$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69c89d0c-7205-3a10-b02b-34b6af9bc0c3.roa File: 69c89d0c-7205-3a10-b02b-34b6af9bc0c3.roa (raw, json) Hash identifier: 4HEcZaSzUI3OVtfvjItwblrMBP8xJ4bz7wIk2txk76k= Subject key identifier: BB:56:5A:68:7D:C6:DA:BD:7B:1F:CF:F7:58:EA:EB:D6:95:59:0C:C0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB707A65DB330C4A20C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69c89d0c-7205-3a10-b02b-34b6af9bc0c3.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b7:07:a6:5d:b3:30:c4:a2:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=ba9a64bd-075a-4135-867f-2671f35bdcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:39:aa:38:c3:ee:93:b5:c7:ba:e8:0c:5f: 16:b7:24:80:5e:ac:55:46:72:d8:68:b2:c7:c5:4b: 5a:c9:54:b8:91:24:2c:bd:c2:36:77:15:c1:e1:34: 11:7d:31:92:e8:80:d9:ad:27:95:94:03:94:83:e7: ef:8a:f2:54:39:a2:a2:cc:d5:0b:c0:8a:fc:d5:45: 46:ed:62:e1:35:b2:f7:fb:4f:78:4f:7b:dc:c0:07: 9e:88:80:88:23:75:2d:a4:41:4b:94:97:6e:bd:5f: ac:cc:33:e1:e3:ea:8e:de:32:f0:aa:ee:7a:d1:94: 00:26:20:69:13:8e:e2:e6:bc:3a:50:95:51:35:d6: 0d:c6:1b:75:91:24:c1:a8:0b:67:e5:94:a2:c2:10: 2d:8c:67:5d:24:c4:88:80:9e:fc:66:99:fb:4b:69: 2c:3a:59:a8:30:67:de:65:f1:5b:6b:ff:ed:31:7f: bd:ab:34:87:2a:b9:2f:f5:6c:fc:12:e6:7b:3e:bf: bc:83:87:02:c5:c6:58:37:e4:08:15:3a:97:87:66: 5e:12:8b:bc:b7:33:41:df:13:0d:c4:0a:1c:92:e8: 31:3e:27:6a:fd:aa:89:57:ca:fe:b6:b5:8b:65:ab: 22:49:12:ce:e7:d3:a3:4d:40:d2:2d:7a:10:9a:84: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:56:5A:68:7D:C6:DA:BD:7B:1F:CF:F7:58:EA:EB:D6:95:59:0C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/69c89d0c-7205-3a10-b02b-34b6af9bc0c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c9:c0:94:00:f7:ff:bf:39:50:ee:58:11:6a:9a:8a:03:3e: e3:8d:9a:28:6d:15:ef:7a:f4:f5:c1:dd:4c:d9:59:90:a7:fe: 4d:e1:7f:bb:81:c9:09:5c:c0:f4:68:22:2a:59:bc:ca:9d:e2: 68:b9:1a:22:9c:51:8c:cb:ff:30:08:1b:63:c4:54:39:79:8a: 03:89:65:57:95:5c:af:89:4c:ac:a8:af:c6:bc:8c:a0:7b:32: 3f:70:8f:d7:dc:82:70:01:8c:73:c5:27:68:85:f1:63:c9:bd: 97:bf:b1:74:3d:61:b5:07:76:ca:e8:f3:a6:81:05:b0:b1:e2: 86:e0:2e:61:07:cf:16:f4:0a:5f:70:c6:c0:1b:58:2c:51:ae: 10:a7:84:e8:0c:05:78:fb:0c:15:ce:5a:a4:af:af:99:52:7d: 1d:7a:29:e9:e6:89:b2:84:9f:3c:d1:d4:83:cb:bb:e8:93:3b: 30:74:9e:49:16:f5:1a:fe:4e:22:37:a0:93:45:aa:52:14:66: 83:46:3b:47:d8:87:16:33:40:be:ca:c9:dc:52:b3:23:bc:d2: 29:7d:3b:1a:7a:13:28:0d:94:e1:31:85:88:c5:c6:f1:77:ba: b1:25:9c:f1:7a:6b:f5:9d:6b:06:99:29:4b:3e:b9:44:90:f8: 32:b1:f8:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LcHpl2zMMSiDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YmE5YTY0YmQtMDc1YS00MTM1LTg2N2YtMjY3MWYzNWJkY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8Y5qjjD7pO1x7roDF8WtySAXqxVRnLYaLLH xUtayVS4kSQsvcI2dxXB4TQRfTGS6IDZrSeVlAOUg+fvivJUOaKizNULwIr81UVG 7WLhNbL3+094T3vcwAeeiICII3UtpEFLlJduvV+szDPh4+qO3jLwqu560ZQAJiBp E47i5rw6UJVRNdYNxht1kSTBqAtn5ZSiwhAtjGddJMSIgJ78Zpn7S2ksOlmoMGfe ZfFba//tMX+9qzSHKrkv9Wz8EuZ7Pr+8g4cCxcZYN+QIFTqXh2ZeEou8tzNB3xMN xAockugxPidq/aqJV8r+trWLZasiSRLO59OjTUDSLXoQmoQDowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtWWmh9xtq9ex/P91jq69aVWQzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjljODlkMGMtNzIwNS0z YTEwLWIwMmItMzRiNmFmOWJjMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPJwJQA9/+/OVDuWBFqmooDPuONmihtFe969PXB3UzZWZCn/k3hf7uB yQlcwPRoIipZvMqd4mi5GiKcUYzL/zAIG2PEVDl5igOJZVeVXK+JTKyor8a8jKB7 Mj9wj9fcgnABjHPFJ2iF8WPJvZe/sXQ9YbUHdsro86aBBbCx4obgLmEHzxb0Cl9w xsAbWCxRrhCnhOgMBXj7DBXOWqSvr5lSfR16KenmibKEnzzR1IPLu+iTOzB0nkkW 9Rr+TiI3oJNFqlIUZoNGO0fYhxYzQL7KydxSsyO80il9Oxp6EygNlOExhYjFxvF3 urElnPF6a/WdawaZKUs+uUSQ+DKx+Fs= -----END CERTIFICATE-----Generated at Fri Oct 17 10:49:30 2025 by rpki-client