$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78707eeb-0516-34f6-bb52-c611e4ab20cc.roa File: 78707eeb-0516-34f6-bb52-c611e4ab20cc.roa (raw, json) Hash identifier: jVWnZGptkt/mqIp1bJlhZ3asKrUJmRie9EDbNlOjwmY= Subject key identifier: 1B:7A:08:E4:22:7A:50:FF:D6:C3:D3:47:64:A7:10:ED:F4:05:F7:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBD6BBC5E6DE0A7E60D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78707eeb-0516-34f6-bb52-c611e4ab20cc.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.251.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:bd:6b:bc:5e:6d:e0:a7:e6:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=5ef8ff0c-5aec-4e76-b2c0-4a27f62b9f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:55:51:fd:ac:dc:60:03:80:c9:00:d2:44:96: 6b:c3:54:4e:f0:c3:89:8e:47:66:3d:ca:5b:d6:10: 15:58:f3:ff:d5:ba:30:8a:b8:57:4c:0f:ea:9f:c9: 1e:e4:07:4f:cb:74:24:f6:a8:d3:d9:05:81:7a:73: 05:a1:12:88:4f:4e:f0:3c:4e:3c:d8:6d:d8:99:06: 71:fc:bd:79:93:43:06:fd:c5:96:c5:28:bd:83:2f: 49:39:81:43:a9:69:f3:cd:58:5c:d2:09:94:a1:98: 80:63:dd:a0:68:7c:c9:9b:e6:fb:6e:0b:da:2a:1c: d8:f7:fa:21:5c:9a:ca:ee:5f:b0:e4:64:f9:26:68: 35:e3:22:b7:ec:02:85:f5:45:7f:f9:2e:8f:92:e3: c7:a6:08:4e:a8:0d:8c:a1:39:25:62:2d:a3:fd:60: 2e:5c:cd:9a:22:48:ba:a8:a4:00:09:76:30:ea:c9: 38:93:92:a2:8d:d5:49:b8:d9:f1:59:7c:9c:79:78: cb:41:3a:54:46:93:32:46:17:cd:80:9e:f7:4c:0c: 2a:d4:ea:3c:48:ca:ca:8a:a5:e3:30:9d:ca:73:ad: 1c:42:ea:73:b1:41:aa:5b:dd:b9:46:38:53:0a:73: e8:18:95:e8:7c:61:f2:7e:f4:bc:f8:20:f0:a2:8d: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7A:08:E4:22:7A:50:FF:D6:C3:D3:47:64:A7:10:ED:F4:05:F7:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78707eeb-0516-34f6-bb52-c611e4ab20cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:6a:b3:07:50:54:2b:e7:4e:8c:87:9e:e8:18:f9:47:d0:cb: 91:cd:e5:fb:07:24:52:50:db:32:9c:ad:7b:eb:d7:56:a4:46: 16:ed:07:71:fb:d5:f4:23:f8:c9:64:6a:c2:03:7a:f4:d6:ff: b9:de:08:1d:d8:af:ab:7f:c5:4f:75:5c:6c:d5:eb:8d:b8:ca: a8:39:a3:99:ee:4a:10:c4:f5:58:19:3b:1e:60:c0:f5:25:44: c2:2d:b0:2d:e6:e8:53:af:44:c2:cf:eb:fb:ff:59:4b:f2:df: b3:f5:8b:64:32:a3:96:3b:57:a6:3d:02:9f:8c:54:34:f2:42: dc:08:71:b9:90:57:40:28:b3:62:8c:2b:1b:68:4e:9b:76:66: 40:c7:c3:ab:63:12:4e:fd:02:bc:5f:31:b3:db:76:c5:4b:c6: 6a:47:9a:83:d4:eb:9b:49:fd:69:d7:01:4a:e5:44:76:59:ce: 04:8a:d7:65:c5:19:ce:eb:62:ce:a1:b0:24:be:fb:2c:a4:4b: 95:3e:de:69:63:82:c3:2b:c6:31:9e:75:83:6a:5a:f4:0c:50: d8:83:7d:23:99:ac:3a:74:ed:5b:38:68:62:6b:c6:43:00:4e: f8:f1:f4:b5:01:ed:6c:69:3a:6c:3e:c4:10:9e:2d:61:65:f7: 3f:e8:38:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L1rvF5t4KfmDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NWVmOGZmMGMtNWFlYy00ZTc2LWIyYzAtNGEyN2Y2MmI5ZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklVR/azcYAOAyQDSRJZrw1RO8MOJjkdmPcpb 1hAVWPP/1bowirhXTA/qn8ke5AdPy3Qk9qjT2QWBenMFoRKIT07wPE482G3YmQZx /L15k0MG/cWWxSi9gy9JOYFDqWnzzVhc0gmUoZiAY92gaHzJm+b7bgvaKhzY9/oh XJrK7l+w5GT5Jmg14yK37AKF9UV/+S6PkuPHpghOqA2MoTklYi2j/WAuXM2aIki6 qKQACXYw6sk4k5KijdVJuNnxWXyceXjLQTpURpMyRhfNgJ73TAwq1Oo8SMrKiqXj MJ3Kc60cQupzsUGqW925RjhTCnPoGJXofGHyfvS8+CDwoo10GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt6COQielD/1sPTR2SnEO30BffEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzg3MDdlZWItMDUxNi0z NGY2LWJiNTItYzYxMWU0YWIyMGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxqswdQVCvnToyHnugY+UfQy5HN5fsHJFJQ2zKcrXvr11akRhbtB3H7 1fQj+MlkasIDevTW/7neCB3Yr6t/xU91XGzV6424yqg5o5nuShDE9VgZOx5gwPUl RMItsC3m6FOvRMLP6/v/WUvy37P1i2Qyo5Y7V6Y9Ap+MVDTyQtwIcbmQV0Aos2KM KxtoTpt2ZkDHw6tjEk79ArxfMbPbdsVLxmpHmoPU65tJ/WnXAUrlRHZZzgSK12XF Gc7rYs6hsCS++yykS5U+3mljgsMrxjGedYNqWvQMUNiDfSOZrDp07Vs4aGJrxkMA Tvjx9LUB7WxpOmw+xBCeLWFl9z/oONA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:06 2025 by rpki-client