$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa File: 95de198e-9bc7-3f62-8579-2e33c1164c71.roa (raw, json) Hash identifier: +p6ac64Q/QAwjt0QXzVgA9caAjJGIvlaW4BvOJvdu6k= Subject key identifier: 83:BA:D0:33:08:5B:79:9F:07:25:D2:7E:A6:63:15:26:9B:93:67:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBF5F01E5823B13A42980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:bf:5f:01:e5:82:3b:13:a4:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=beea5f44-5576-45f8-87d1-85f2ae628bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:43:ce:5e:2b:74:ed:49:71:d1:f7:99:09: 9c:3f:36:31:b9:84:3b:08:bd:34:14:a3:61:e5:17: 17:48:bd:0b:54:0c:04:c9:bf:4f:09:31:f4:b2:e0: 1c:18:2d:d0:97:66:df:70:19:b9:fb:95:3b:f4:3c: 0c:42:0e:62:1d:9f:92:12:84:ee:5a:3b:de:01:d1: 65:54:3c:16:89:55:73:3b:3b:cd:34:27:bc:2c:a5: 56:87:f0:5b:14:ec:85:bc:9c:e5:c9:e1:09:83:83: c7:e8:b6:ad:e4:9c:d1:42:8f:7a:aa:25:a6:51:8c: 34:1f:09:48:a3:ba:53:53:ac:38:ba:13:49:37:92: 82:d6:48:b5:7f:63:58:26:c1:7c:bb:48:c8:47:82: 52:27:0e:e1:77:b4:79:f7:ac:ee:f4:62:3e:21:2c: 5a:24:a0:b9:c2:f2:d0:3a:df:c1:68:02:87:a5:24: 1e:63:69:76:70:c9:dc:a8:ad:5d:0a:21:ed:1c:98: 59:22:0d:5d:57:08:b0:be:8d:1c:2d:ae:a9:5d:de: 38:67:09:2e:be:73:fb:0b:1e:03:af:4b:9d:a4:34: e3:d9:ce:e1:1b:ff:8c:c5:4a:38:75:e0:b7:22:a0: 0d:dc:89:38:14:0f:e8:34:38:36:58:76:51:10:c2: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BA:D0:33:08:5B:79:9F:07:25:D2:7E:A6:63:15:26:9B:93:67:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0c:3e:c5:b0:a6:34:9c:0c:17:77:7a:0c:18:1d:5f:cd:f1: 6d:cf:42:e2:b3:ee:88:53:29:1a:bb:9b:ff:22:d7:c1:ec:4e: f0:fd:6e:fb:17:46:a1:cc:ae:4b:d9:c2:90:4b:b7:be:2e:6f: aa:b6:7f:38:54:c1:1a:33:00:f7:97:29:86:c0:4f:5f:0c:f1: 97:4f:74:d5:1f:b4:81:33:6a:c6:3c:9b:98:4a:0a:aa:be:8f: 43:bb:6d:28:35:e8:f5:a9:55:c3:03:6c:4b:5e:bc:d8:e9:ff: fa:c3:56:63:27:c1:b1:56:a2:fd:3b:ec:aa:16:88:63:3a:ca: 8c:14:80:64:ad:74:88:7d:cd:29:ce:12:cb:e0:7b:c3:ff:d1: ae:f3:e7:20:f9:02:e8:00:86:af:8b:e9:ce:8f:40:d8:9b:59: ec:c6:1b:08:2e:69:31:07:3c:12:60:db:71:32:97:e2:2e:40: cb:c3:ce:fd:bd:57:4e:2a:49:45:1a:c6:f3:06:0d:53:e7:8c: a7:32:16:70:0a:39:42:d8:2b:e8:28:b1:27:de:6c:6d:70:2b: 68:99:02:a6:80:2f:16:46:c5:7c:4b:16:7d:4a:58:57:69:bf: 14:e9:6f:5f:67:89:c2:38:d0:22:7d:62:e2:e9:df:7f:ae:f9: 5d:ce:11:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L9fAeWCOxOkKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YmVlYTVmNDQtNTU3Ni00NWY4LTg3ZDEtODVmMmFlNjI4YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkRDzl4rdO1JcdH3mQmcPzYxuYQ7CL00FKNh 5RcXSL0LVAwEyb9PCTH0suAcGC3Ql2bfcBm5+5U79DwMQg5iHZ+SEoTuWjveAdFl VDwWiVVzOzvNNCe8LKVWh/BbFOyFvJzlyeEJg4PH6Lat5JzRQo96qiWmUYw0HwlI o7pTU6w4uhNJN5KC1ki1f2NYJsF8u0jIR4JSJw7hd7R596zu9GI+ISxaJKC5wvLQ Ot/BaAKHpSQeY2l2cMncqK1dCiHtHJhZIg1dVwiwvo0cLa6pXd44ZwkuvnP7Cx4D r0udpDTj2c7hG/+MxUo4deC3IqAN3Ik4FA/oNDg2WHZREMJthwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO60DMIW3mfByXSfqZjFSabk2fZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTVkZTE5OGUtOWJjNy0z ZjYyLTg1NzktMmUzM2MxMTY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYMPsWwpjScDBd3egwYHV/N8W3PQuKz7ohTKRq7m/8i18HsTvD9bvsX RqHMrkvZwpBLt74ub6q2fzhUwRozAPeXKYbAT18M8ZdPdNUftIEzasY8m5hKCqq+ j0O7bSg16PWpVcMDbEtevNjp//rDVmMnwbFWov077KoWiGM6yowUgGStdIh9zSnO Esvge8P/0a7z5yD5AugAhq+L6c6PQNibWezGGwguaTEHPBJg23Eyl+IuQMvDzv29 V04qSUUaxvMGDVPnjKcyFnAKOULYK+gosSfebG1wK2iZAqaALxZGxXxLFn1KWFdp vxTpb19nicI40CJ9YuLp33+u+V3OEUo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:16 2025 by rpki-client