$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa File: 2496aed2-6643-3205-9f31-bcdb349f0efa.roa (raw, json) Hash identifier: /831uTgksnH5qF3OX8vkaAWx6oPDj6fBpjBvfuG6j5o= Subject key identifier: 5A:5F:09:70:25:17:05:C7:B8:21:B9:E2:69:C4:09:97:0C:E0:B3:19 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBF16DD039042EAE7ED00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:bf:16:dd:03:90:42:ea:e7:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=69830f65-11b4-454c-8a24-28c247a49b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:65:d6:fa:57:d4:0c:46:5e:2c:42:9a:c1:7d: 21:07:2c:ac:91:3f:3a:af:37:79:a3:de:67:93:bc: f4:e8:bc:10:78:41:1c:3d:bd:b7:7a:95:9e:8c:41: 42:65:a2:b5:7c:41:38:9e:bc:ca:76:9a:0b:fe:dd: 6d:bc:3e:67:1a:ad:47:a9:2a:c0:9a:55:5d:d4:35: 6f:26:b1:f0:30:60:07:b4:cf:ff:25:b2:e1:d1:19: 44:5c:eb:df:3e:96:51:83:99:b8:95:48:59:5b:8c: 89:47:10:5c:db:cf:91:b6:c6:f7:01:8e:1c:9b:47: 7b:42:d0:a7:5e:1c:89:7b:37:ad:0a:32:e9:db:1d: 11:91:09:1f:ba:4c:34:08:fe:71:dc:21:6c:61:ea: 0d:e4:2b:f1:8c:f2:ad:b0:6d:f1:4b:50:00:a5:a0: 1c:fc:42:17:55:56:32:18:d3:0f:20:4f:5c:98:8a: ea:e7:78:0f:1c:98:9b:27:60:f4:52:16:42:bf:ab: 31:c0:03:e2:bf:4f:cd:e5:70:95:48:1d:77:a3:d5: dc:2e:ab:01:c2:62:12:14:e0:94:ab:65:2e:82:38: 36:04:b7:7e:b5:9e:7b:de:5a:18:88:86:da:72:f6: 3b:f0:d8:ba:24:de:df:44:18:cd:62:4f:91:f4:69: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5F:09:70:25:17:05:C7:B8:21:B9:E2:69:C4:09:97:0C:E0:B3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:5f:9f:63:c0:c4:9a:87:25:d7:4d:4d:94:5b:1b:c9:e9:49: 28:04:16:35:33:93:88:34:e4:b9:ab:e2:02:f9:00:6f:23:37: fa:60:f9:94:7a:1f:a0:27:d9:f3:7c:5e:e1:e3:0d:ac:0b:2e: 88:28:2b:58:57:17:78:70:f7:96:29:51:7a:d4:d9:9a:fa:12: 43:c1:bd:fe:b4:29:b3:5e:f4:61:0e:cd:52:fe:8f:32:45:f9: 59:74:6e:d1:38:84:7d:7f:75:65:1b:5c:80:15:33:a2:70:9c: 82:fb:3a:b4:ae:fb:c4:38:53:d7:e3:a0:51:4e:d2:c0:09:3b: d5:26:56:75:7b:14:e5:4a:78:5b:f1:ea:77:da:cf:be:96:ab: 43:89:ca:84:76:d9:e1:6e:17:2a:9a:35:fd:fc:46:ef:bb:73: 3f:0f:de:48:26:7b:1f:f0:df:63:ab:55:9e:bb:51:5a:7c:63: 59:29:6e:f2:7c:d4:a0:ac:47:0e:e0:0a:3d:ed:88:1c:2b:e6: b5:34:8b:f0:5e:94:dd:63:5d:05:2b:05:ac:17:e3:59:1e:c1: 91:8e:b7:9f:1d:9d:3c:0f:cf:47:ae:4d:a4:b1:15:b8:0f:2d: 00:dd:39:2c:9b:79:49:f4:7b:46:3b:93:cd:e5:00:bb:eb:e3: a2:5f:a5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L8W3QOQQurn7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk Njk4MzBmNjUtMTFiNC00NTRjLThhMjQtMjhjMjQ3YTQ5YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmXW+lfUDEZeLEKawX0hByyskT86rzd5o95n k7z06LwQeEEcPb23epWejEFCZaK1fEE4nrzKdpoL/t1tvD5nGq1HqSrAmlVd1DVv JrHwMGAHtM//JbLh0RlEXOvfPpZRg5m4lUhZW4yJRxBc28+Rtsb3AY4cm0d7QtCn XhyJezetCjLp2x0RkQkfukw0CP5x3CFsYeoN5CvxjPKtsG3xS1AApaAc/EIXVVYy GNMPIE9cmIrq53gPHJibJ2D0UhZCv6sxwAPiv0/N5XCVSB13o9XcLqsBwmISFOCU q2Uugjg2BLd+tZ573loYiIbacvY78Ni6JN7fRBjNYk+R9GkdHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpfCXAlFwXHuCG54mnECZcM4LMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjQ5NmFlZDItNjY0My0z MjA1LTlmMzEtYmNkYjM0OWYwZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlfn2PAxJqHJddNTZRbG8npSSgEFjUzk4g05Lmr4gL5AG8jN/pg+ZR6 H6An2fN8XuHjDawLLogoK1hXF3hw95YpUXrU2Zr6EkPBvf60KbNe9GEOzVL+jzJF +Vl0btE4hH1/dWUbXIAVM6JwnIL7OrSu+8Q4U9fjoFFO0sAJO9UmVnV7FOVKeFvx 6nfaz76Wq0OJyoR22eFuFyqaNf38Ru+7cz8P3kgmex/w32OrVZ67UVp8Y1kpbvJ8 1KCsRw7gCj3tiBwr5rU0i/BelN1jXQUrBawX41kewZGOt58dnTwPz0euTaSxFbgP LQDdOSybeUn0e0Y7k83lALvr46JfpZI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:27 2025 by rpki-client