$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af870a15-06c6-3eaa-8426-c162e67d12a4.roa File: af870a15-06c6-3eaa-8426-c162e67d12a4.roa (raw, json) Hash identifier: IiYGIUgRf306ggvfsMCNKVNWqFPAEuS73mBTH/8PBLE= Subject key identifier: 63:75:99:4C:DA:88:27:BB:AF:DE:04:25:51:9A:04:16:E4:E7:F3:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE30E784F053A8F2A9A5C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af870a15-06c6-3eaa-8426-c162e67d12a4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:30:e7:84:f0:53:a8:f2:a9:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d2773abe-9b86-4e76-b9d8-76cdb3a0e4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:38:55:c1:cb:58:75:ae:6e:ac:20:5b:22: e8:18:c7:6f:f1:9a:17:69:9a:9f:a8:0b:f2:b3:9f: 4f:ff:b6:16:e2:3c:2a:2a:14:8e:d2:0e:94:68:01: 84:49:a8:23:be:45:58:98:8c:9c:1b:29:6c:0c:fb: b3:19:91:66:0b:d6:38:2d:f6:16:76:42:6e:a2:e1: 05:35:f4:6b:25:d9:71:7e:c1:4c:43:5b:69:a7:53: 64:5e:68:56:4e:a7:37:9c:04:50:ba:36:88:fa:16: 35:47:c6:56:4b:aa:ec:08:e9:03:87:34:a9:c3:c2: 97:4a:2f:7a:55:aa:8b:47:e8:66:aa:bb:00:07:61: 60:ef:f6:84:66:8e:1a:59:74:bc:57:68:7d:84:41: 44:d9:58:c6:ed:d0:28:52:7e:95:78:61:c7:02:60: 34:e6:95:94:c4:b0:76:a5:8f:1b:85:39:a8:a9:81: ad:f7:f0:05:98:00:9e:cf:9b:78:54:84:bd:cc:b3: 75:4c:e1:e5:f4:c9:da:5c:e8:c5:3f:e4:80:d7:35: 06:79:4e:60:36:18:5d:ae:89:2f:da:5d:15:b6:48: 7e:ee:67:9b:a3:30:bc:57:b4:57:7a:f0:b9:27:1c: 1c:b7:a8:61:32:ca:e1:2b:83:40:7a:8d:94:d9:c5: 26:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:75:99:4C:DA:88:27:BB:AF:DE:04:25:51:9A:04:16:E4:E7:F3:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af870a15-06c6-3eaa-8426-c162e67d12a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2b:1e:b7:82:96:34:81:5d:a2:bb:67:f6:05:25:5e:03:97: 5b:d3:41:7c:6e:aa:e6:39:a7:99:db:40:49:d1:35:5f:0d:33: 14:27:04:e1:c2:ff:2d:51:ac:57:06:b6:55:0b:a4:91:91:a1: 80:d6:07:71:c3:c5:c3:5a:b6:d8:2e:6d:ca:ab:b1:99:65:8c: c2:68:7e:48:9f:44:65:1f:5c:7f:00:9e:c8:3e:83:41:cc:53: 1d:36:90:55:de:c8:3a:09:c5:93:75:88:b7:9c:9f:5a:b1:a8: aa:9e:f3:64:06:fe:b8:2a:16:ad:a1:ce:be:e4:ee:6d:ea:3a: cc:b7:52:a2:49:1d:f6:21:3b:2c:0d:a7:9c:ab:1c:16:be:7c: 6b:8d:84:dc:e4:aa:ae:69:3b:cd:14:51:36:11:8c:5c:b2:39: a6:7a:12:7a:ba:c5:e6:b9:ef:a9:09:c2:c3:90:d5:8e:ae:b5: 6c:a3:b2:a4:4b:a1:e2:19:bb:17:85:56:40:3e:0e:3b:8a:40: 59:5c:16:6e:8e:a0:f4:82:56:60:9b:94:8f:d2:f2:cb:a0:0a: 1e:56:f0:7c:1f:a6:1b:de:5c:aa:5b:c8:b9:37:dc:92:2b:01: 59:52:f4:67:2b:7b:50:4a:71:fb:30:6a:90:17:ba:d4:33:47: 6d:02:cd:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzjDnhPBTqPKppcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDI3NzNhYmUtOWI4Ni00ZTc2LWI5ZDgtNzZjZGIzYTBlNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfM4VcHLWHWubqwgWyLoGMdv8ZoXaZqfqAvy s59P/7YW4jwqKhSO0g6UaAGESagjvkVYmIycGylsDPuzGZFmC9Y4LfYWdkJuouEF NfRrJdlxfsFMQ1tpp1NkXmhWTqc3nARQujaI+hY1R8ZWS6rsCOkDhzSpw8KXSi96 VaqLR+hmqrsAB2Fg7/aEZo4aWXS8V2h9hEFE2VjG7dAoUn6VeGHHAmA05pWUxLB2 pY8bhTmoqYGt9/AFmACez5t4VIS9zLN1TOHl9MnaXOjFP+SA1zUGeU5gNhhdrokv 2l0Vtkh+7mebozC8V7RXevC5Jxwct6hhMsrhK4NAeo2U2cUm0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN1mUzaiCe7r94EJVGaBBbk5/P+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWY4NzBhMTUtMDZjNi0z ZWFhLTg0MjYtYzE2MmU2N2QxMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQrHreCljSBXaK7Z/YFJV4Dl1vTQXxuquY5p5nbQEnRNV8NMxQnBOHC /y1RrFcGtlULpJGRoYDWB3HDxcNattgubcqrsZlljMJofkifRGUfXH8Ansg+g0HM Ux02kFXeyDoJxZN1iLecn1qxqKqe82QG/rgqFq2hzr7k7m3qOsy3UqJJHfYhOywN p5yrHBa+fGuNhNzkqq5pO80UUTYRjFyyOaZ6Enq6xea576kJwsOQ1Y6utWyjsqRL oeIZuxeFVkA+DjuKQFlcFm6OoPSCVmCblI/S8sugCh5W8HwfphveXKpbyLk33JIr AVlS9Gcre1BKcfswapAXutQzR20CzXA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:41 2025 by rpki-client