$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c9577f-c221-3ac5-ab74-db09890f238d.roa File: f0c9577f-c221-3ac5-ab74-db09890f238d.roa (raw, json) Hash identifier: S7we7SBddUNf+Vl6ndjAM2PfWwrZwZmHSRDZdTiUxIg= Subject key identifier: D6:1F:0B:57:FB:F5:7A:2E:01:77:F4:26:D9:9F:C6:43:40:A8:84:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE1FBE57C6CD7D7B8DED80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c9577f-c221-3ac5-ab74-db09890f238d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:1f:be:57:c6:cd:7d:7b:8d:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=70c389c6-0c2f-43ce-ad72-2feb11d5af3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dc:d6:fd:5f:53:0a:9f:c2:97:90:78:97:2a: 10:1c:5d:10:1b:ad:ff:65:29:6c:a9:57:d9:5a:7c: fe:0a:f4:93:89:0a:e8:d5:eb:17:2d:2e:ac:22:22: f0:ff:36:63:2f:0f:14:aa:aa:a1:a5:b6:9d:4b:85: 00:44:c7:17:08:4e:bc:38:27:a9:b9:db:fb:87:7c: b4:d3:4a:50:85:56:14:08:8c:9a:f2:28:46:3a:79: 78:ee:fc:1a:e7:33:ae:a6:8a:50:ba:ef:a0:61:bd: bf:90:3e:0e:73:e6:c1:0f:3b:55:dd:72:e6:fa:61: 02:ce:85:66:e4:eb:8f:ea:a4:6a:4e:02:75:6d:8a: 75:f3:1d:de:5b:67:76:e7:78:fe:8d:33:20:b1:6c: 21:a3:a6:3f:11:26:0e:4b:f1:72:9a:15:96:8e:b8: ea:f9:1c:be:81:81:5d:54:6c:e6:c9:6f:53:e8:ab: b5:54:8f:62:2e:b7:dd:12:b6:ac:51:a6:ac:86:a1: fc:99:b3:88:df:a7:a6:75:e2:f5:f4:c5:cd:67:e8: f7:6a:51:b7:12:f8:06:72:86:b4:fd:ff:7c:27:f3: 8b:0c:66:46:8d:87:04:0c:c7:b3:b3:3b:7a:78:40: 87:46:05:07:d9:9f:1b:b2:e9:df:0c:2a:50:40:e3: 96:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1F:0B:57:FB:F5:7A:2E:01:77:F4:26:D9:9F:C6:43:40:A8:84:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f0c9577f-c221-3ac5-ab74-db09890f238d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:af:b9:21:48:3f:26:d4:04:31:cb:9d:e0:bc:5e:27:c8:17: 20:44:f9:85:2d:e6:26:4b:24:a8:2a:9f:e8:bc:18:78:c7:e7: c1:e0:68:52:ac:50:60:21:33:b2:1e:4e:93:e4:a4:cc:3a:42: 5d:03:77:b0:89:99:c4:ba:b9:54:77:41:a6:4c:38:e0:cf:97: 68:78:e3:a6:c6:29:9e:73:b7:c2:ca:e3:df:dc:02:4f:85:bb: bc:74:03:79:e1:a9:1e:e6:c5:72:0b:4e:77:4d:0f:32:6b:41: 2f:3a:a1:82:ab:49:7e:ef:f2:8f:8e:d2:ed:0a:b9:f9:1f:72: 8a:14:42:25:91:98:e3:45:04:cf:03:5d:35:ad:0b:57:4c:0f: da:58:ac:d0:0d:b2:65:55:a9:56:8a:3d:26:57:cf:4e:03:cc: 01:b3:68:2c:17:75:fa:94:59:40:cd:ae:00:3b:79:a4:c2:69: 26:da:74:2b:27:e4:a8:92:96:d2:bc:71:6f:47:79:d3:80:7f: 4d:b8:a9:c1:3c:e7:91:45:84:d0:64:53:7e:7e:e5:12:bb:ce: 57:ed:f4:45:88:e5:d2:13:f4:69:0b:aa:15:36:e8:17:05:ef: 6b:c8:5c:e2:a8:b0:55:d9:aa:db:e8:8b:bd:cd:49:7f:79:48: 5b:3d:04:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzh++V8bNfXuN7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzBjMzg5YzYtMGMyZi00M2NlLWFkNzItMmZlYjExZDVhZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NzW/V9TCp/Cl5B4lyoQHF0QG63/ZSlsqVfZ Wnz+CvSTiQro1esXLS6sIiLw/zZjLw8UqqqhpbadS4UARMcXCE68OCepudv7h3y0 00pQhVYUCIya8ihGOnl47vwa5zOupopQuu+gYb2/kD4Oc+bBDztV3XLm+mECzoVm 5OuP6qRqTgJ1bYp18x3eW2d253j+jTMgsWwho6Y/ESYOS/FymhWWjrjq+Ry+gYFd VGzmyW9T6Ku1VI9iLrfdErasUaashqH8mbOI36emdeL19MXNZ+j3alG3EvgGcoa0 /f98J/OLDGZGjYcEDMezszt6eECHRgUH2Z8bsunfDCpQQOOWXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYfC1f79XouAXf0JtmfxkNAqITeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjBjOTU3N2YtYzIyMS0z YWM1LWFiNzQtZGIwOTg5MGYyMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSvuSFIPybUBDHLneC8XifIFyBE+YUt5iZLJKgqn+i8GHjH58HgaFKs UGAhM7IeTpPkpMw6Ql0Dd7CJmcS6uVR3QaZMOODPl2h446bGKZ5zt8LK49/cAk+F u7x0A3nhqR7mxXILTndNDzJrQS86oYKrSX7v8o+O0u0KufkfcooUQiWRmONFBM8D XTWtC1dMD9pYrNANsmVVqVaKPSZXz04DzAGzaCwXdfqUWUDNrgA7eaTCaSbadCsn 5KiSltK8cW9HedOAf024qcE855FFhNBkU35+5RK7zlft9EWI5dIT9GkLqhU26BcF 72vIXOKosFXZqtvoi73NSX95SFs9BKY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:07 2025 by rpki-client