$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df76bf95-5cc2-3e42-9028-4902a21538ad.roa File: df76bf95-5cc2-3e42-9028-4902a21538ad.roa (raw, json) Hash identifier: u2sJq3mFPxSIgz0+Cb8zGt2s5BiwbtdhcfjSCdgk3OY= Subject key identifier: 03:3F:31:B6:6B:FD:11:D8:1F:6E:DB:9A:1D:35:65:9C:BE:52:4D:58 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6CD432A0D849A5640180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df76bf95-5cc2-3e42-9028-4902a21538ad.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.251.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6c:d4:32:a0:d8:49:a5:64:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=676787e7-4426-474b-826b-ce014d55035b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8d:08:f4:ef:9c:68:12:30:a5:22:0d:60:25: 4b:1b:24:1e:21:56:2d:6c:61:b4:77:e7:70:de:17: 58:0b:1a:14:18:45:25:a3:5d:2b:b3:c8:07:83:04: 7b:ed:53:90:16:06:30:8d:39:48:90:ec:0f:8b:a3: fe:56:f5:8b:94:44:26:b6:5a:ab:64:56:98:98:32: b2:6e:17:43:39:59:5f:f6:63:54:a2:2e:cd:b3:64: 51:f1:03:02:ef:02:22:90:68:28:7f:ed:a4:0f:c2: 57:6f:87:3b:57:c3:6b:fd:4b:42:ca:b3:71:c7:50: e7:e7:34:7f:3e:54:e9:cb:ee:88:c9:b1:7f:77:75: 4a:11:d1:41:b1:8b:d7:71:02:4a:a9:f6:fc:06:e9: cc:db:94:36:fc:a7:ee:cc:0b:41:2f:1a:68:4c:f8: e3:85:a0:f1:d2:71:55:c1:20:bf:66:f1:9a:bd:99: 12:1f:16:0c:c8:17:3c:df:d3:5c:5b:00:63:c4:ab: a9:36:e7:87:43:e4:57:0b:ba:e5:c4:da:e0:ce:46: c1:13:97:b5:7b:a9:da:62:b0:94:21:df:aa:ea:4e: 3c:d3:a2:7f:e3:3e:fc:0b:86:91:06:1d:a5:02:d2: 13:17:e2:24:34:75:48:83:23:40:37:73:18:9a:d3: a8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3F:31:B6:6B:FD:11:D8:1F:6E:DB:9A:1D:35:65:9C:BE:52:4D:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df76bf95-5cc2-3e42-9028-4902a21538ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a9:cb:3b:c6:d9:f6:e8:fb:bb:51:22:57:f1:40:c2:49:55: ef:6f:1a:68:d2:f3:65:cb:3c:1b:cf:57:d3:6c:5f:04:e3:fa: ad:f2:0b:26:c2:12:25:50:1a:df:ff:dc:ad:10:47:0b:d9:f7: 07:3c:29:aa:4a:57:5a:0a:01:79:42:88:82:56:ea:a5:80:e7: b7:12:a1:79:82:ab:2d:6d:4d:d9:47:dd:9d:df:e2:bf:3c:64: 7d:1f:a5:47:1b:d9:fb:31:9d:c0:1b:8e:03:f6:90:cd:a4:4d: c7:87:d6:30:dd:1f:b5:e0:ea:52:74:fb:8c:98:bc:80:42:4d: e2:45:16:f1:a8:61:b1:5f:b9:64:cc:ea:cf:3b:9b:32:af:63: ea:37:27:18:a3:02:54:67:94:cc:98:55:10:36:ad:36:95:01: 30:ae:64:2a:59:bf:4d:95:fc:1c:79:59:5d:1e:96:6d:53:14: d2:13:ed:8a:30:22:69:13:3f:d3:b0:50:b6:36:89:ef:7e:a9: 29:59:b1:76:fd:a9:48:b0:02:8a:82:93:9a:16:d5:b4:8a:d4: 57:46:4f:05:ef:56:6e:26:85:d7:8e:89:a6:1b:95:07:2d:7d: 18:c3:39:5d:05:92:55:fb:16:7c:6f:7a:42:ac:e6:6e:c7:1d: ba:f8:50:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWzUMqDYSaVkAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Njc2Nzg3ZTctNDQyNi00NzRiLTgyNmItY2UwMTRkNTUwMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y0I9O+caBIwpSINYCVLGyQeIVYtbGG0d+dw 3hdYCxoUGEUlo10rs8gHgwR77VOQFgYwjTlIkOwPi6P+VvWLlEQmtlqrZFaYmDKy bhdDOVlf9mNUoi7Ns2RR8QMC7wIikGgof+2kD8JXb4c7V8Nr/UtCyrNxx1Dn5zR/ PlTpy+6IybF/d3VKEdFBsYvXcQJKqfb8BunM25Q2/KfuzAtBLxpoTPjjhaDx0nFV wSC/ZvGavZkSHxYMyBc839NcWwBjxKupNueHQ+RXC7rlxNrgzkbBE5e1e6naYrCU Id+q6k4806J/4z78C4aRBh2lAtITF+IkNHVIgyNAN3MYmtOohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAM/MbZr/RHYH27bmh01ZZy+Uk1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGY3NmJmOTUtNWNjMi0z ZTQyLTkwMjgtNDkwMmEyMTUzOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCpyzvG2fbo+7tRIlfxQMJJVe9vGmjS82XLPBvPV9NsXwTj+q3yCybC EiVQGt//3K0QRwvZ9wc8KapKV1oKAXlCiIJW6qWA57cSoXmCqy1tTdlH3Z3f4r88 ZH0fpUcb2fsxncAbjgP2kM2kTceH1jDdH7Xg6lJ0+4yYvIBCTeJFFvGoYbFfuWTM 6s87mzKvY+o3JxijAlRnlMyYVRA2rTaVATCuZCpZv02V/Bx5WV0elm1TFNIT7Yow ImkTP9OwULY2ie9+qSlZsXb9qUiwAoqCk5oW1bSK1FdGTwXvVm4mhdeOiaYblQct fRjDOV0FklX7FnxvekKs5m7HHbr4UCE= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:22 2025 by rpki-client