$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b9efe29-9e2f-3d86-b324-d81b071d2acf.roa File: 2b9efe29-9e2f-3d86-b324-d81b071d2acf.roa (raw, json) Hash identifier: eH8yYAEmqHqRbLiV4qoExfIY1o9aZ1qxliI3UZ3WnlM= Subject key identifier: 47:67:B8:49:70:D1:5B:04:00:16:C3:DC:B8:51:C1:CE:87:FE:55:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6791A1D4223D1A2EF840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b9efe29-9e2f-3d86-b324-d81b071d2acf.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:67:91:a1:d4:22:3d:1a:2e:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8a65ecdd-f20f-4cc7-b391-e0b4059c3a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:bd:85:bd:45:ed:69:1a:77:6b:08:1a:33: 48:2d:22:42:f8:bd:65:66:a0:71:24:af:ce:41:7d: 79:d0:06:1a:d2:c7:0a:f4:34:01:bf:ad:a2:95:dc: 63:32:58:84:46:32:75:f4:64:fd:f1:a6:a5:04:69: f5:64:f6:bf:27:27:8a:4c:2e:b3:c2:2c:52:df:c9: f0:16:89:c3:a6:b9:bc:ad:62:92:45:a6:a3:87:16: 07:f5:f7:a4:2b:57:3a:92:dc:64:37:ab:e0:4d:8d: 58:ce:00:f2:1a:63:45:d5:5c:b4:37:09:fb:3a:67: fb:a3:02:1d:56:93:ea:40:3f:df:cc:16:a7:a7:4d: d3:08:e1:19:6d:c3:9d:fb:32:72:e7:88:93:ce:d9: 9f:09:e5:eb:53:91:e4:6a:c6:ba:cf:f1:93:70:7b: e6:41:ad:96:1d:80:f1:e0:77:fd:24:a5:9d:a2:35: 30:b4:1b:1e:a9:49:e9:8f:54:7b:4d:32:df:10:8c: 26:78:99:38:e3:ef:52:84:f8:57:8e:86:6a:34:18: b3:d2:b8:52:5c:2e:b1:51:60:23:ac:07:9b:4d:ab: ae:d7:c7:07:3a:47:8d:31:a9:87:f8:ec:25:84:a5: da:2e:d4:99:0a:45:e4:78:67:ed:8b:08:2a:fb:0f: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:67:B8:49:70:D1:5B:04:00:16:C3:DC:B8:51:C1:CE:87:FE:55:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b9efe29-9e2f-3d86-b324-d81b071d2acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:76:53:3d:4e:9f:23:43:4d:08:27:d1:16:15:c0:af:f7:a6: 0e:47:9e:af:83:46:26:01:2d:58:c2:8d:4f:1d:b0:cb:f1:5a: c8:81:ea:f0:be:f6:15:a2:74:08:16:22:84:fe:d8:c4:e9:26: 30:87:a5:b9:2c:45:5f:67:63:01:a5:41:28:33:25:be:fb:4b: f6:63:5f:b9:3f:9d:e8:fd:e1:64:a9:28:75:c4:24:04:b5:e7: 32:dc:6b:41:64:7d:7c:d0:1e:61:23:f5:6d:c7:1b:99:10:29: 04:10:6b:f5:61:5a:86:17:e5:e9:e8:3f:b2:20:0b:84:1c:6e: 9e:c0:d9:a0:b5:0e:56:70:02:68:c0:b7:52:da:3c:af:c8:20: 90:46:0e:96:8a:76:0e:04:d5:d2:ad:b3:2a:1d:a2:cf:f8:3a: 18:25:ee:9b:05:38:ab:30:27:cb:72:c2:b3:73:d2:c3:71:e3: d6:49:ae:4e:dc:30:1c:ae:51:a0:6b:37:db:66:84:f1:0a:cc: d8:38:07:fe:57:68:24:90:12:bc:ca:94:f8:78:5b:ea:21:58: d7:58:8d:55:89:40:9c:26:e3:82:8e:0f:50:98:99:1a:8b:05: 94:67:02:f5:9f:52:d6:7f:83:19:e0:11:ba:98:04:d7:cd:8a: e5:a9:8c:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWeRodQiPRou+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGE2NWVjZGQtZjIwZi00Y2M3LWIzOTEtZTBiNDA1OWMzYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHi9hb1F7Wkad2sIGjNILSJC+L1lZqBxJK/O QX150AYa0scK9DQBv62ildxjMliERjJ19GT98aalBGn1ZPa/JyeKTC6zwixS38nw FonDprm8rWKSRaajhxYH9fekK1c6ktxkN6vgTY1YzgDyGmNF1Vy0Nwn7Omf7owId VpPqQD/fzBanp03TCOEZbcOd+zJy54iTztmfCeXrU5Hkasa6z/GTcHvmQa2WHYDx 4Hf9JKWdojUwtBseqUnpj1R7TTLfEIwmeJk44+9ShPhXjoZqNBiz0rhSXC6xUWAj rAebTauu18cHOkeNMamH+OwlhKXaLtSZCkXkeGftiwgq+w/UUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdnuElw0VsEABbD3LhRwc6H/lWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmI5ZWZlMjktOWUyZi0z ZDg2LWIzMjQtZDgxYjA3MWQyYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ2Uz1OnyNDTQgn0RYVwK/3pg5Hnq+DRiYBLVjCjU8dsMvxWsiB6vC+ 9hWidAgWIoT+2MTpJjCHpbksRV9nYwGlQSgzJb77S/ZjX7k/nej94WSpKHXEJAS1 5zLca0FkfXzQHmEj9W3HG5kQKQQQa/VhWoYX5enoP7IgC4Qcbp7A2aC1DlZwAmjA t1LaPK/IIJBGDpaKdg4E1dKtsyodos/4Ohgl7psFOKswJ8tywrNz0sNx49ZJrk7c MByuUaBrN9tmhPEKzNg4B/5XaCSQErzKlPh4W+ohWNdYjVWJQJwm44KOD1CYmRqL BZRnAvWfUtZ/gxngEbqYBNfNiuWpjFw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:37 2025 by rpki-client