$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e856e92-81ef-3bec-854a-7c5e0750555b.roa File: 8e856e92-81ef-3bec-854a-7c5e0750555b.roa (raw, json) Hash identifier: 32mdS6bdGZoi4DsQsI1U7JQwg2S3dDT3Dd6ge53s5oc= Subject key identifier: 74:92:F0:F8:47:FA:E2:4A:5C:1B:49:44:D9:CD:67:B5:48:79:06:9C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECBE0EDCAABA6AB92C3B70 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e856e92-81ef-3bec-854a-7c5e0750555b.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:be:0e:dc:aa:ba:6a:b9:2c:3b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=222a6020-18a6-4adc-b4a5-735aa6f7f866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:2f:57:c5:e5:16:7a:ae:00:a4:29:7d:14: 87:94:d3:1d:20:78:bd:b2:5d:ea:18:71:fc:2d:67: 54:f2:ca:6e:b7:79:c6:c4:3d:d1:58:2d:59:b6:e7: 74:89:64:13:6c:75:0d:2e:f3:ab:2a:27:99:b3:bd: a3:82:a3:e6:46:36:73:97:84:27:9f:1a:6e:da:5b: 32:92:1b:a1:ba:79:f1:8b:c4:b1:46:58:0a:28:09: b8:f5:26:72:73:0c:25:36:16:50:ef:68:ff:9a:f2: 45:8d:13:30:a5:58:8a:e8:22:28:6a:6f:d0:3d:97: 05:f0:25:b8:10:62:d7:43:a5:f8:85:11:b8:28:46: c1:d9:88:87:37:1e:ff:83:09:1b:ed:0c:b4:35:86: 7f:03:42:c8:e6:98:a9:6e:68:f7:64:d7:dc:de:b9: 43:b4:7c:99:d6:2d:e9:43:e5:51:40:18:7c:d1:24: f0:ce:c7:54:0a:73:55:a2:0e:5b:79:2b:c0:78:07: 55:ca:db:a2:30:b7:06:e7:ed:a2:69:0d:e3:dc:98: 12:34:4e:f0:60:14:5a:c7:70:76:3b:f5:89:93:f6: 04:ac:d9:3a:cb:4b:1f:b0:e2:64:80:fe:f5:60:78: 63:c8:d3:05:c8:4d:04:5b:ff:40:c6:1b:31:9a:51: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:92:F0:F8:47:FA:E2:4A:5C:1B:49:44:D9:CD:67:B5:48:79:06:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e856e92-81ef-3bec-854a-7c5e0750555b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:03:ee:0f:cd:9c:6b:79:9a:d7:b6:d7:10:8c:ca:91:ce:b1: 3e:7f:71:8f:c0:5b:62:68:af:82:0b:0f:5d:2e:d6:b7:10:c4: 7d:6c:d2:db:0d:17:e1:3c:03:d9:1e:f1:3e:93:c9:56:5c:5f: 21:d3:c7:19:c1:13:a9:e2:c4:8c:9f:09:56:db:ab:f6:e9:5b: 13:fc:31:67:0b:2f:f3:c4:c0:d1:fe:11:44:db:9f:2e:12:fb: f4:ea:30:00:c7:26:b2:4c:eb:90:9b:d3:5f:6e:04:c0:20:a4: 3d:8b:e6:fb:0d:1b:5f:c3:49:9f:3b:55:a8:5d:d1:3f:db:ed: 10:52:fc:22:7f:0f:e2:01:2f:7e:84:80:f8:ad:80:5c:c8:69: 5e:3d:28:34:5a:e1:90:5b:52:0c:5c:20:fb:71:78:01:6a:e2: 9d:95:62:2f:a5:41:47:42:77:87:1c:85:c8:56:a6:08:b6:23: e2:b4:e4:34:c5:7e:0d:c1:17:a1:6c:5d:be:16:ec:b2:89:86: b5:89:8c:af:8b:3e:bb:e5:7c:8c:02:94:e1:65:d5:87:26:ca: 98:13:b0:1d:1c:d3:28:a8:60:db:f7:94:ea:c5:08:35:04:47: 0a:ee:0b:2c:65:53:cd:ad:0b:c6:1c:25:1f:da:8b:31:9a:f2: 92:37:3d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97L4O3Kq6arksO3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MjIyYTYwMjAtMThhNi00YWRjLWI0YTUtNzM1YWE2ZjdmODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt4vV8XlFnquAKQpfRSHlNMdIHi9sl3qGHH8 LWdU8sput3nGxD3RWC1Ztud0iWQTbHUNLvOrKieZs72jgqPmRjZzl4Qnnxpu2lsy khuhunnxi8SxRlgKKAm49SZycwwlNhZQ72j/mvJFjRMwpViK6CIoam/QPZcF8CW4 EGLXQ6X4hRG4KEbB2YiHNx7/gwkb7Qy0NYZ/A0LI5pipbmj3ZNfc3rlDtHyZ1i3p Q+VRQBh80STwzsdUCnNVog5beSvAeAdVytuiMLcG5+2iaQ3j3JgSNE7wYBRax3B2 O/WJk/YErNk6y0sfsOJkgP71YHhjyNMFyE0EW/9AxhsxmlEOTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSS8PhH+uJKXBtJRNnNZ7VIeQacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGU4NTZlOTItODFlZi0z YmVjLTg1NGEtN2M1ZTA3NTA1NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwD7g/NnGt5mte21xCMypHOsT5/cY/AW2Jor4ILD10u1rcQxH1s0tsN F+E8A9ke8T6TyVZcXyHTxxnBE6nixIyfCVbbq/bpWxP8MWcLL/PEwNH+EUTbny4S +/TqMADHJrJM65Cb019uBMAgpD2L5vsNG1/DSZ87Vahd0T/b7RBS/CJ/D+IBL36E gPitgFzIaV49KDRa4ZBbUgxcIPtxeAFq4p2VYi+lQUdCd4cchchWpgi2I+K05DTF fg3BF6FsXb4W7LKJhrWJjK+LPrvlfIwClOFl1YcmypgTsB0c0yioYNv3lOrFCDUE RwruCyxlU82tC8YcJR/aizGa8pI3Pb8= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:12 2025 by rpki-client