$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0e2b8a6-5cbe-31bf-9692-3e0d7baaf6ab.roa File: c0e2b8a6-5cbe-31bf-9692-3e0d7baaf6ab.roa (raw, json) Hash identifier: tQDdZQML/4tMaVLMBwJPiyU0dmdu/jgI/C1TmeZnL58= Subject key identifier: 19:1A:3D:3F:6F:25:D6:9C:98:C5:CC:D2:D3:6D:E1:37:80:2B:72:6C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD557FE609AEC53D082B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0e2b8a6-5cbe-31bf-9692-3e0d7baaf6ab.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.251.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:55:7f:e6:09:ae:c5:3d:08:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7c0661ee-df0b-4dd9-a2fa-5fc1dc13559f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:72:69:e7:cf:78:dc:50:95:81:e0:b8:52: d8:80:81:b7:43:66:80:f4:07:b9:c0:39:f1:7d:01: 95:20:1e:f4:0a:89:a4:b8:86:1e:21:70:83:47:1a: 2a:b1:73:03:ee:0f:b9:b4:13:09:1f:f8:c0:21:d3: a5:c6:7e:0d:ab:68:ea:96:51:c1:6a:f5:01:be:73: f2:9a:ef:f2:72:ef:41:1a:31:61:2c:e8:93:10:56: b2:70:09:69:d5:28:75:73:c3:ae:ff:07:a1:da:1f: 94:de:33:31:49:61:44:ef:a2:a5:a9:e5:fd:79:4b: 3c:9d:58:26:fb:cc:4c:d6:19:5a:25:41:2f:71:83: 57:0d:17:5d:2c:26:6a:31:b6:c5:27:54:02:4e:f8: 42:40:09:3a:e4:5e:3f:3f:ea:20:47:ce:1b:ce:ec: 78:c7:d8:aa:6c:52:e9:de:7f:10:69:a8:13:20:09: 9e:74:5c:9c:fb:4d:f0:a8:96:0d:bd:b8:65:13:e9: 7a:3a:0b:ac:fa:6d:f1:b0:89:e9:bf:16:de:75:5c: cb:cd:34:42:03:4c:24:c9:95:c8:e9:de:31:b5:1b: c7:6e:57:27:9f:8c:f9:68:81:02:06:15:1d:91:8c: c5:41:74:82:d1:a2:71:ba:d0:57:8d:f9:58:45:78: bf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1A:3D:3F:6F:25:D6:9C:98:C5:CC:D2:D3:6D:E1:37:80:2B:72:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0e2b8a6-5cbe-31bf-9692-3e0d7baaf6ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c5:d6:34:fa:a3:e1:7d:8f:11:2d:c2:d6:9b:dd:d8:7c:0e: d1:b0:07:cc:c1:57:a4:72:de:ed:13:32:c0:3f:f3:86:a7:76: 53:93:be:c2:5c:cc:4f:bc:86:74:b0:3c:83:d8:5a:9c:08:e5: d1:a2:99:d1:bb:73:da:d9:b3:7f:ed:06:75:87:bd:d0:e2:96: 0d:47:5d:aa:95:e3:03:bd:1c:fe:f5:e9:d1:70:0e:4b:4e:5a: 95:96:42:05:96:e7:cb:08:8a:c7:1b:53:90:c3:6d:23:63:0e: 78:bf:b6:25:6d:e9:e7:87:7e:3e:56:1f:cc:d7:8a:98:bb:3a: a8:21:99:c7:03:39:75:64:26:62:e3:fb:55:eb:a5:a9:30:1a: 66:4a:0b:6d:28:ad:b2:25:f3:5e:b7:51:2a:d1:cd:9b:fe:a3: 35:9d:2f:f7:8b:f1:d5:34:c2:3a:6c:40:30:e0:cf:0d:b8:2b: 96:dc:ad:df:fd:2c:d2:71:70:5d:9c:d6:45:ba:78:3c:63:d1: 7d:78:31:06:fe:3d:61:6b:34:c3:92:d2:76:4f:84:05:7f:97: 2f:93:e7:e3:75:08:f3:88:b3:08:9e:e8:12:74:ca:27:31:1f: 62:4c:71:e3:a0:e0:7d:72:68:c6:c1:07:a7:9a:4d:7c:af:fc: fc:8c:13:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVV/5gmuxT0IK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2MwNjYxZWUtZGYwYi00ZGQ5LWEyZmEtNWZjMWRjMTM1NTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC9yaefPeNxQlYHguFLYgIG3Q2aA9Ae5wDnx fQGVIB70ComkuIYeIXCDRxoqsXMD7g+5tBMJH/jAIdOlxn4Nq2jqllHBavUBvnPy mu/ycu9BGjFhLOiTEFaycAlp1Sh1c8Ou/weh2h+U3jMxSWFE76KlqeX9eUs8nVgm +8xM1hlaJUEvcYNXDRddLCZqMbbFJ1QCTvhCQAk65F4/P+ogR84bzux4x9iqbFLp 3n8QaagTIAmedFyc+03wqJYNvbhlE+l6Ogus+m3xsInpvxbedVzLzTRCA0wkyZXI 6d4xtRvHblcnn4z5aIECBhUdkYzFQXSC0aJxutBXjflYRXi/rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkaPT9vJdacmMXM0tNt4TeAK3JsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzBlMmI4YTYtNWNiZS0z MWJmLTk2OTItM2UwZDdiYWFmNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzF1jT6o+F9jxEtwtab3dh8DtGwB8zBV6Ry3u0TMsA/84andlOTvsJc zE+8hnSwPIPYWpwI5dGimdG7c9rZs3/tBnWHvdDilg1HXaqV4wO9HP716dFwDktO WpWWQgWW58sIiscbU5DDbSNjDni/tiVt6eeHfj5WH8zXipi7OqghmccDOXVkJmLj +1XrpakwGmZKC20orbIl8163USrRzZv+ozWdL/eL8dU0wjpsQDDgzw24K5bcrd/9 LNJxcF2c1kW6eDxj0X14MQb+PWFrNMOS0nZPhAV/ly+T5+N1CPOIswie6BJ0yicx H2JMceOg4H1yaMbBB6eaTXyv/PyMEwc= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:46 2025 by rpki-client