$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7262320f-6e46-3404-ad33-fa92977a1392.roa File: 7262320f-6e46-3404-ad33-fa92977a1392.roa (raw, json) Hash identifier: qbYN0jMFsE5t6edvB9ZSgNX6BZwkd7gdHvKy3dV3pac= Subject key identifier: CA:9B:80:AE:79:2A:00:FA:89:49:19:67:DA:53:41:5D:9D:8C:08:55 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBE1E09C54B359E2EB8D0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7262320f-6e46-3404-ad33-fa92977a1392.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:be:1e:09:c5:4b:35:9e:2e:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=24e260c4-56ce-415d-b308-603c303b644e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:f5:42:a5:cb:48:2b:7e:79:6a:68:e5:7f: 43:b1:ae:c5:cf:ff:e6:c0:ea:41:c6:d6:33:c5:dd: 0e:6d:08:05:88:b8:a1:e4:3e:ae:35:f4:e1:e7:32: e4:5d:27:81:07:12:5a:d5:6f:dd:14:1c:08:37:14: 24:52:cf:fb:ce:17:be:4d:30:1c:0c:2b:26:04:0a: b8:f5:63:46:20:0a:07:68:32:2a:79:c1:63:52:69: 3d:3f:7f:20:3b:77:45:9d:19:57:c7:49:f8:26:04: a8:06:69:17:00:43:7f:37:4c:d9:4d:15:71:b1:cb: ef:ae:2c:90:fe:61:80:66:b7:4f:0c:55:57:81:91: fa:bc:e0:3c:d8:d9:e7:14:f5:9e:b7:73:ab:12:d7: 6c:e4:9b:bb:cb:a3:00:23:99:f7:cb:57:9a:cf:13: 3c:02:72:f1:62:e6:de:61:cd:2b:55:09:ac:ed:27: 40:28:6a:61:5b:59:3a:61:ee:4b:d4:d2:0b:ba:b9: 66:33:f8:1a:23:19:2f:7a:67:f4:ea:dc:a8:0d:a3: 3e:79:98:e5:06:d3:dc:ba:10:80:60:fb:ad:07:97: e8:eb:f0:a2:8e:37:93:49:aa:46:1a:1e:3f:c2:cc: 2b:3b:bf:9f:fd:79:83:ba:8d:23:78:9e:d1:84:9b: b8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9B:80:AE:79:2A:00:FA:89:49:19:67:DA:53:41:5D:9D:8C:08:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7262320f-6e46-3404-ad33-fa92977a1392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:38:0f:7a:0e:9c:5f:dd:9a:7b:f5:f6:8b:3b:82:3f:98:c2: 62:75:4d:f0:97:95:a0:91:45:a1:ab:ef:92:8b:a9:6d:23:00: d8:bf:29:3f:b6:89:a7:61:b8:f9:d2:fa:75:c7:41:e8:77:50: a3:c0:aa:06:9d:aa:a7:33:87:42:d8:89:43:81:09:17:8b:ed: 14:e9:9a:47:6c:5d:bf:65:46:ae:80:21:19:90:86:0c:f1:66: 20:93:6f:87:95:96:ba:f0:d7:d1:0d:f9:30:98:f1:a2:81:06: 09:cd:33:96:39:a1:ec:cd:a4:b8:62:bc:cd:16:b7:a5:44:4d: d2:84:d2:4a:d6:95:09:f3:96:a2:25:a0:c7:bb:5e:bb:04:b6: 43:1a:d8:33:56:9e:5b:9b:5a:9e:e2:ae:3b:c4:f1:28:99:2c: fc:e4:63:95:3d:62:74:b0:93:a5:f8:59:fa:bb:5a:02:d1:0e: 1d:9b:b5:56:99:50:31:fe:30:4f:16:94:73:9a:02:e6:81:82: b9:42:48:7c:a4:7b:a5:f5:13:27:c6:dc:d9:4c:1a:09:e1:e4: d3:b2:48:88:1b:c2:d5:06:e7:f4:3d:34:05:d7:63:b7:66:14: 3a:75:a4:1a:42:89:1e:5e:e7:10:f6:67:ef:5a:74:44:94:7e: 65:bc:f3:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L4eCcVLNZ4uuNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MjRlMjYwYzQtNTZjZS00MTVkLWIzMDgtNjAzYzMwM2I2NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0L1QqXLSCt+eWpo5X9Dsa7Fz//mwOpBxtYz xd0ObQgFiLih5D6uNfTh5zLkXSeBBxJa1W/dFBwINxQkUs/7zhe+TTAcDCsmBAq4 9WNGIAoHaDIqecFjUmk9P38gO3dFnRlXx0n4JgSoBmkXAEN/N0zZTRVxscvvriyQ /mGAZrdPDFVXgZH6vOA82NnnFPWet3OrEtds5Ju7y6MAI5n3y1eazxM8AnLxYube Yc0rVQms7SdAKGphW1k6Ye5L1NILurlmM/gaIxkvemf06tyoDaM+eZjlBtPcuhCA YPutB5fo6/CijjeTSapGGh4/wswrO7+f/XmDuo0jeJ7RhJu4qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqbgK55KgD6iUkZZ9pTQV2djAhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzI2MjMyMGYtNmU0Ni0z NDA0LWFkMzMtZmE5Mjk3N2ExMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU4D3oOnF/dmnv19os7gj+YwmJ1TfCXlaCRRaGr75KLqW0jANi/KT+2 iadhuPnS+nXHQeh3UKPAqgadqqczh0LYiUOBCReL7RTpmkdsXb9lRq6AIRmQhgzx ZiCTb4eVlrrw19EN+TCY8aKBBgnNM5Y5oezNpLhivM0Wt6VETdKE0krWlQnzlqIl oMe7XrsEtkMa2DNWnlubWp7irjvE8SiZLPzkY5U9YnSwk6X4Wfq7WgLRDh2btVaZ UDH+ME8WlHOaAuaBgrlCSHyke6X1EyfG3NlMGgnh5NOySIgbwtUG5/Q9NAXXY7dm FDp1pBpCiR5e5xD2Z+9adESUfmW880M= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:05 2025 by rpki-client