$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ceef04dc-670a-3c20-9687-c8f48105509c.roa File: ceef04dc-670a-3c20-9687-c8f48105509c.roa (raw, json) Hash identifier: BHcz40jE8w5F5gukIcCj137o+LXniLTHomazziGVj3o= Subject key identifier: 46:95:E7:00:20:6A:83:A6:26:C8:34:7E:1A:19:5E:F8:8C:46:11:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B69E11CD4F3FB6948DF314380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ceef04dc-670a-3c20-9687-c8f48105509c.roa Signing time: Sat 04 Oct 2025 20:41:09 +0000 ROA not before: Sat 04 Oct 2025 20:41:09 +0000 ROA not after: Fri 02 Jan 2026 21:41:09 +0000 asID: 15169 IP address blocks: 142.250.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:69:e1:1c:d4:f3:fb:69:48:df:31:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 20:41:09 2025 GMT Not After : Jan 2 21:41:09 2026 GMT Subject: CN=3591615d-3775-4347-8906-3dc9b22afba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:a4:27:e1:c5:c6:27:ef:24:2c:d9:ff:24: 28:62:91:51:86:62:a8:b9:dd:03:49:ed:86:20:c7: 65:b5:3b:95:76:13:ce:da:04:10:1f:a8:a6:8a:83: 43:e8:c0:97:c3:74:81:10:1d:44:93:0b:d0:f1:70: 65:8a:e2:8f:f2:8b:aa:aa:1e:35:3f:fb:d0:e8:16: 59:21:da:aa:08:5f:58:17:2d:44:65:eb:b9:ce:9b: b1:49:85:a1:90:93:bc:51:25:93:9f:2e:f1:2b:bb: c7:e3:10:46:91:97:e5:3c:9f:c8:f4:53:ec:8d:d1: 48:77:b9:57:0a:fd:f2:15:89:52:da:dc:59:5c:98: 12:01:f3:5a:3f:92:58:87:97:40:e6:d6:ba:ad:64: 65:1c:97:27:c2:c6:9c:f5:11:67:09:18:b5:69:2c: 03:08:ea:a6:bb:99:2c:b8:e9:0a:14:0b:1a:17:49: 90:f6:2e:cc:5a:92:05:06:fb:c2:13:4e:ed:67:4c: 66:84:f2:4a:f8:15:d9:b2:51:f9:8b:42:c6:20:80: 6a:d2:e8:63:e9:82:46:d9:6a:ac:2f:7d:e1:34:9f: cb:73:c1:c8:46:40:cd:aa:fe:7a:de:4f:a9:8c:da: 74:2c:68:f2:bf:53:00:75:77:60:51:fc:71:64:fc: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:95:E7:00:20:6A:83:A6:26:C8:34:7E:1A:19:5E:F8:8C:46:11:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ceef04dc-670a-3c20-9687-c8f48105509c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:da:a7:84:e6:e8:18:87:18:ec:cf:f8:65:c5:c5:87:fd:26: 61:c6:e4:7d:ea:bf:69:7a:52:89:df:f9:36:ff:9f:1d:d9:a4: f9:a2:3c:76:ae:f7:59:49:61:50:8a:01:5b:bd:aa:07:b2:c1: 52:a6:97:0e:3f:d9:a8:2c:4a:4b:81:9b:70:83:db:65:18:65: 55:18:2c:19:c6:62:7d:8c:9f:8a:8e:fc:90:d7:be:a6:6d:79: cc:ee:b6:5e:3c:73:1f:7f:32:13:fb:98:5a:a0:40:89:60:1c: 9c:e8:2b:ae:3f:65:dc:1b:d6:1d:b5:3f:10:f8:ce:64:c4:51: 94:c0:2f:85:62:32:8f:e6:2d:46:44:8f:33:2c:c0:6c:ae:93: f0:ab:bf:ce:8d:2f:91:34:07:58:c3:2d:c6:71:1c:e8:7a:6e: bd:5c:cf:e1:f3:91:f5:bd:ab:52:0a:03:0b:fd:f6:98:da:24: f9:8c:10:21:26:af:9b:ed:6a:c9:63:ed:12:7c:14:22:c0:b6: c5:6e:67:9c:36:00:c3:4f:27:b4:e9:df:34:f7:50:a6:89:79: b2:f5:ca:a8:a7:bf:0d:e5:a2:9d:e8:74:0c:c4:65:9e:5a:bf: 28:35:35:e2:56:16:fc:ca:49:92:59:cf:ff:61:4a:64:17:6a: 6c:b0:3e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtp4RzU8/tpSN8xQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDIwNDEwOVoXDTI2MDEwMjIxNDEwOVowLzEtMCsGA1UEAxMk MzU5MTYxNWQtMzc3NS00MzQ3LTg5MDYtM2RjOWIyMmFmYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvSkJ+HFxifvJCzZ/yQoYpFRhmKoud0DSe2G IMdltTuVdhPO2gQQH6imioND6MCXw3SBEB1EkwvQ8XBliuKP8ouqqh41P/vQ6BZZ IdqqCF9YFy1EZeu5zpuxSYWhkJO8USWTny7xK7vH4xBGkZflPJ/I9FPsjdFId7lX Cv3yFYlS2txZXJgSAfNaP5JYh5dA5ta6rWRlHJcnwsac9RFnCRi1aSwDCOqmu5ks uOkKFAsaF0mQ9i7MWpIFBvvCE07tZ0xmhPJK+BXZslH5i0LGIIBq0uhj6YJG2Wqs L33hNJ/Lc8HIRkDNqv563k+pjNp0LGjyv1MAdXdgUfxxZPz9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaV5wAgaoOmJsg0fhoZXviMRhFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2VlZjA0ZGMtNjcwYS0z YzIwLTk2ODctYzhmNDgxMDU1MDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPap4Tm6BiHGOzP+GXFxYf9JmHG5H3qv2l6Uonf+Tb/nx3ZpPmiPHau 91lJYVCKAVu9qgeywVKmlw4/2agsSkuBm3CD22UYZVUYLBnGYn2Mn4qO/JDXvqZt eczutl48cx9/MhP7mFqgQIlgHJzoK64/Zdwb1h21PxD4zmTEUZTAL4ViMo/mLUZE jzMswGyuk/Crv86NL5E0B1jDLcZxHOh6br1cz+HzkfW9q1IKAwv99pjaJPmMECEm r5vtaslj7RJ8FCLAtsVuZ5w2AMNPJ7Tp3zT3UKaJebL1yqinvw3lop3odAzEZZ5a vyg1NeJWFvzKSZJZz/9hSmQXamywPhM= -----END CERTIFICATE-----Generated at Fri Oct 17 08:39:55 2025 by rpki-client