$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8259fc-7912-3b34-aa64-ca724a5f6122.roa File: 7a8259fc-7912-3b34-aa64-ca724a5f6122.roa (raw, json) Hash identifier: pv5w2rQW7xp/UXsMTurp+KH4r+3tmQ3LWPnEO/80RQo= Subject key identifier: D1:9E:2D:79:8F:DD:28:7F:8E:00:0C:FE:2C:F7:13:ED:CA:2A:CA:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB2F8FF10AA8D84485F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8259fc-7912-3b34-aa64-ca724a5f6122.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b2:f8:ff:10:aa:8d:84:48:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=03860098-041a-453c-9343-00d29c8b11f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:42:67:7f:fa:a1:fc:3d:a8:f7:30:6e:18: d5:71:4b:e4:bc:a4:2d:d4:3c:9d:ac:4d:70:b2:a9: 62:1c:ed:ea:31:d4:b4:e7:0f:6f:8e:42:6d:0f:d4: ae:67:0b:74:6c:a4:d4:d7:ab:c2:ac:69:f2:e1:27: 76:b4:cc:de:38:96:02:22:64:7d:3f:81:a3:54:4b: 6e:70:38:80:ca:75:6f:71:4a:31:c8:9f:ed:d5:db: 6d:31:e1:7d:30:02:f0:c2:3a:d5:c0:00:5e:1f:51: 29:4d:52:d5:a6:7a:9b:42:59:29:e3:c7:f4:52:dc: a5:4b:32:1e:39:86:58:13:73:93:a9:ea:61:b0:31: 4b:0c:66:89:a7:06:a2:8a:e6:ea:d9:c0:fa:68:a0: 10:1a:c8:26:b6:e8:a6:3a:e8:cc:d1:8b:db:3b:10: 95:66:b2:61:f3:a4:56:e5:0e:ed:13:60:7c:96:b5: 1d:9a:88:76:2b:cc:55:2f:3a:04:fa:71:3c:8b:3b: 52:98:8f:b8:5f:e3:ca:70:22:cc:59:49:64:3d:8f: ec:dc:dd:31:19:0b:75:52:3a:5c:d7:59:83:0a:dc: 7c:d9:3a:07:92:a1:ad:57:7f:31:45:43:b4:00:d7: 21:62:08:bf:34:e0:8c:5c:7e:16:0b:aa:c1:b8:71: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9E:2D:79:8F:DD:28:7F:8E:00:0C:FE:2C:F7:13:ED:CA:2A:CA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a8259fc-7912-3b34-aa64-ca724a5f6122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:44:a8:5e:4c:55:89:f5:5a:5c:21:06:ff:1f:e5:99:63:8d: 90:f2:0b:44:c3:65:4b:c7:58:7b:f8:18:2c:e1:26:e3:e7:b9: 71:c2:6e:0d:48:90:da:8c:03:dc:1d:7f:64:88:b1:2d:32:03: 0b:76:1a:2f:ba:2b:39:dd:50:70:a2:44:b0:1b:d3:72:e2:12: 5f:cd:ef:f9:2a:6a:94:5d:31:66:b2:1a:11:ce:79:66:0e:6c: e1:47:9f:8f:9e:b5:6f:45:a2:41:a0:50:fb:44:fe:d7:06:03: 36:37:37:11:51:f7:0e:f5:bf:02:74:d7:12:8a:bc:f2:d7:7e: cf:e2:2f:58:45:54:58:23:71:f4:50:92:e2:05:d0:a8:38:4c: 49:08:ca:2d:30:40:0d:f4:6c:c2:32:c5:bd:da:8b:d0:53:76: c5:f0:d9:c2:98:13:b1:cf:fc:17:85:0e:0e:67:45:9e:2c:bd: 16:9e:13:a6:ac:8e:3d:d4:2e:c6:6a:4d:89:b3:07:7a:7b:cb: f7:44:67:2b:34:d7:e0:c8:8d:37:32:ee:aa:b7:e6:ba:92:e8: a3:7d:e4:9b:a5:c3:ed:ed:b6:3d:8f:c1:e5:31:f2:2c:7e:ce: f9:41:85:43:d5:4f:d4:eb:58:77:8f:6d:7d:e7:56:d6:ab:d0: 7d:5f:fd:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LL4/xCqjYRIXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MDM4NjAwOTgtMDQxYS00NTNjLTkzNDMtMDBkMjljOGIxMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpZCZ3/6ofw9qPcwbhjVcUvkvKQt1DydrE1w sqliHO3qMdS05w9vjkJtD9SuZwt0bKTU16vCrGny4Sd2tMzeOJYCImR9P4GjVEtu cDiAynVvcUoxyJ/t1dttMeF9MALwwjrVwABeH1EpTVLVpnqbQlkp48f0UtylSzIe OYZYE3OTqephsDFLDGaJpwaiiubq2cD6aKAQGsgmtuimOujM0YvbOxCVZrJh86RW 5Q7tE2B8lrUdmoh2K8xVLzoE+nE8iztSmI+4X+PKcCLMWUlkPY/s3N0xGQt1Ujpc 11mDCtx82ToHkqGtV38xRUO0ANchYgi/NOCMXH4WC6rBuHGP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGeLXmP3Sh/jgAM/iz3E+3KKsp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2E4MjU5ZmMtNzkxMi0z YjM0LWFhNjQtY2E3MjRhNWY2MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1EqF5MVYn1WlwhBv8f5ZljjZDyC0TDZUvHWHv4GCzhJuPnuXHCbg1I kNqMA9wdf2SIsS0yAwt2Gi+6KzndUHCiRLAb03LiEl/N7/kqapRdMWayGhHOeWYO bOFHn4+etW9FokGgUPtE/tcGAzY3NxFR9w71vwJ01xKKvPLXfs/iL1hFVFgjcfRQ kuIF0Kg4TEkIyi0wQA30bMIyxb3ai9BTdsXw2cKYE7HP/BeFDg5nRZ4svRaeE6as jj3ULsZqTYmzB3p7y/dEZys01+DIjTcy7qq35rqS6KN95Julw+3ttj2PweUx8ix+ zvlBhUPVT9TrWHePbX3nVtar0H1f/QI= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:13 2025 by rpki-client