$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa File: 4af43742-c872-3d5e-a21f-1c5ec5858071.roa (raw, json) Hash identifier: 3HRv068hG1N2UtIkzXGITttFzdVQoNAmLZ5wiWTUhZg= Subject key identifier: 58:2A:F2:91:06:68:22:45:D0:67:21:29:EB:73:5B:7D:7E:2F:82:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE2A8FE8B3795B3F4FDA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2a:8f:e8:b3:79:5b:3f:4f:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=72564891-b958-4e31-a007-f9cd5a74a711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:a3:8a:8e:44:7c:08:e9:4e:00:13:3f:80: ad:23:27:48:ba:2f:bd:c3:64:b1:a1:f9:64:04:de: d2:dd:4b:37:d5:87:2d:17:4b:3c:5e:95:3b:61:fa: 88:a6:bb:39:a5:11:65:17:72:eb:d7:88:2f:4c:cb: 20:4b:0d:ef:64:87:0e:90:e0:d6:83:a6:04:e0:a8: ac:4b:1c:10:da:f7:90:7f:9d:dc:d1:af:0b:c8:2e: 68:45:54:69:15:70:cb:a9:bf:0b:62:0f:93:8a:52: ef:a4:cb:58:a8:c5:fd:19:0d:de:24:ad:86:67:8c: 23:9e:f6:00:1b:3f:4e:82:d5:dc:39:fe:6a:77:0b: 5e:72:8f:f4:5e:f3:3b:04:fa:1d:4a:00:97:70:6a: 56:0a:62:86:8d:c5:5a:ea:38:c9:d0:91:57:d2:62: 73:f7:a9:b9:84:24:6a:58:67:94:90:db:fd:f8:4e: f0:b5:6f:bc:91:47:18:67:6d:72:7c:6e:0e:b6:77: b3:51:42:d9:f4:e1:06:9d:57:cf:17:fe:bd:c1:50: 8b:c5:0b:09:ce:61:0c:8b:3e:c7:ce:59:01:74:6c: 69:fc:fc:9a:c5:56:cc:5c:04:14:a3:7e:6c:ff:62: e4:b4:c4:a6:1f:48:d3:fa:f7:55:a0:82:92:a4:d3: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:F2:91:06:68:22:45:D0:67:21:29:EB:73:5B:7D:7E:2F:82:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4af43742-c872-3d5e-a21f-1c5ec5858071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:49:e9:fb:b6:26:c6:09:ec:e7:b4:91:b8:6a:69:2b:af:e6: 90:69:b3:49:63:80:46:ff:92:25:f8:bd:76:25:97:56:24:7e: 87:90:ba:56:12:e2:40:0d:36:75:d0:0c:6a:ee:a7:2e:c7:76: 81:03:44:a2:54:7c:da:cf:b4:37:c7:f2:46:10:0b:bb:c3:de: 83:4e:b9:95:a5:23:b8:9f:60:18:6a:16:a6:14:5f:19:f7:13: b6:31:97:f0:90:3f:97:4e:17:4f:0e:75:f3:1a:8f:f0:cd:34: 28:a9:aa:55:a4:cb:5e:9b:30:22:1d:3d:06:ca:ac:4b:5f:9f: 78:dc:5e:95:e3:90:51:27:7b:75:dc:07:23:ed:64:02:a5:64: 17:38:49:80:2b:06:bd:bc:bd:70:a2:d3:c1:ec:ad:5e:cc:28: f3:30:bd:f2:96:50:b0:17:8b:1c:70:f7:4e:c8:ae:8c:09:93: 40:f1:4d:b7:71:83:a4:ea:cb:88:86:3f:53:4c:4f:23:20:3d: c2:3b:56:93:20:cc:34:ed:90:35:87:62:39:27:fb:f4:da:9b: 55:5b:95:67:2f:b7:f1:21:69:e5:70:d4:29:72:ad:a7:46:a2: 6e:9c:83:b4:02:ce:ea:b2:67:64:01:45:97:27:66:bd:39:da: d5:c3:cd:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziqP6LN5Wz9P2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzI1NjQ4OTEtYjk1OC00ZTMxLWEwMDctZjljZDVhNzRhNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PWjio5EfAjpTgATP4CtIydIui+9w2Sxoflk BN7S3Us31YctF0s8XpU7YfqIprs5pRFlF3Lr14gvTMsgSw3vZIcOkODWg6YE4Kis SxwQ2veQf53c0a8LyC5oRVRpFXDLqb8LYg+TilLvpMtYqMX9GQ3eJK2GZ4wjnvYA Gz9OgtXcOf5qdwteco/0XvM7BPodSgCXcGpWCmKGjcVa6jjJ0JFX0mJz96m5hCRq WGeUkNv9+E7wtW+8kUcYZ21yfG4OtnezUULZ9OEGnVfPF/69wVCLxQsJzmEMiz7H zlkBdGxp/PyaxVbMXAQUo35s/2LktMSmH0jT+vdVoIKSpNOwxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgq8pEGaCJF0GchKetzW31+L4JWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGFmNDM3NDItYzg3Mi0z ZDVlLWEyMWYtMWM1ZWM1ODU4MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBJ6fu2JsYJ7Oe0kbhqaSuv5pBps0ljgEb/kiX4vXYll1YkfoeQulYS 4kANNnXQDGrupy7HdoEDRKJUfNrPtDfH8kYQC7vD3oNOuZWlI7ifYBhqFqYUXxn3 E7Yxl/CQP5dOF08OdfMaj/DNNCipqlWky16bMCIdPQbKrEtfn3jcXpXjkFEne3Xc ByPtZAKlZBc4SYArBr28vXCi08HsrV7MKPMwvfKWULAXixxw907IrowJk0DxTbdx g6Tqy4iGP1NMTyMgPcI7VpMgzDTtkDWHYjkn+/Tam1VblWcvt/EhaeVw1ClyradG om6cg7QCzuqyZ2QBRZcnZr052tXDzYY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:46 2025 by rpki-client