$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa File: 237250b7-86de-3771-94f1-0e5037bc3109.roa (raw, json) Hash identifier: 2p2VVGXj7Z6r4BPNwgQWG4qrNGZGFpbaQn1veLqOCS8= Subject key identifier: 95:E5:E3:03:AD:1A:18:F6:5C:71:72:07:E2:16:7D:7D:E2:18:CA:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE0CEFF3A4E0468BE88180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0c:ef:f3:a4:e0:46:8b:e8:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=5a7c416f-7200-47c6-8413-b4b645e6ba5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:d3:f9:06:d3:80:b7:63:16:bc:89:04:82: 96:b9:16:2e:7b:d7:fa:25:9c:09:2f:9c:f7:24:d5: 05:d3:7e:c1:4f:8e:af:1c:50:28:6e:39:3d:27:c7: b5:34:8d:22:2c:5d:f1:fd:8f:90:e7:98:c5:c9:4f: 16:e8:b4:9c:f6:06:2e:19:ee:45:58:55:3c:84:78: de:85:69:a7:7a:e3:41:52:bb:af:b3:46:d1:1d:15: 24:b7:bb:95:96:87:8b:6f:fe:12:5d:59:48:cd:63: 5e:c7:6d:68:fc:d4:e6:3b:d4:be:e1:2b:2e:65:fa: f2:f5:26:80:ac:ee:a2:e6:10:4f:9e:6c:f9:74:55: dc:b3:7b:34:1b:dc:40:eb:a4:d7:ff:44:ea:1a:c6: d8:aa:f1:23:b2:2b:6b:d9:73:bc:f1:8b:82:98:76: b0:fd:59:18:85:09:20:e2:78:bc:4e:a0:e1:bb:a2: d9:21:48:27:55:cf:90:99:22:79:8e:9c:dc:98:7d: 4d:0c:cf:04:b1:13:b8:5e:f9:3a:c8:80:95:74:af: af:d4:8c:51:f4:99:6a:15:e0:30:21:bc:87:a8:5a: be:de:2a:98:82:6b:ab:19:a1:8b:f8:68:65:de:de: a5:5b:eb:ba:c3:fd:11:8b:a0:39:9e:e0:81:92:56: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E5:E3:03:AD:1A:18:F6:5C:71:72:07:E2:16:7D:7D:E2:18:CA:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:82:f1:31:2c:59:b8:69:ff:d6:b8:21:a6:3a:c5:ff:39:71: 0b:2f:1a:09:84:9d:1d:e4:09:a8:1a:7a:79:7b:62:c6:f6:8c: 79:6f:be:4a:95:89:df:fa:6a:3f:3b:79:c9:24:ce:0d:9b:9f: 08:74:d8:94:1a:19:73:72:04:5d:04:8a:80:a0:63:da:9e:3b: 23:cd:a7:6b:cb:bc:58:12:31:9e:17:c7:ec:ba:89:6c:9f:dd: 1c:14:98:39:9e:e7:3b:72:e7:8e:0e:1c:cc:c4:dd:f4:14:ee: dd:b3:9f:72:4b:2a:09:dc:f6:d0:12:fa:42:85:eb:c2:9b:c6: 70:31:fd:8b:34:a6:0b:c8:5e:f5:ef:97:e9:5b:ce:84:17:30: b5:72:b2:f9:cc:b2:31:7f:5c:12:88:ac:b7:48:64:2c:aa:ec: 61:ce:73:b0:7f:bc:ca:35:73:e6:68:80:bb:6c:d5:5f:89:6f: dd:5d:2a:1e:d5:0f:06:40:9c:ac:7f:9d:94:3e:96:d8:57:80: 2d:ed:8e:b2:e2:82:99:6c:7c:4e:af:f6:09:cb:6f:87:ff:09: 18:0f:0b:bc:a2:b4:27:72:dd:56:ac:4d:14:bb:f8:9c:6d:04: 73:7d:e4:50:05:00:2f:44:aa:5b:11:f8:53:97:b1:0c:cd:92: 20:23:0d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgzv86TgRovogYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NWE3YzQxNmYtNzIwMC00N2M2LTg0MTMtYjRiNjQ1ZTZiYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntLT+QbTgLdjFryJBIKWuRYue9f6JZwJL5z3 JNUF037BT46vHFAobjk9J8e1NI0iLF3x/Y+Q55jFyU8W6LSc9gYuGe5FWFU8hHje hWmneuNBUruvs0bRHRUkt7uVloeLb/4SXVlIzWNex21o/NTmO9S+4SsuZfry9SaA rO6i5hBPnmz5dFXcs3s0G9xA66TX/0TqGsbYqvEjsitr2XO88YuCmHaw/VkYhQkg 4ni8TqDhu6LZIUgnVc+QmSJ5jpzcmH1NDM8EsRO4Xvk6yICVdK+v1IxR9JlqFeAw IbyHqFq+3iqYgmurGaGL+Ghl3t6lW+u6w/0Ri6A5nuCBklY7lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXl4wOtGhj2XHFyB+IWfX3iGMoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjM3MjUwYjctODZkZS0z NzcxLTk0ZjEtMGU1MDM3YmMzMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKC8TEsWbhp/9a4IaY6xf85cQsvGgmEnR3kCagaenl7Ysb2jHlvvkqV id/6aj87eckkzg2bnwh02JQaGXNyBF0EioCgY9qeOyPNp2vLvFgSMZ4Xx+y6iWyf 3RwUmDme5zty544OHMzE3fQU7t2zn3JLKgnc9tAS+kKF68KbxnAx/Ys0pgvIXvXv l+lbzoQXMLVysvnMsjF/XBKIrLdIZCyq7GHOc7B/vMo1c+ZogLts1V+Jb91dKh7V DwZAnKx/nZQ+lthXgC3tjrLigplsfE6v9gnLb4f/CRgPC7yitCdy3VasTRS7+Jxt BHN95FAFAC9EqlsR+FOXsQzNkiAjDVc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:05 2025 by rpki-client