$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d7b8054-bb13-3ed2-8a2c-ab85ed95c11a.roa File: 6d7b8054-bb13-3ed2-8a2c-ab85ed95c11a.roa (raw, json) Hash identifier: I+v3daqSl4iRPtlb9b7s4DtqaFLR9r/QlGZbRqEeMMY= Subject key identifier: 26:D1:27:66:9B:BD:6C:40:0B:33:AF:B2:42:64:AB:EF:D0:86:78:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB6835AF579163E708040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d7b8054-bb13-3ed2-8a2c-ab85ed95c11a.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b6:83:5a:f5:79:16:3e:70:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=f8cfa844-c57f-4b44-a9d9-9de12b5476bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:0a:a8:df:ce:fa:d1:62:17:57:7a:6b:83: 80:47:4b:ec:99:64:c3:c6:00:16:84:c9:b4:f5:09: 09:09:27:1f:c6:11:89:60:d2:1e:cb:79:80:53:ff: a6:b6:6c:ac:02:55:53:bc:6c:75:41:c3:66:81:72: e5:2e:4b:a3:fe:2b:aa:70:2f:72:48:e4:1e:0e:cd: 87:91:22:17:bb:d2:52:07:f1:b3:80:43:b6:fb:44: db:85:02:ba:f3:97:4d:ef:c8:da:76:e1:f7:22:10: 11:be:86:22:7f:f5:67:24:43:30:f1:a5:0a:8b:86: 42:95:ee:c9:67:7d:ff:e0:8c:59:19:3d:67:34:ab: 78:59:cc:60:34:fc:ed:e0:ae:3a:ca:4b:37:e6:87: ca:a6:63:55:2d:f8:bf:9c:55:76:f2:84:3b:a8:77: 08:f5:6a:4e:36:73:32:4f:e5:08:85:c3:44:a0:cb: a0:94:a8:61:ff:18:7c:0d:b0:fd:5a:c0:96:b0:80: 3e:87:8a:67:c9:73:62:82:d0:bd:21:e0:09:40:84: 8a:e0:68:fd:43:ba:09:70:8c:10:d1:b0:e6:a6:54: 01:a6:d5:18:94:5a:c9:25:d7:b3:a1:c1:40:e9:09: 3f:60:fa:ed:53:2c:de:4f:a8:28:a3:de:e7:04:5c: 0d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D1:27:66:9B:BD:6C:40:0B:33:AF:B2:42:64:AB:EF:D0:86:78:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6d7b8054-bb13-3ed2-8a2c-ab85ed95c11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0d:af:84:24:25:03:71:c0:a6:2a:21:83:20:be:0b:9f:dd: 48:9b:db:8a:cd:2f:97:a8:76:d3:fe:05:87:b6:56:51:fc:e8: 93:57:1b:db:8f:74:b2:2e:64:2e:cd:f0:cb:1f:70:1c:44:90: 7a:af:86:e4:ae:24:2d:9d:a8:30:0c:8d:29:91:57:ad:9d:5e: 01:ba:73:10:a9:8a:08:0d:66:91:c7:b9:04:77:52:23:36:72: 00:d4:14:a5:48:f7:1d:2f:b7:0e:2c:80:c6:7e:44:77:e4:19: ea:3a:66:de:14:c0:ef:80:33:19:8c:81:92:cc:13:e5:76:cc: 6b:5a:df:53:ff:72:8a:27:fe:eb:37:90:ed:c9:46:2b:83:09: fc:d0:68:13:ce:15:32:e3:34:2a:84:5d:a8:19:39:73:7d:81: 80:2f:89:91:25:3f:34:97:1f:31:d6:77:04:17:54:90:82:0d: fe:98:8d:54:fc:fd:64:40:67:63:4c:71:00:12:02:af:1e:c0: de:ae:70:67:42:32:30:8c:1f:c6:f6:eb:6a:73:91:35:d5:32: 11:dc:8f:e7:33:77:c6:0f:fe:83:1d:13:bd:4b:b6:8a:9a:05: 62:be:92:9e:37:0d:69:f7:d4:00:22:a1:89:10:dd:1d:6a:7e: 9d:e5:67:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LaDWvV5Fj5wgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjhjZmE4NDQtYzU3Zi00YjQ0LWE5ZDktOWRlMTJiNTQ3NmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolYKqN/O+tFiF1d6a4OAR0vsmWTDxgAWhMm0 9QkJCScfxhGJYNIey3mAU/+mtmysAlVTvGx1QcNmgXLlLkuj/iuqcC9ySOQeDs2H kSIXu9JSB/GzgEO2+0TbhQK685dN78jaduH3IhARvoYif/VnJEMw8aUKi4ZCle7J Z33/4IxZGT1nNKt4WcxgNPzt4K46yks35ofKpmNVLfi/nFV28oQ7qHcI9WpONnMy T+UIhcNEoMuglKhh/xh8DbD9WsCWsIA+h4pnyXNigtC9IeAJQISK4Gj9Q7oJcIwQ 0bDmplQBptUYlFrJJdezocFA6Qk/YPrtUyzeT6goo97nBFwNMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbRJ2abvWxACzOvskJkq+/QhniQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmQ3YjgwNTQtYmIxMy0z ZWQyLThhMmMtYWI4NWVkOTVjMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcNr4QkJQNxwKYqIYMgvguf3Uib24rNL5eodtP+BYe2VlH86JNXG9uP dLIuZC7N8MsfcBxEkHqvhuSuJC2dqDAMjSmRV62dXgG6cxCpiggNZpHHuQR3UiM2 cgDUFKVI9x0vtw4sgMZ+RHfkGeo6Zt4UwO+AMxmMgZLME+V2zGta31P/coon/us3 kO3JRiuDCfzQaBPOFTLjNCqEXagZOXN9gYAviZElPzSXHzHWdwQXVJCCDf6YjVT8 /WRAZ2NMcQASAq8ewN6ucGdCMjCMH8b262pzkTXVMhHcj+czd8YP/oMdE71Ltoqa BWK+kp43DWn31AAioYkQ3R1qfp3lZ7Q= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:28 2025 by rpki-client