$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa File: 9dbeb59f-5757-3035-b091-70de9d1fb12f.roa (raw, json) Hash identifier: QqxXkq40khgGKQV10EsfLkLEbcCIxSVikFPDXhnLlfs= Subject key identifier: F8:40:6A:D6:A8:78:20:97:7B:B2:3B:04:6F:51:E9:46:64:7B:01:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE112D32E996D94A86B1A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:11:2d:32:e9:96:d9:4a:86:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1bd52757-962a-4466-9208-1c1a7e6a0bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:e3:a1:0b:41:f8:e4:d9:94:ec:b1:ed:f5: 4e:d7:35:49:a6:e7:1d:ac:72:39:e2:3a:21:9c:61: b8:a0:d3:86:7c:7c:71:18:5c:aa:72:92:9c:ce:39: 41:53:40:93:40:c4:53:71:e7:66:b7:ab:52:e5:72: e6:56:5a:0a:6d:fd:52:a4:ba:b4:c7:fe:7d:81:3c: 0d:d3:d4:da:41:94:eb:66:46:e2:78:28:fc:6b:d6: 1d:b3:fc:15:86:9f:74:1a:01:a1:39:3e:ae:99:a4: fe:a2:12:c3:51:fa:c3:5f:6c:b9:aa:1e:f0:5a:c5: 52:cb:9f:b4:52:28:dc:9d:76:92:4c:9e:f5:4a:29: 6b:da:c8:fb:91:a6:ac:5f:4b:68:84:19:51:ee:80: ac:7f:6c:50:c2:92:1c:34:f3:30:22:86:de:79:24: 03:e6:7d:ac:a5:75:83:27:e8:ea:de:43:ae:e1:5a: 6c:52:9f:a9:bd:50:11:c4:93:78:41:6f:8d:18:d4: 94:00:ec:80:2e:57:4c:d5:08:1b:63:03:7e:53:b9: 23:d6:55:c7:13:53:bf:70:18:03:d1:6f:43:c9:78: 93:b0:8e:3b:77:ca:74:83:f9:60:94:f7:c9:f2:c9: 9d:54:98:f2:ae:e3:b5:2e:bc:e1:e8:a9:d9:f3:a0: 29:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:40:6A:D6:A8:78:20:97:7B:B2:3B:04:6F:51:E9:46:64:7B:01:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9dbeb59f-5757-3035-b091-70de9d1fb12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e6:d5:d9:1e:5c:a9:2b:2a:20:14:c4:ef:7a:f1:49:83:b6: 31:87:2c:82:30:de:e8:60:a8:fc:33:b4:37:7b:c7:30:64:55: 0e:6b:97:62:77:55:1c:6b:04:3d:9f:40:4d:ab:9e:d8:29:7c: db:52:c4:32:a5:7a:c3:ac:fa:14:6b:c8:c6:a1:27:f6:f5:6d: 32:62:8d:16:6b:cf:bd:06:59:af:0e:11:d0:de:f9:59:ea:4a: ad:08:01:fd:6b:52:88:e0:fc:0a:db:3b:cb:e3:4f:2a:1e:0c: 04:7c:85:94:c5:5a:85:f8:c4:a8:88:31:a8:97:48:10:b8:a1: 5c:ee:80:67:7c:ab:85:4d:28:2c:8b:86:a6:f2:52:28:bc:a3: cd:01:bf:34:69:a6:ea:9f:eb:0f:85:58:a6:27:07:8a:f8:ac: 6e:90:2c:81:1c:37:2b:c8:a5:1c:13:ec:d4:c7:95:02:73:17: 8e:4d:19:cd:8b:4a:d0:ad:13:ec:e9:2f:b0:14:ed:e3:3b:98: 4f:64:cd:b3:a0:70:cb:4d:ef:f9:ca:53:5e:c0:51:17:05:3a: d4:27:96:15:89:17:cd:7e:4b:a7:52:cf:9c:20:4d:0c:09:29: 1a:c3:58:62:5e:8e:82:80:76:33:0e:d3:93:b8:e0:89:a1:de: 27:6f:9b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhEtMumW2UqGsaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWJkNTI3NTctOTYyYS00NDY2LTkyMDgtMWMxYTdlNmEwYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgvjoQtB+OTZlOyx7fVO1zVJpucdrHI54joh nGG4oNOGfHxxGFyqcpKczjlBU0CTQMRTcedmt6tS5XLmVloKbf1SpLq0x/59gTwN 09TaQZTrZkbieCj8a9Yds/wVhp90GgGhOT6umaT+ohLDUfrDX2y5qh7wWsVSy5+0 UijcnXaSTJ71Silr2sj7kaasX0tohBlR7oCsf2xQwpIcNPMwIobeeSQD5n2spXWD J+jq3kOu4VpsUp+pvVARxJN4QW+NGNSUAOyALldM1QgbYwN+U7kj1lXHE1O/cBgD 0W9DyXiTsI47d8p0g/lglPfJ8smdVJjyruO1Lrzh6KnZ86ApnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhAataoeCCXe7I7BG9R6UZkewFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWRiZWI1OWYtNTc1Ny0z MDM1LWIwOTEtNzBkZTlkMWZiMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7m1dkeXKkrKiAUxO968UmDtjGHLIIw3uhgqPwztDd7xzBkVQ5rl2J3 VRxrBD2fQE2rntgpfNtSxDKlesOs+hRryMahJ/b1bTJijRZrz70GWa8OEdDe+Vnq Sq0IAf1rUojg/ArbO8vjTyoeDAR8hZTFWoX4xKiIMaiXSBC4oVzugGd8q4VNKCyL hqbyUii8o80BvzRppuqf6w+FWKYnB4r4rG6QLIEcNyvIpRwT7NTHlQJzF45NGc2L StCtE+zpL7AU7eM7mE9kzbOgcMtN7/nKU17AURcFOtQnlhWJF81+S6dSz5wgTQwJ KRrDWGJejoKAdjMO05O44Imh3idvmxQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:03 2025 by rpki-client