$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa File: 4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa (raw, json) Hash identifier: nP7lYEPYadD/zAhIINuYLBXpmtH8CpBwl3DFyXVqSho= Subject key identifier: BE:E5:23:AF:EC:FF:E9:E0:4E:92:00:EA:DF:40:95:F2:5D:EE:0E:8D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6EAB4BE5FA056A9C2E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6e:ab:4b:e5:fa:05:6a:9c:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=03fbefb9-ced5-44f2-9c9e-a2b3e5dc44f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:7f:d6:d9:2a:a3:53:20:4e:c0:72:78:07: 83:0c:c1:97:3f:2d:c7:19:f8:f5:b9:71:21:70:c9: 8f:ce:67:34:32:c8:6e:30:e6:27:52:02:b9:3d:65: 9b:23:a0:30:94:0a:4e:16:82:45:28:7d:1a:e0:e7: fc:85:36:17:bb:42:30:0c:30:2f:c7:3b:5b:f3:50: 2d:63:e7:ec:1e:76:56:0c:c6:0e:4e:0e:e3:92:dd: d4:05:ae:95:fc:42:02:7e:ed:8a:35:5e:6f:80:45: bb:40:34:70:e0:cf:40:95:8c:4f:c3:d2:5f:38:ac: da:cd:06:29:73:f5:f5:7b:b6:b9:5a:5e:59:0a:f8: ed:39:31:db:d8:05:a4:d9:08:6c:40:92:b3:8a:5c: 2c:31:18:b8:ea:5b:ab:51:57:41:22:ac:2f:5a:a0: 93:eb:56:4d:9a:2a:c8:c6:28:7f:07:c4:53:54:e3: b1:07:7b:26:02:ed:db:6f:8f:11:a4:f5:0c:ce:23: cb:af:db:ae:55:2e:bf:cf:02:7d:f7:82:ed:20:5b: ee:ea:0b:fd:26:dc:47:38:d3:bb:33:5d:d9:50:c5: bc:b9:64:c3:02:fe:84:84:b9:85:fa:b8:94:2a:4f: 36:c6:fb:43:b0:b0:f9:f4:7f:45:91:06:a8:71:8f: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E5:23:AF:EC:FF:E9:E0:4E:92:00:EA:DF:40:95:F2:5D:EE:0E:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b3:e7:e0:b1:76:35:cc:d2:d9:8d:36:77:c8:4b:01:29:91: 44:2f:4d:45:4a:3f:d3:53:4e:8e:09:35:bf:f3:93:a2:7b:10: 00:06:4c:f2:81:7e:ab:96:ca:ba:9c:49:48:f6:6f:99:fb:42: 7b:45:e4:c1:aa:c7:8b:6e:41:ef:42:dd:84:db:3d:56:88:73: 81:36:cb:8b:dd:fe:60:8d:93:a0:ed:36:89:40:aa:8e:b0:72: 59:a4:b5:28:25:d7:53:f7:35:bd:0a:e4:e1:fa:9d:15:ac:68: 1b:2d:10:92:72:65:f0:b1:3e:7c:14:bd:ea:94:f6:a1:aa:46: 68:7b:53:38:55:5a:e2:b6:25:02:a9:e4:c1:45:e6:25:ae:d9: b9:a0:ce:2f:c7:22:2a:97:bc:42:4b:3a:d6:3f:99:93:e2:6d: d9:51:df:2b:73:26:61:cc:3b:bf:81:a8:e9:89:be:58:78:5a: d2:48:b8:81:e6:50:a7:63:76:99:3b:59:ba:de:90:2a:d0:9c: 9d:63:41:93:a0:bd:a9:17:68:36:12:fe:c0:45:41:8a:c0:f0: a5:3a:8b:d7:4d:e4:0b:fb:10:04:30:11:63:42:7d:1a:b3:30: 33:a0:b3:e1:1f:40:0d:33:8e:36:8a:d0:3a:34:06:18:08:6a: bd:f1:66:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzW6rS+X6BWqcLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDNmYmVmYjktY2VkNS00NGYyLTljOWUtYTJiM2U1ZGM0NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL9/1tkqo1MgTsByeAeDDMGXPy3HGfj1uXEh cMmPzmc0MshuMOYnUgK5PWWbI6AwlApOFoJFKH0a4Of8hTYXu0IwDDAvxztb81At Y+fsHnZWDMYOTg7jkt3UBa6V/EICfu2KNV5vgEW7QDRw4M9AlYxPw9JfOKzazQYp c/X1e7a5Wl5ZCvjtOTHb2AWk2QhsQJKzilwsMRi46lurUVdBIqwvWqCT61ZNmirI xih/B8RTVOOxB3smAu3bb48RpPUMziPLr9uuVS6/zwJ994LtIFvu6gv9JtxHONO7 M13ZUMW8uWTDAv6EhLmF+riUKk82xvtDsLD59H9FkQaocY8lqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7lI6/s/+ngTpIA6t9AlfJd7g6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGZmY2I2MjYtNTlhNy0z NzhmLThjZDEtZmRiZGZjNDk2MTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuz5+CxdjXM0tmNNnfISwEpkUQvTUVKP9NTTo4JNb/zk6J7EAAGTPKB fquWyrqcSUj2b5n7QntF5MGqx4tuQe9C3YTbPVaIc4E2y4vd/mCNk6DtNolAqo6w clmktSgl11P3Nb0K5OH6nRWsaBstEJJyZfCxPnwUveqU9qGqRmh7UzhVWuK2JQKp 5MFF5iWu2bmgzi/HIiqXvEJLOtY/mZPibdlR3ytzJmHMO7+BqOmJvlh4WtJIuIHm UKdjdpk7WbrekCrQnJ1jQZOgvakXaDYS/sBFQYrA8KU6i9dN5Av7EAQwEWNCfRqz MDOgs+EfQA0zjjaK0Do0BhgIar3xZhA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:58 2025 by rpki-client