$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24fc593f-28c5-33af-af65-2fe568cc470f.roa File: 24fc593f-28c5-33af-af65-2fe568cc470f.roa (raw, json) Hash identifier: +vewUlDs7NWzzLhvzDXiL5RkuEXRC+tPQr0Xt5tZsM8= Subject key identifier: 55:17:4A:63:46:65:10:F8:02:1C:8A:39:2E:20:8A:1C:7D:5B:20:0F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B69DF623D7EEA3BE999F13340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24fc593f-28c5-33af-af65-2fe568cc470f.roa Signing time: Sat 04 Oct 2025 20:37:40 +0000 ROA not before: Sat 04 Oct 2025 20:37:40 +0000 ROA not after: Fri 02 Jan 2026 21:37:40 +0000 asID: 15169 IP address blocks: 142.250.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:69:df:62:3d:7e:ea:3b:e9:99:f1:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 20:37:40 2025 GMT Not After : Jan 2 21:37:40 2026 GMT Subject: CN=b175f969-a39f-4891-868a-183bb19b166d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:66:5e:a2:d6:85:0c:07:4d:5d:9e:02:60: e6:8e:2f:07:08:63:e9:91:61:09:55:0f:f2:67:31: fa:45:e5:07:92:80:47:b6:e1:f5:3f:86:68:c1:94: 4b:9a:89:8f:80:96:af:d4:9e:d4:91:8d:d1:59:68: 1f:a9:ad:8e:74:ea:6e:93:78:41:2c:87:cf:50:c4: 1b:68:53:2b:1b:43:a9:3f:e4:94:94:ce:4b:4c:78: bc:4d:c8:9f:c4:ca:62:56:58:23:ef:82:a1:fb:20: 7b:b9:e6:fa:16:25:97:63:44:e8:3a:8e:81:75:31: 92:2c:f8:fa:ce:eb:1b:1b:b2:c8:d7:99:c9:a2:8f: 16:b9:28:b1:19:91:d3:4d:a3:7d:fb:52:ed:d9:07: 2a:a1:94:df:c2:ba:36:ec:49:d6:71:34:80:d4:90: 6a:9f:6c:fb:1d:40:b2:97:1e:c8:f1:db:d5:5c:f1: 1e:5d:36:a3:ab:e7:d5:da:a5:ca:e6:10:3b:b8:a8: e4:11:64:7a:ef:a9:82:7e:a3:ba:f9:16:6a:15:9b: 1a:55:16:9e:51:25:82:20:bd:2a:11:3c:d1:4d:79: b1:73:bd:2e:64:71:8e:63:5a:10:a1:17:6b:3f:c2: 11:a9:38:cb:b7:39:f7:47:15:b8:08:86:24:7a:32: ca:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:17:4A:63:46:65:10:F8:02:1C:8A:39:2E:20:8A:1C:7D:5B:20:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24fc593f-28c5-33af-af65-2fe568cc470f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f4:f1:8f:85:f5:29:c3:23:2d:70:10:4d:2c:b1:6e:f5:c6: 05:d7:17:dd:1d:48:a2:d3:0e:af:d0:9a:f1:cc:d5:d8:53:64: 27:45:d7:41:07:57:af:06:e2:31:a2:c3:48:ac:ec:6e:06:73: 91:7b:f8:0a:f2:15:0b:82:69:a1:c7:2e:d4:7f:a6:40:d5:aa: a9:a9:a4:35:1b:a4:ff:08:e9:4f:7c:7c:34:2a:2c:4e:87:19: 7c:bc:f9:b3:0a:99:01:ee:97:14:80:4f:3b:b7:7a:97:43:96: 93:fa:02:5d:d2:32:75:6d:98:42:d1:8a:56:7c:b4:70:a1:eb: 96:00:95:23:d6:5c:21:7b:16:54:2b:dc:d0:47:a6:eb:c2:7f: 2b:f8:04:f5:55:d0:28:6c:5a:1e:d6:b8:57:a0:7f:db:1d:f6: 30:4d:ce:d7:d5:e2:a2:cc:32:6e:14:82:80:31:1e:d1:f7:08: bb:fc:45:37:d5:46:3c:24:4f:46:df:53:bc:11:f0:a1:93:eb: 89:99:f3:b0:db:54:52:bf:0f:86:3f:d5:e8:d8:0c:61:ff:0b: 0f:20:42:25:1a:9a:85:d1:f9:10:1f:90:4b:97:e5:65:36:7a: 07:c1:fa:da:82:d2:cb:0a:ae:0d:52:29:f3:88:f5:99:d4:8a: 78:28:8c:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtp32I9fuo76ZnxM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDIwMzc0MFoXDTI2MDEwMjIxMzc0MFowLzEtMCsGA1UEAxMk YjE3NWY5NjktYTM5Zi00ODkxLTg2OGEtMTgzYmIxOWIxNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR5mXqLWhQwHTV2eAmDmji8HCGPpkWEJVQ/y ZzH6ReUHkoBHtuH1P4ZowZRLmomPgJav1J7UkY3RWWgfqa2OdOpuk3hBLIfPUMQb aFMrG0OpP+SUlM5LTHi8TcifxMpiVlgj74Kh+yB7ueb6FiWXY0ToOo6BdTGSLPj6 zusbG7LI15nJoo8WuSixGZHTTaN9+1Lt2QcqoZTfwro27EnWcTSA1JBqn2z7HUCy lx7I8dvVXPEeXTajq+fV2qXK5hA7uKjkEWR676mCfqO6+RZqFZsaVRaeUSWCIL0q ETzRTXmxc70uZHGOY1oQoRdrP8IRqTjLtzn3RxW4CIYkejLKMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUXSmNGZRD4AhyKOS4gihx9WyAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjRmYzU5M2YtMjhjNS0z M2FmLWFmNjUtMmZlNTY4Y2M0NzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT08Y+F9SnDIy1wEE0ssW71xgXXF90dSKLTDq/QmvHM1dhTZCdF10EH V68G4jGiw0is7G4Gc5F7+AryFQuCaaHHLtR/pkDVqqmppDUbpP8I6U98fDQqLE6H GXy8+bMKmQHulxSATzu3epdDlpP6Al3SMnVtmELRilZ8tHCh65YAlSPWXCF7FlQr 3NBHpuvCfyv4BPVV0ChsWh7WuFegf9sd9jBNztfV4qLMMm4UgoAxHtH3CLv8RTfV RjwkT0bfU7wR8KGT64mZ87DbVFK/D4Y/1ejYDGH/Cw8gQiUamoXR+RAfkEuX5WU2 egfB+tqC0ssKrg1SKfOI9ZnUingojB4= -----END CERTIFICATE-----Generated at Fri Oct 17 08:39:50 2025 by rpki-client