$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0c3da11a-d992-3add-a1e2-38e222b4bb5b.roa File: 0c3da11a-d992-3add-a1e2-38e222b4bb5b.roa (raw, json) Hash identifier: Vb0te5RNFS02oD21YaXglst2TVzKaDrauUOQl7TDuU8= Subject key identifier: 92:67:5B:F7:48:AE:51:7C:F2:9E:91:06:E9:D7:13:AD:5D:AB:7E:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB62D34EE8CFF0675C980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0c3da11a-d992-3add-a1e2-38e222b4bb5b.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b6:2d:34:ee:8c:ff:06:75:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=c5213b96-bb6f-4faf-ad6d-507fa0b1a9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:15:29:ac:40:be:e9:68:48:fa:a9:ef:6f: ae:45:0c:f7:d3:0f:6c:0b:7b:33:2c:45:17:0e:71: f5:d2:a2:de:93:19:0d:8e:a0:8a:de:56:e9:86:b7: 67:23:b4:90:9e:d1:56:b2:26:b0:0f:f1:cb:97:22: cb:fb:26:3c:16:16:71:6b:c7:99:53:ae:2b:b2:6f: e6:08:5d:63:f7:36:4f:6e:f9:cc:c8:c2:0a:c6:fe: de:c6:7f:64:eb:e8:50:a0:90:4f:a6:06:60:cd:a0: 90:22:5e:8b:0d:56:10:fe:67:06:93:26:74:ed:9c: 17:95:d6:82:c8:8b:02:e5:8d:54:7b:31:4a:62:54: 8f:92:15:8a:7b:9c:c7:6d:3e:6e:46:15:b0:b6:ce: 60:8a:d9:a7:2f:2b:65:79:b3:c1:4e:37:42:45:da: 9a:57:f8:03:d8:be:e0:d8:a2:d7:aa:a7:eb:f9:61: 71:ec:dc:79:63:fb:b3:e4:e5:49:c0:bc:5c:f6:df: 32:15:b1:80:79:e8:fa:ae:cd:97:10:c3:5b:fc:c2: 06:b4:3f:af:e3:d6:a6:20:8c:19:11:37:80:27:1c: 29:94:e3:57:4e:95:4b:e1:e5:93:3d:ee:76:fb:71: e2:0a:67:3c:73:0d:18:6c:d6:4f:0a:86:1a:ad:b9: 11:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:67:5B:F7:48:AE:51:7C:F2:9E:91:06:E9:D7:13:AD:5D:AB:7E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0c3da11a-d992-3add-a1e2-38e222b4bb5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:50:17:34:38:fd:56:2a:ad:ec:a0:23:db:af:ac:e8:ae:a9: ae:38:f4:09:3e:0b:6f:1e:2f:13:15:5b:ab:a4:b7:8c:91:8d: c8:7c:49:be:b3:4f:fd:69:39:cb:0b:15:6d:f7:f7:8c:56:60: ba:3c:b8:d7:05:95:38:5f:21:e5:ea:f6:46:36:cb:78:0b:56: d9:0c:b6:5a:7c:fe:c8:dc:d2:86:0c:e7:34:b9:ab:d8:1e:a2: 9b:cf:8e:07:10:00:be:61:07:55:87:7e:fd:54:4c:b3:a9:3e: aa:dc:33:eb:98:a6:88:27:e4:b7:ce:a3:97:9b:7f:96:8c:0c: d3:b0:b2:4d:64:7f:f8:f6:0f:a1:c5:a2:dc:fe:05:69:85:74: 66:77:f5:ac:35:8f:3b:eb:40:81:d9:ea:1c:22:3d:4a:69:d3: cb:f4:41:96:7f:bf:ec:4a:9a:1a:c3:60:94:28:d7:d7:64:75: b1:be:5e:a7:30:d4:9d:77:7a:74:24:8f:24:bb:9a:20:a1:f6: 91:79:44:c5:76:cb:1f:69:52:8d:42:2c:9b:42:65:2c:c9:eb: a5:db:71:ae:ff:b6:bd:1b:0f:9f:98:0d:1f:6a:7c:25:82:ed: 4b:1f:ff:16:e0:bd:9d:df:33:21:9f:ef:53:0b:ad:e0:f2:61: 3e:52:79:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LYtNO6M/wZ1yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YzUyMTNiOTYtYmI2Zi00ZmFmLWFkNmQtNTA3ZmEwYjFhOWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzUVKaxAvuloSPqp72+uRQz30w9sC3szLEUX DnH10qLekxkNjqCK3lbphrdnI7SQntFWsiawD/HLlyLL+yY8FhZxa8eZU64rsm/m CF1j9zZPbvnMyMIKxv7exn9k6+hQoJBPpgZgzaCQIl6LDVYQ/mcGkyZ07ZwXldaC yIsC5Y1UezFKYlSPkhWKe5zHbT5uRhWwts5gitmnLytlebPBTjdCRdqaV/gD2L7g 2KLXqqfr+WFx7Nx5Y/uz5OVJwLxc9t8yFbGAeej6rs2XEMNb/MIGtD+v49amIIwZ ETeAJxwplONXTpVL4eWTPe52+3HiCmc8cw0YbNZPCoYarbkRdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJnW/dIrlF88p6RBunXE61dq370MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGMzZGExMWEtZDk5Mi0z YWRkLWExZTItMzhlMjIyYjRiYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVQFzQ4/VYqreygI9uvrOiuqa449Ak+C28eLxMVW6ukt4yRjch8Sb6z T/1pOcsLFW3394xWYLo8uNcFlThfIeXq9kY2y3gLVtkMtlp8/sjc0oYM5zS5q9ge opvPjgcQAL5hB1WHfv1UTLOpPqrcM+uYpogn5LfOo5ebf5aMDNOwsk1kf/j2D6HF otz+BWmFdGZ39aw1jzvrQIHZ6hwiPUpp08v0QZZ/v+xKmhrDYJQo19dkdbG+Xqcw 1J13enQkjyS7miCh9pF5RMV2yx9pUo1CLJtCZSzJ66Xbca7/tr0bD5+YDR9qfCWC 7Usf/xbgvZ3fMyGf71MLreDyYT5SeSQ= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:06 2025 by rpki-client