$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa File: a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa (raw, json) Hash identifier: xZWCqCAxiTsdv0Ie1TfVcXU5Di2fgy7H5/c7I6nqVaE= Subject key identifier: 1A:E1:D1:60:60:2A:A6:76:99:F8:47:FF:DD:7D:F2:45:72:DA:49:53 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD7357B09725334564CDC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.251.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:73:57:b0:97:25:33:45:64:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=aef88cee-24b5-49b7-9e7d-12b47aee6441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5a:67:b6:15:6f:d2:8a:2d:fd:38:3d:e9:6e: 29:5c:b4:26:c1:53:35:67:6d:93:08:09:a5:15:6a: da:8e:cd:1d:3d:aa:34:d1:68:ed:db:1c:7f:39:9e: 44:72:21:37:2d:ed:c0:ed:ad:f6:02:0e:c7:47:4c: 77:a1:41:af:96:e7:b8:f0:be:92:7a:03:e3:45:96: b3:c2:13:ef:52:7e:b9:c7:70:4a:d3:db:85:09:4a: 39:9e:a3:94:92:fe:a0:77:ec:70:b1:86:23:ec:20: 72:f9:1d:5b:61:aa:ff:49:60:95:0e:ab:aa:e7:4a: b7:a5:68:41:a8:23:4e:4e:53:06:6c:f5:99:77:29: 45:17:37:2d:99:21:20:ef:f1:fa:9d:60:94:d8:63: d0:99:d1:0e:a9:f0:2a:1d:f9:94:4f:c3:58:51:69: 6a:17:97:bc:00:3a:a6:8d:1a:5b:f6:92:54:ed:48: c7:1c:1d:b3:79:45:da:8e:1f:6e:ce:d9:67:3b:8b: aa:56:f7:a5:70:d5:20:35:01:e1:29:e3:c4:22:21: e1:fc:8a:eb:3b:14:bf:a9:8f:74:08:9d:28:0d:e0: 73:e2:31:19:1b:f2:7b:49:2b:2a:e4:d4:ed:73:83: 1a:e9:48:73:ef:d0:c8:fe:bf:a9:36:2a:8d:63:a3: 4e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E1:D1:60:60:2A:A6:76:99:F8:47:FF:DD:7D:F2:45:72:DA:49:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a54f3f7b-35cc-3592-9b8b-f7963ba7090b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5d:0c:99:88:ef:8f:2e:f5:5f:b6:06:21:9e:73:fe:38:f9: c9:3e:73:c2:02:a0:25:75:e9:f9:a1:96:47:eb:cd:81:61:25: a3:15:4a:b0:11:7b:a1:99:3f:50:af:e2:95:0c:a3:48:30:16: 99:8e:77:1e:6b:ae:30:80:68:35:eb:d8:b7:93:4b:af:4e:52: d0:6d:87:16:28:94:e6:cd:7c:30:9a:0d:cf:86:83:3d:98:17: 13:b4:5c:10:9c:09:3d:ed:40:7c:10:02:b6:aa:34:d2:06:60: 9c:e3:d6:19:b3:0a:85:84:90:48:fa:7c:25:8f:7e:74:8d:7e: 55:d5:f5:08:63:8c:8d:01:c5:d9:27:66:f3:eb:27:e9:9f:4f: f8:e9:aa:77:f3:43:aa:b0:88:e1:1a:3f:16:e6:eb:4d:57:8a: 42:d9:39:b4:dd:23:97:b1:c9:66:2d:a1:06:30:7f:b9:9f:cc: b8:76:82:ce:1a:9e:72:30:2b:6c:fe:67:5b:07:5f:85:6b:e9: 4e:11:e0:f6:a5:bf:5b:fb:db:fa:d1:fb:2c:63:c7:aa:1f:55: 93:43:44:14:45:66:95:3c:8a:d0:9c:76:21:28:d3:8e:a4:83: 11:ed:01:ad:87:47:87:dd:04:66:4a:33:cb:52:50:d1:c4:ad: d9:9b:3a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXNXsJclM0VkzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWVmODhjZWUtMjRiNS00OWI3LTllN2QtMTJiNDdhZWU2NDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1pnthVv0oot/Tg96W4pXLQmwVM1Z22TCAml FWrajs0dPao00Wjt2xx/OZ5EciE3Le3A7a32Ag7HR0x3oUGvlue48L6SegPjRZaz whPvUn65x3BK09uFCUo5nqOUkv6gd+xwsYYj7CBy+R1bYar/SWCVDquq50q3pWhB qCNOTlMGbPWZdylFFzctmSEg7/H6nWCU2GPQmdEOqfAqHfmUT8NYUWlqF5e8ADqm jRpb9pJU7UjHHB2zeUXajh9uztlnO4uqVvelcNUgNQHhKePEIiHh/IrrOxS/qY90 CJ0oDeBz4jEZG/J7SSsq5NTtc4Ma6Uhz79DI/r+pNiqNY6NOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrh0WBgKqZ2mfhH/9198kVy2klTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTU0ZjNmN2ItMzVjYy0z NTkyLTliOGItZjc5NjNiYTcwOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHldDJmI748u9V+2BiGec/44+ck+c8ICoCV16fmhlkfrzYFhJaMVSrAR e6GZP1Cv4pUMo0gwFpmOdx5rrjCAaDXr2LeTS69OUtBthxYolObNfDCaDc+Ggz2Y FxO0XBCcCT3tQHwQAraqNNIGYJzj1hmzCoWEkEj6fCWPfnSNflXV9QhjjI0Bxdkn ZvPrJ+mfT/jpqnfzQ6qwiOEaPxbm601XikLZObTdI5exyWYtoQYwf7mfzLh2gs4a nnIwK2z+Z1sHX4Vr6U4R4Palv1v72/rR+yxjx6ofVZNDRBRFZpU8itCcdiEo046k gxHtAa2HR4fdBGZKM8tSUNHErdmbOrY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:10 2025 by rpki-client