gFZ sznGpc4r42nKAEB9GaFZ8VpMRZFHdbgssWZzHDByR5jGB0O0I5EdopbEwMxo+88C AGszQz2z5skyTik3sEVO1pNINLC+MCWjsOKc/SZyDtu9uXjRVUODXaHf72cnIJCC I7/NPUbWqVIiIQAUx+06Fn7nCS/tSLHKUCZaZ4aWdjnxPbivRApB2dKHfpzpXc71 vfO4Kc7fSe00R1PGFI+JZ/Vn0+OfRng= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:37 2025 by rpki-client