$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa File: 589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa (raw, json) Hash identifier: FJBHpN6S7zfMADXjNbF3HhnVhayb282Di+1p3AQXG5c= Subject key identifier: 6B:0F:A5:12:9F:F9:F4:01:32:A1:BB:DC:01:F5:14:65:7E:AA:60:85 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE172E98F3B56457016B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:17:2e:98:f3:b5:64:57:01:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=832e2334-a629-42eb-a683-20a8fc8da37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:69:bd:01:7f:8a:de:ee:0b:25:bd:56:b9: 9f:42:cb:cf:4f:57:fa:0f:a9:a2:d1:57:e3:6d:27: 02:1a:f3:ea:26:09:c1:9e:83:13:1b:c4:61:f4:d6: e8:16:f6:62:61:d2:c0:49:ca:34:e9:01:e5:af:32: 4f:49:70:7a:e0:38:3a:47:2e:4c:be:34:97:f9:dd: ae:86:bf:92:27:dc:ea:c3:b4:8d:0f:e2:29:c2:b5: ae:6a:1a:28:e4:4d:87:bd:28:7a:e7:bc:07:da:7f: e9:b0:7a:84:34:df:3d:fd:ea:cf:90:f6:9c:ab:a9: b2:dc:b1:ec:a0:cf:fb:40:c4:8d:6f:7d:cb:40:a6: ea:eb:e6:b4:12:6a:0c:78:26:7d:0a:b0:15:28:ea: 21:c2:a2:0a:8d:1d:ef:05:c1:27:90:66:db:ea:53: 78:82:b0:57:76:d7:78:8c:58:90:99:6a:33:45:13: 84:d5:b5:c0:bf:99:d7:e3:c0:3a:ce:05:31:f6:32: 26:db:4a:33:ae:34:bd:44:89:0c:78:70:b7:a7:aa: fd:67:8c:c3:09:3c:2a:f2:79:ac:62:14:d6:ec:19: 8c:4f:1b:90:0d:1f:9c:6f:f8:5a:fd:aa:d3:85:b6: b1:b3:fe:b9:26:86:f7:10:08:6d:8e:70:71:78:a3: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0F:A5:12:9F:F9:F4:01:32:A1:BB:DC:01:F5:14:65:7E:AA:60:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b4:9f:4d:90:43:7b:8c:e5:60:25:2d:99:41:7e:fb:33:64: 09:4d:30:07:cc:0b:26:f2:2f:1e:15:97:6b:8f:d1:b4:9d:76: de:30:fb:a0:af:a5:b0:b1:65:f9:af:15:a5:6f:40:ff:bc:b1: 60:0b:b6:40:88:57:cf:c9:e0:c7:45:dd:1b:da:02:12:a1:56: 87:5d:70:58:fe:57:37:01:a6:72:05:aa:49:45:e6:46:6a:a9: ba:0a:31:42:a8:a9:97:99:d4:28:25:26:81:60:7d:40:c5:6e: 43:cf:98:84:27:54:79:60:38:67:d6:07:2a:a8:cb:b7:39:1d: 6f:4d:e3:b6:8e:b8:f3:ff:cf:e4:f8:b4:23:08:23:f8:3c:6f: 75:fa:d1:6d:c0:ef:a8:1d:36:ec:af:cc:8e:cc:29:22:86:fe: a7:7d:30:fe:2f:af:6c:07:5b:6d:5a:2c:a1:5d:f5:cb:75:96: 80:76:f6:3d:bf:a3:6d:7e:65:1e:49:d9:35:9c:73:f0:6e:38: 94:3e:25:5f:1f:0b:88:af:34:64:0a:fc:1b:6b:b9:60:d9:cb: b7:0f:f8:d5:8b:13:97:4e:b9:38:6c:44:47:bc:af:f2:a9:fa: 4e:ca:6a:50:3f:d0:e4:ea:88:a3:23:c5:c5:c3:3a:cb:f9:4c: 52:be:9e:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhcumPO1ZFcBa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODMyZTIzMzQtYTYyOS00MmViLWE2ODMtMjBhOGZjOGRhMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXNpvQF/it7uCyW9VrmfQsvPT1f6D6mi0Vfj bScCGvPqJgnBnoMTG8Rh9NboFvZiYdLASco06QHlrzJPSXB64Dg6Ry5MvjSX+d2u hr+SJ9zqw7SND+IpwrWuahoo5E2HvSh657wH2n/psHqENN89/erPkPacq6my3LHs oM/7QMSNb33LQKbq6+a0EmoMeCZ9CrAVKOohwqIKjR3vBcEnkGbb6lN4grBXdtd4 jFiQmWozRROE1bXAv5nX48A6zgUx9jIm20ozrjS9RIkMeHC3p6r9Z4zDCTwq8nms YhTW7BmMTxuQDR+cb/ha/arThbaxs/65Job3EAhtjnBxeKO9MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsPpRKf+fQBMqG73AH1FGV+qmCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg5ZGQ5N2QtZGNkYi0z ZGFjLTk5ZTctYjY3OGE3ZWEzYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvphMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa0n02QQ3uM5WAlLZlBfvszZAlNMAfMCybyLx4Vl2uP0bSddt4w+6Cv pbCxZfmvFaVvQP+8sWALtkCIV8/J4MdF3RvaAhKhVoddcFj+VzcBpnIFqklF5kZq qboKMUKoqZeZ1CglJoFgfUDFbkPPmIQnVHlgOGfWByqoy7c5HW9N47aOuPP/z+T4 tCMII/g8b3X60W3A76gdNuyvzI7MKSKG/qd9MP4vr2wHW21aLKFd9ct1loB29j2/ o21+ZR5J2TWcc/BuOJQ+JV8fC4ivNGQK/BtruWDZy7cP+NWLE5dOuThsREe8r/Kp +k7KalA/0OTqiKMjxcXDOsv5TFK+nns= -----END CERTIFICATE-----Generated at Fri Oct 17 10:46:29 2025 by rpki-client