$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa File: 289e72dc-240a-3333-b80e-6a466f6a78a6.roa (raw, json) Hash identifier: XjYMmTIGc5SOy9nFIlJhVxf3/hqRt9rTkaT2SW9AeMI= Subject key identifier: 45:D6:53:74:7B:45:2A:A3:B8:B8:E5:12:09:30:CF:81:88:11:DC:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECC08448138E773CCBFE00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c0:84:48:13:8e:77:3c:cb:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=a99a4087-664b-4dee-8c52-43ff3fbfc60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:85:40:66:8c:4e:aa:45:b9:5f:09:15:41: 3f:79:13:16:9d:52:c2:62:64:19:74:cd:6e:11:b0: b3:b8:92:a2:df:28:f7:b2:b5:7a:3f:57:d0:d8:ed: 86:f6:d1:c0:f8:55:03:37:b5:e2:1b:4b:ba:38:6e: 04:a9:87:af:f6:5c:99:8b:de:7c:f1:b3:ad:a3:6f: 4e:fd:24:ec:6a:11:2c:a3:11:a2:a7:10:2f:52:d3: b9:83:7c:31:29:90:01:c7:07:5d:85:cf:56:61:a4: c0:d7:85:7c:82:38:4d:e9:68:41:b2:89:27:f5:33: 21:c8:9d:78:5b:fa:da:0b:65:32:97:d4:02:16:b6: f1:f6:f1:b6:45:39:93:c7:45:25:29:8c:4b:02:74: 59:e1:9c:c8:72:e9:15:ac:98:bd:0c:e4:b5:d6:88: e0:2d:6b:3a:e8:2d:60:96:bf:22:87:ee:46:ab:53: 1b:a6:ff:75:c7:1c:b5:a4:ab:ed:f4:e6:12:31:33: 2e:d3:c6:a2:26:36:d5:7b:e3:b8:e7:59:79:03:88: b7:a0:7c:25:ed:a4:9e:df:d7:8f:4e:17:1e:fc:99: f4:2d:50:c1:d5:4f:2d:9d:83:72:7f:33:fa:a4:a5: e4:e5:e3:df:59:d8:1c:e9:f3:70:16:c5:00:42:06: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D6:53:74:7B:45:2A:A3:B8:B8:E5:12:09:30:CF:81:88:11:DC:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:d5:ba:a3:92:c4:56:84:09:c1:e2:5b:2c:40:c6:04:d6:cb: aa:31:38:e2:48:05:0e:76:18:96:c5:25:53:9f:ce:5a:32:c2: 61:8c:c7:13:e3:c9:07:50:24:3c:e5:33:6c:e9:7a:4f:b7:de: 2b:53:4e:6b:00:8d:3f:1b:35:d4:ba:99:a4:f7:f9:28:51:0e: 43:4f:42:01:bf:d7:1c:5c:68:f8:80:53:9e:04:2d:e5:95:9d: 57:13:e6:ae:70:8f:02:ff:1c:00:fa:48:ab:2e:4d:d4:cc:8d: f5:86:cd:44:6b:8c:7b:93:a3:0e:c1:f2:22:71:56:f4:ad:68: dc:54:ce:3d:45:44:c4:ad:fb:b4:11:8f:32:6d:ef:b6:9f:da: cb:6c:cf:ff:93:70:11:8e:1f:d6:2e:04:9b:c1:86:ec:b6:cb: 96:ce:06:4f:eb:46:a6:27:00:9d:a3:3b:e6:5d:b0:73:cb:74: 4c:1c:c2:2b:5e:c0:94:f9:f0:b1:be:dd:77:89:96:9c:b6:e5: 8a:74:49:a2:fe:0d:0d:20:0c:56:f4:08:b8:a7:49:71:7e:4b: 26:e7:d9:af:c6:f8:bf:90:8a:3c:31:8d:1a:2c:3e:60:09:89: 95:9a:80:5b:60:75:c0:b3:0a:3d:2b:6f:86:27:73:2b:23:0f: 18:2d:57:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MCESBOOdzzL/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YTk5YTQwODctNjY0Yi00ZGVlLThjNTItNDNmZjNmYmZjNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1syFQGaMTqpFuV8JFUE/eRMWnVLCYmQZdM1u EbCzuJKi3yj3srV6P1fQ2O2G9tHA+FUDN7XiG0u6OG4EqYev9lyZi9588bOto29O /STsahEsoxGipxAvUtO5g3wxKZABxwddhc9WYaTA14V8gjhN6WhBsokn9TMhyJ14 W/raC2Uyl9QCFrbx9vG2RTmTx0UlKYxLAnRZ4ZzIcukVrJi9DOS11ojgLWs66C1g lr8ih+5Gq1Mbpv91xxy1pKvt9OYSMTMu08aiJjbVe+O451l5A4i3oHwl7aSe39eP Thce/Jn0LVDB1U8tnYNyfzP6pKXk5ePfWdgc6fNwFsUAQgad/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXWU3R7RSqjuLjlEgkwz4GIEdwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg5ZTcyZGMtMjQwYS0z MzMzLWI4MGUtNmE0NjZmNmE3OGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/VuqOSxFaECcHiWyxAxgTWy6oxOOJIBQ52GJbFJVOfzloywmGMxxPj yQdQJDzlM2zpek+33itTTmsAjT8bNdS6maT3+ShRDkNPQgG/1xxcaPiAU54ELeWV nVcT5q5wjwL/HAD6SKsuTdTMjfWGzURrjHuTow7B8iJxVvStaNxUzj1FRMSt+7QR jzJt77af2stsz/+TcBGOH9YuBJvBhuy2y5bOBk/rRqYnAJ2jO+ZdsHPLdEwcwite wJT58LG+3XeJlpy25Yp0SaL+DQ0gDFb0CLinSXF+Sybn2a/G+L+QijwxjRosPmAJ iZWagFtgdcCzCj0rb4YncysjDxgtV6s= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:08 2025 by rpki-client