$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa File: a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa (raw, json) Hash identifier: IO9xpzbsMAaBzOixNziiXGP2y4hAsSYWBu0YpXp9+t8= Subject key identifier: 93:2C:8F:8E:B8:68:9B:3C:FA:87:2D:EA:FE:B5:B7:B3:9C:78:81:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB42E005965811BB54080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.251.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b4:2e:00:59:65:81:1b:b5:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=653ebec3-ce1c-49d8-99b1-75ea78d38d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:84:b2:9a:a8:1d:e9:8f:77:df:4d:00:fb: c4:0c:4e:12:43:db:74:b4:3f:c0:d2:73:ff:33:26: d5:88:32:ba:56:81:35:32:d2:2e:e7:be:0f:d1:d1: 78:9b:d1:e4:0a:e4:38:6d:78:ba:00:6d:bc:f3:ef: f5:d8:07:20:51:7e:80:7e:5e:6b:d3:38:ac:5b:2e: ca:45:57:50:6f:a8:0e:1e:a1:bf:3f:81:13:4a:4b: b6:06:57:64:26:cf:05:30:43:27:08:40:ab:ce:0a: 0b:39:63:f9:d3:24:ad:63:35:94:82:09:7f:a6:ec: ab:a0:ba:f5:47:d4:62:a5:9e:45:8d:0f:fb:30:3d: f4:c4:07:ce:0f:ca:12:91:ca:29:cf:5c:e2:aa:05: b1:c3:3e:98:a2:23:cc:b0:c9:1f:61:20:11:5f:c0: 10:1f:7a:27:5e:6d:8e:47:54:0a:e3:91:64:cb:20: 1f:40:7a:67:24:f6:2d:bf:8a:74:2c:b4:77:25:67: 32:fd:03:21:10:af:3c:36:79:f3:ee:96:18:f1:d7: 27:8c:72:45:b6:a7:67:8d:93:82:18:3c:9c:a4:bd: 3d:24:15:45:58:67:cb:79:93:1d:36:2b:3a:cc:00: 4b:0d:e5:2e:82:43:72:c1:f9:e4:e0:45:36:4c:f6: 0a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2C:8F:8E:B8:68:9B:3C:FA:87:2D:EA:FE:B5:B7:B3:9C:78:81:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:10:fa:87:a7:34:1a:13:be:20:ed:6f:4b:65:7f:7e:d3:b8: 5b:97:e9:a2:b6:e5:fd:7a:5f:42:92:1e:35:92:83:c4:a3:22: 4f:68:41:0e:9c:ee:de:39:e6:83:d7:cb:d3:d1:76:0d:85:6e: e8:4e:7d:90:5b:19:d7:75:94:2d:fa:60:5f:9c:ba:8b:37:83: a0:2a:9d:28:03:ed:c1:5d:ef:b1:96:80:3c:7e:2e:37:75:1b: 0e:3e:8e:70:07:38:da:c9:93:93:db:26:23:f5:31:1a:7c:b7: 5f:9a:e4:30:7a:dd:5c:82:02:b2:ee:9b:31:e0:14:0f:5a:11: 83:19:5b:21:d7:da:d4:7e:c3:82:4c:48:e0:a8:7f:65:40:a8: 59:cf:db:f6:5b:69:6e:94:3b:d3:12:65:13:bd:dd:e3:13:a2: 39:6d:70:3c:ef:5a:4b:71:80:a1:75:6d:e3:8f:8f:c8:ba:e0: 7e:ba:1f:6f:c9:8a:8c:47:c7:d2:2c:a7:92:51:47:c0:3d:00: a9:e7:03:be:fa:a9:a9:5e:60:eb:43:f1:24:54:84:31:94:19: 78:34:43:5c:df:67:45:6c:29:35:45:71:39:4d:53:e7:a4:5b: 4d:01:38:07:a0:85:b7:26:39:39:ba:e0:c4:0e:94:0e:fb:b5: f3:5a:8b:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LQuAFllgRu1QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NjUzZWJlYzMtY2UxYy00OWQ4LTk5YjEtNzVlYTc4ZDM4ZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ6EspqoHemPd99NAPvEDE4SQ9t0tD/A0nP/ MybViDK6VoE1MtIu574P0dF4m9HkCuQ4bXi6AG288+/12AcgUX6Afl5r0zisWy7K RVdQb6gOHqG/P4ETSku2BldkJs8FMEMnCECrzgoLOWP50yStYzWUggl/puyroLr1 R9RipZ5FjQ/7MD30xAfOD8oSkcopz1ziqgWxwz6YoiPMsMkfYSARX8AQH3onXm2O R1QK45FkyyAfQHpnJPYtv4p0LLR3JWcy/QMhEK88Nnnz7pYY8dcnjHJFtqdnjZOC GDycpL09JBVFWGfLeZMdNis6zABLDeUugkNywfnk4EU2TPYK7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMsj464aJs8+oct6v61t7OceIH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYThkNjVhZTEtODYyMi0z ZjlhLTk1ZTEtZDRiYTI2ZjJhYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIQ+oenNBoTviDtb0tlf37TuFuX6aK25f16X0KSHjWSg8SjIk9oQQ6c 7t455oPXy9PRdg2FbuhOfZBbGdd1lC36YF+cuos3g6AqnSgD7cFd77GWgDx+Ljd1 Gw4+jnAHONrJk5PbJiP1MRp8t1+a5DB63VyCArLumzHgFA9aEYMZWyHX2tR+w4JM SOCof2VAqFnP2/ZbaW6UO9MSZRO93eMTojltcDzvWktxgKF1beOPj8i64H66H2/J ioxHx9Isp5JRR8A9AKnnA776qaleYOtD8SRUhDGUGXg0Q1zfZ0VsKTVFcTlNU+ek W00BOAeghbcmOTm64MQOlA77tfNai18= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:30 2025 by rpki-client