$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cbdc9918-2238-3946-8419-d8a731e351bd.roa File: cbdc9918-2238-3946-8419-d8a731e351bd.roa (raw, json) Hash identifier: 8+Uc23q4/3ZAtix4LyOEx4kKLVSePYOh5XiHVVIjDAg= Subject key identifier: 3A:7A:EA:79:AC:4F:C6:FA:D6:03:06:7F:7B:32:9C:1E:0D:3F:E1:2A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB5CB9B74808D4DF01080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cbdc9918-2238-3946-8419-d8a731e351bd.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b5:cb:9b:74:80:8d:4d:f0:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=507ff0a2-36ad-4c8b-8b5f-cd4259e79ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:25:ff:7d:b3:a1:f1:e7:39:1c:9d:86:6b: 1b:8a:50:fd:09:69:1e:04:6b:e6:9e:75:6f:e2:59: e0:a4:05:11:87:ba:e5:40:82:e1:d6:67:69:51:07: 4e:23:83:30:90:e7:6d:3c:dc:4d:d1:e5:87:c4:0e: 81:33:93:ce:70:78:5e:90:68:68:c5:52:36:40:79: 08:66:c0:50:de:28:2a:85:ab:8d:59:74:c2:3e:2d: cb:53:35:f4:01:5e:4a:88:ea:77:1a:35:e5:52:ac: 64:31:e7:e9:7d:cc:f6:fa:46:af:d8:d9:86:64:2d: f1:aa:33:b6:49:d5:77:a5:12:f9:bc:cf:f1:48:2e: 4a:e5:90:41:8f:37:58:3f:15:c2:6a:1c:22:da:fa: 47:0d:0c:88:42:1e:59:ae:de:aa:2d:70:45:2c:72: 46:02:a0:cc:f6:73:f9:39:f3:7d:14:18:b8:16:72: f5:8b:7c:c1:ad:bf:0f:7a:86:16:63:6b:7b:1b:0e: 31:2c:92:f1:15:80:50:88:3c:67:ff:70:5c:60:7c: bb:e2:ec:5b:01:aa:a2:f4:59:a1:e4:6f:c3:7e:97: 82:ca:fa:b7:a0:57:89:b2:8c:80:6b:bb:56:db:03: aa:bb:45:7a:78:b2:61:22:c7:e6:04:c0:73:03:a0: ca:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7A:EA:79:AC:4F:C6:FA:D6:03:06:7F:7B:32:9C:1E:0D:3F:E1:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cbdc9918-2238-3946-8419-d8a731e351bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f3:3c:7e:9c:d5:1d:69:d9:24:77:cf:28:46:34:ff:2a:43: 5f:ab:13:29:3b:9c:42:be:61:14:fd:12:9e:39:d2:34:0e:10: de:84:c9:7b:7d:f4:8e:7c:68:ba:82:d1:c0:62:ae:4b:af:63: a7:3c:89:91:f1:3f:16:8d:23:9d:c5:bc:54:ff:25:df:61:bf: 2a:a5:e8:67:82:4e:14:45:03:e9:6e:4e:57:2d:fa:9e:5f:0a: c7:4b:65:48:4f:13:87:b3:da:4d:97:bb:fe:6d:64:f5:ed:cf: 06:1c:51:eb:ca:18:46:38:53:b6:bd:f3:6d:46:de:03:3e:c1: 02:3b:64:da:bc:79:ff:ad:e4:85:08:88:5e:87:af:07:0d:e5: 71:4f:eb:69:ab:a9:6d:c4:91:ec:8a:ba:03:33:1b:9a:88:85: 35:b1:19:96:84:ee:34:0b:47:70:7e:42:34:26:88:98:12:2e: 59:98:51:66:cb:46:18:44:18:fd:3c:1e:2e:8a:59:79:ba:ee: 3b:1f:9f:25:1d:ce:16:11:a5:a4:2d:c5:83:ee:1f:31:e9:90: f8:20:7c:7e:d6:f1:48:d2:ac:d3:de:61:2b:52:c6:dd:dc:56: 9c:6e:27:ac:bc:ed:ad:13:3e:71:9f:5e:07:cb:55:9c:1e:23: 64:fa:6f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LXLm3SAjU3wEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NTA3ZmYwYTItMzZhZC00YzhiLThiNWYtY2Q0MjU5ZTc5ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxIl/32zofHnORydhmsbilD9CWkeBGvmnnVv 4lngpAURh7rlQILh1mdpUQdOI4MwkOdtPNxN0eWHxA6BM5POcHhekGhoxVI2QHkI ZsBQ3igqhauNWXTCPi3LUzX0AV5KiOp3GjXlUqxkMefpfcz2+kav2NmGZC3xqjO2 SdV3pRL5vM/xSC5K5ZBBjzdYPxXCahwi2vpHDQyIQh5Zrt6qLXBFLHJGAqDM9nP5 OfN9FBi4FnL1i3zBrb8PeoYWY2t7Gw4xLJLxFYBQiDxn/3BcYHy74uxbAaqi9Fmh 5G/DfpeCyvq3oFeJsoyAa7tW2wOqu0V6eLJhIsfmBMBzA6DK7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp66nmsT8b61gMGf3synB4NP+EqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2JkYzk5MTgtMjIzOC0z OTQ2LTg0MTktZDhhNzMxZTM1MWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDzPH6c1R1p2SR3zyhGNP8qQ1+rEyk7nEK+YRT9Ep450jQOEN6EyXt9 9I58aLqC0cBirkuvY6c8iZHxPxaNI53FvFT/Jd9hvyql6GeCThRFA+luTlct+p5f CsdLZUhPE4ez2k2Xu/5tZPXtzwYcUevKGEY4U7a9821G3gM+wQI7ZNq8ef+t5IUI iF6HrwcN5XFP62mrqW3EkeyKugMzG5qIhTWxGZaE7jQLR3B+QjQmiJgSLlmYUWbL RhhEGP08Hi6KWXm67jsfnyUdzhYRpaQtxYPuHzHpkPggfH7W8UjSrNPeYStSxt3c VpxuJ6y87a0TPnGfXgfLVZweI2T6b8Q= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:26 2025 by rpki-client