$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa File: 23f6d5b1-a0f6-317d-bee3-89903b027032.roa (raw, json) Hash identifier: SdK9WeWG6A38z6ThQd1Ve0LKK/k869YhXSBfD1LvTVk= Subject key identifier: C7:F1:EF:CE:0E:54:99:3B:31:BB:D2:C5:1D:9A:5B:D5:7B:80:01:00 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE08C856B146E408CEBA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.251.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:08:c8:56:b1:46:e4:08:ce:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3aeb007b-c08d-46b3-a361-2fb8b6a0707f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:53:83:cd:5b:df:3a:47:0a:d5:3d:f8:96:58: a1:a9:21:91:84:fd:49:18:27:df:91:d5:b8:f0:1d: 60:5a:2a:c5:77:bb:50:97:d0:1f:78:38:17:42:0c: 86:68:72:ee:de:f2:53:f3:2c:68:42:58:c4:2f:6d: a3:07:b7:c3:bf:a4:2d:e5:bc:b2:93:57:7b:f8:fc: 16:29:e6:aa:76:68:06:09:80:f9:b5:f0:15:ad:b7: 13:68:36:6e:bf:e3:c2:31:2e:ce:3d:cc:2e:7a:9c: 51:05:10:35:c9:e0:82:f8:3d:da:27:72:f9:0a:ec: c3:b8:c4:00:2e:d2:be:70:73:5f:69:b7:e9:7d:6a: d2:37:62:3f:68:d9:b5:b6:09:ea:47:b9:b6:aa:d3: f8:bb:79:6f:6b:c4:2f:98:34:f2:f9:e2:f1:8f:1b: d0:3b:57:ee:dc:c0:b6:f7:21:94:96:73:49:3f:e1: 7d:79:bb:d9:9a:ff:9a:a2:d3:cd:20:69:e6:bf:c0: ea:b7:89:b3:58:73:6c:0c:66:29:0e:7f:ed:9a:14: d4:5b:53:35:c4:9c:76:5f:56:33:3d:0f:5e:5e:aa: 9a:74:42:8f:bf:e2:0b:b7:db:af:28:a1:2f:13:07: 14:f6:9b:1e:be:27:18:fd:c5:cd:42:ef:c9:c5:be: 18:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F1:EF:CE:0E:54:99:3B:31:BB:D2:C5:1D:9A:5B:D5:7B:80:01:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23f6d5b1-a0f6-317d-bee3-89903b027032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:bc:c9:1e:59:c2:aa:06:1c:b1:e7:c6:a2:77:48:4a:62:7e: 60:a4:52:27:46:18:27:85:47:c4:05:fd:40:c6:88:05:92:22: 7d:f5:c9:ae:85:d4:3d:57:64:52:03:14:5e:51:79:3e:8f:d0: 07:9e:b7:85:6e:58:f4:19:bb:b2:39:72:78:ce:2a:94:dd:d9: 16:6c:59:c4:a2:68:56:83:7f:96:55:e2:0c:27:84:d7:5f:a3: b4:35:07:eb:09:e8:25:0e:6e:63:de:b7:34:df:4b:16:ac:3e: be:ef:b5:70:cc:e0:79:42:10:cc:b5:98:68:8f:d1:9b:53:1c: f3:50:14:89:d7:4b:22:a0:c4:2d:c1:f7:92:4d:82:22:c0:0c: d5:c7:53:ff:de:9b:d1:d4:48:ce:1e:83:ac:59:7b:ef:29:cd: e4:75:16:db:66:d1:10:aa:ae:45:bf:32:f0:8a:43:70:f8:5d: 67:ef:34:45:3b:6f:ee:e5:25:aa:45:97:79:51:85:15:53:fd: a1:0e:96:b3:3f:7d:79:26:91:92:de:e7:ed:56:59:a4:05:af: 11:07:d2:c5:9b:0e:58:c0:eb:9f:61:da:61:27:11:39:76:2b: 1a:c0:f3:1f:98:eb:22:c3:23:37:b6:36:60:ec:57:ec:20:5b: ae:dd:02:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgjIVrFG5AjOuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2FlYjAwN2ItYzA4ZC00NmIzLWEzNjEtMmZiOGI2YTA3MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1ODzVvfOkcK1T34llihqSGRhP1JGCffkdW4 8B1gWirFd7tQl9AfeDgXQgyGaHLu3vJT8yxoQljEL22jB7fDv6Qt5byyk1d7+PwW KeaqdmgGCYD5tfAVrbcTaDZuv+PCMS7OPcwuepxRBRA1yeCC+D3aJ3L5CuzDuMQA LtK+cHNfabfpfWrSN2I/aNm1tgnqR7m2qtP4u3lva8QvmDTy+eLxjxvQO1fu3MC2 9yGUlnNJP+F9ebvZmv+aotPNIGnmv8Dqt4mzWHNsDGYpDn/tmhTUW1M1xJx2X1Yz PQ9eXqqadEKPv+ILt9uvKKEvEwcU9psevicY/cXNQu/Jxb4YKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfx784OVJk7MbvSxR2aW9V7gAEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjNmNmQ1YjEtYTBmNi0z MTdkLWJlZTMtODk5MDNiMDI3MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKi8yR5ZwqoGHLHnxqJ3SEpifmCkUidGGCeFR8QF/UDGiAWSIn31ya6F 1D1XZFIDFF5ReT6P0Aeet4VuWPQZu7I5cnjOKpTd2RZsWcSiaFaDf5ZV4gwnhNdf o7Q1B+sJ6CUObmPetzTfSxasPr7vtXDM4HlCEMy1mGiP0ZtTHPNQFInXSyKgxC3B 95JNgiLADNXHU//em9HUSM4eg6xZe+8pzeR1Fttm0RCqrkW/MvCKQ3D4XWfvNEU7 b+7lJapFl3lRhRVT/aEOlrM/fXkmkZLe5+1WWaQFrxEH0sWbDljA659h2mEnETl2 KxrA8x+Y6yLDIze2NmDsV+wgW67dAgo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:58 2025 by rpki-client