$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa File: af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa (raw, json) Hash identifier: ezawOY829OPX2/a7dFXVlKnZBBgyU2Zuknr7HxAdBns= Subject key identifier: 94:D0:39:D3:D9:1D:D1:50:38:E6:A6:A7:4A:99:A4:C9:C3:EF:9B:FB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD515CA040AC7122680D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:51:5c:a0:40:ac:71:22:68:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=581833df-0220-44c7-963b-d93180f09bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:1d:5b:1e:27:fb:89:74:55:9d:7c:c7:54: 75:fb:e8:59:d6:d2:fa:0d:54:73:1c:02:bb:b4:aa: cc:d2:09:2f:fa:12:02:39:fb:15:8b:41:6b:4d:4e: f3:73:97:48:aa:9b:39:a4:90:95:d4:9b:2c:30:18: 37:0e:ca:7f:ed:ac:4c:8b:0d:d3:3b:8e:f0:9b:a6: 65:d0:28:43:7e:c4:62:4e:f3:23:44:5b:f8:79:e1: bf:d8:6b:3e:2f:0b:c3:a1:2d:3f:a4:a6:e4:80:01: 34:ca:33:63:5a:f7:1e:ea:59:bd:68:02:06:38:57: 23:60:7d:38:67:41:c2:96:b4:19:60:69:8e:d0:1a: 9d:fe:37:56:66:7a:60:e1:bc:ca:77:d9:c9:9f:67: 41:65:3e:35:20:83:ad:df:19:3c:be:b9:c0:3f:0a: 54:79:22:80:3a:9d:ae:33:2c:39:a0:50:0c:5a:9e: 00:40:8b:5a:f8:5d:a5:7c:0b:9d:01:3c:a3:b7:8a: 7a:83:a4:25:3f:f8:cd:66:4a:81:54:6f:2f:ab:c5: b0:34:60:17:c9:7f:b1:45:9f:24:a0:f0:62:82:08: 0f:22:01:b2:29:0b:03:99:2c:dc:5f:77:91:06:ec: a7:14:3c:9d:86:92:95:e7:5b:f6:6b:30:22:6b:9e: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D0:39:D3:D9:1D:D1:50:38:E6:A6:A7:4A:99:A4:C9:C3:EF:9B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:11:c2:20:4d:b1:c5:a9:7d:be:50:46:b3:8a:33:e3:52:50: 05:04:00:34:b1:03:13:fd:3c:4a:d2:d0:64:fd:05:e3:44:b9: 50:a6:3f:84:85:2d:32:8f:cb:e1:0d:6c:26:24:57:7a:29:bc: 4e:e7:f5:cd:a1:17:18:ad:7f:87:69:6a:d2:d1:39:63:ee:81: cf:58:d3:57:5f:f6:f5:7e:46:da:54:ad:65:86:a1:f0:25:78: 27:35:b1:4f:a4:8c:14:7a:41:09:31:21:56:df:ec:e6:32:ad: cc:60:68:31:1b:93:c7:d5:3e:0a:7a:e6:8b:f1:f6:7d:ca:c0: 48:79:ec:a2:12:d4:a9:07:02:fb:1e:21:9e:7b:65:f5:8e:e7: 76:b2:14:f6:c1:8b:e5:1b:58:e9:0e:5f:85:9c:79:aa:bf:bc: 2f:29:b6:8b:5c:82:d2:66:7b:6e:a3:ef:06:b4:d4:2f:f3:ef: cd:05:d3:12:bf:3f:ce:96:c3:1c:4a:c5:8d:24:d9:b8:eb:64: a8:af:3c:ee:a8:84:ce:9c:bd:51:04:7e:85:97:8e:71:7d:9e: 43:d8:41:9d:e0:2d:2d:ba:ce:10:8c:cd:74:1b:f1:6f:dc:6b: 9a:f6:35:ff:ad:b1:c1:58:5a:eb:10:13:76:64:f7:7e:24:9c: ed:12:54:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVFcoECscSJoDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTgxODMzZGYtMDIyMC00NGM3LTk2M2ItZDkzMTgwZjA5YmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgMdWx4n+4l0VZ18x1R1++hZ1tL6DVRzHAK7 tKrM0gkv+hICOfsVi0FrTU7zc5dIqps5pJCV1JssMBg3Dsp/7axMiw3TO47wm6Zl 0ChDfsRiTvMjRFv4eeG/2Gs+LwvDoS0/pKbkgAE0yjNjWvce6lm9aAIGOFcjYH04 Z0HClrQZYGmO0Bqd/jdWZnpg4bzKd9nJn2dBZT41IIOt3xk8vrnAPwpUeSKAOp2u Myw5oFAMWp4AQIta+F2lfAudATyjt4p6g6QlP/jNZkqBVG8vq8WwNGAXyX+xRZ8k oPBigggPIgGyKQsDmSzcX3eRBuynFDydhpKV51v2azAia54ioQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTQOdPZHdFQOOamp0qZpMnD75v7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWYxNjY0YzEtZWU3Ni0z M2I3LTllMjctN2VmNTJiMzJkNmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHARwiBNscWpfb5QRrOKM+NSUAUEADSxAxP9PErS0GT9BeNEuVCmP4SF LTKPy+ENbCYkV3opvE7n9c2hFxitf4dpatLROWPugc9Y01df9vV+RtpUrWWGofAl eCc1sU+kjBR6QQkxIVbf7OYyrcxgaDEbk8fVPgp65ovx9n3KwEh57KIS1KkHAvse IZ57ZfWO53ayFPbBi+UbWOkOX4Wceaq/vC8ptotcgtJme26j7wa01C/z780F0xK/ P86WwxxKxY0k2bjrZKivPO6ohM6cvVEEfoWXjnF9nkPYQZ3gLS26zhCMzXQb8W/c a5r2Nf+tscFYWusQE3Zk934knO0SVI8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:42 2025 by rpki-client