$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec58919-3d48-3039-a44a-4b9d5a500ded.roa File: 4ec58919-3d48-3039-a44a-4b9d5a500ded.roa (raw, json) Hash identifier: 7uuG6fNtoRnKrCndjA17XTujbqMWdLGRhUrxXF4gdg8= Subject key identifier: 98:5F:9E:88:10:3E:75:2E:CD:AF:F0:BC:D3:74:3E:64:4B:15:76:27 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE244BD97B2CF75598A780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec58919-3d48-3039-a44a-4b9d5a500ded.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.251.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:24:4b:d9:7b:2c:f7:55:98:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=6674b5e5-f5e4-4f0a-bfbd-795797e3d4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:40:85:83:eb:7f:13:f9:0a:ff:1d:d4:97: 61:53:f9:bc:ab:ec:d3:88:51:26:be:01:ea:3b:82: e5:8a:2a:84:1e:c9:d4:a6:09:f5:12:00:0d:6e:1e: 7e:65:4b:a6:f2:f7:c1:36:b7:47:05:d2:5b:ce:76: ef:77:f7:20:57:2c:8e:8a:ed:ff:48:4c:29:80:2c: ee:47:3a:e3:28:ac:18:28:38:42:55:6d:99:4b:5b: 13:5e:6a:25:20:f5:2b:21:be:2a:87:4b:b3:54:a3: 84:0c:4e:ca:bf:e4:37:50:51:19:7f:d0:c7:dd:9a: b7:17:0c:4b:31:5f:c5:8f:4a:bf:6b:74:53:14:66: ca:fb:99:ee:5a:e3:e4:c8:8f:7b:f3:51:b1:1f:57: ef:c0:47:73:49:49:81:84:4b:fd:fa:f6:95:c2:6b: 9b:ed:12:f8:22:7f:4b:87:b8:75:95:e5:3b:68:48: ed:33:73:f4:c5:3e:a9:6a:8f:fb:d5:9b:7b:3f:1a: 9f:2e:92:58:9a:dc:3c:cc:61:b0:f0:ad:a3:da:a8: f8:23:98:2f:64:0d:8c:21:a7:77:46:d3:d0:88:31: 98:c7:df:93:68:ec:aa:3b:ed:9b:ca:7a:5f:84:d4: f7:df:62:74:03:36:4a:c3:6a:ad:0e:8a:06:b6:28: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:9E:88:10:3E:75:2E:CD:AF:F0:BC:D3:74:3E:64:4B:15:76:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec58919-3d48-3039-a44a-4b9d5a500ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:26:4c:22:d1:31:bf:f9:3d:14:f7:65:bf:5a:68:5b:a7:58: c8:db:a6:14:6c:2f:b7:db:60:59:f0:9c:cb:de:34:09:4c:92: 43:b4:c3:25:7e:7a:2e:28:bd:78:51:72:42:28:41:f7:ab:c8: d0:b4:24:17:f7:61:99:24:38:31:eb:a8:39:ef:f1:57:95:ff: d3:47:9b:f9:8e:82:8f:03:d6:a9:22:7c:52:ee:fd:fa:d5:3d: 3c:ce:19:00:23:76:b4:66:8f:ee:59:e7:90:39:36:66:9b:49: 23:61:56:e7:65:94:60:fa:30:90:f4:e8:cd:18:32:05:62:92: ee:bd:c1:99:62:78:47:d5:c2:81:41:a8:2c:e7:3d:51:65:38: 92:12:a6:a0:63:9a:a2:2e:ba:92:e8:2a:da:41:8b:2e:ff:54: 9c:f9:ae:f1:b0:92:d9:c6:22:8d:9e:81:58:f3:d0:c1:e7:a2: d9:b3:37:76:db:cd:31:55:2c:e0:a0:d3:54:8b:79:d9:95:04: 48:1b:a3:20:f1:b5:13:d6:72:b4:4d:df:da:07:11:79:a8:0d: 15:db:fb:a9:a3:74:cc:43:4f:56:bc:8b:0b:5a:89:0d:e1:43: ff:e9:b7:e2:0e:f1:d5:d4:4a:38:89:19:d3:9a:24:56:67:67: 91:dd:b3:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziRL2Xss91WYp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjY3NGI1ZTUtZjVlNC00ZjBhLWJmYmQtNzk1Nzk3ZTNkNGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs21AhYPrfxP5Cv8d1JdhU/m8q+zTiFEmvgHq O4LliiqEHsnUpgn1EgANbh5+ZUum8vfBNrdHBdJbznbvd/cgVyyOiu3/SEwpgCzu RzrjKKwYKDhCVW2ZS1sTXmolIPUrIb4qh0uzVKOEDE7Kv+Q3UFEZf9DH3Zq3FwxL MV/Fj0q/a3RTFGbK+5nuWuPkyI9781GxH1fvwEdzSUmBhEv9+vaVwmub7RL4In9L h7h1leU7aEjtM3P0xT6pao/71Zt7PxqfLpJYmtw8zGGw8K2j2qj4I5gvZA2MIad3 RtPQiDGYx9+TaOyqO+2bynpfhNT332J0AzZKw2qtDooGtihVUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhfnogQPnUuza/wvNN0PmRLFXYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGVjNTg5MTktM2Q0OC0z MDM5LWE0NGEtNGI5ZDVhNTAwZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4mTCLRMb/5PRT3Zb9aaFunWMjbphRsL7fbYFnwnMveNAlMkkO0wyV+ ei4ovXhRckIoQferyNC0JBf3YZkkODHrqDnv8VeV/9NHm/mOgo8D1qkifFLu/frV PTzOGQAjdrRmj+5Z55A5NmabSSNhVudllGD6MJD06M0YMgViku69wZlieEfVwoFB qCznPVFlOJISpqBjmqIuupLoKtpBiy7/VJz5rvGwktnGIo2egVjz0MHnotmzN3bb zTFVLOCg01SLedmVBEgboyDxtRPWcrRN39oHEXmoDRXb+6mjdMxDT1a8iwtaiQ3h Q//pt+IO8dXUSjiJGdOaJFZnZ5HdswA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:04 2025 by rpki-client