$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa File: da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa (raw, json) Hash identifier: 97nwTK2mDzHDYYyn3cGvbbQ0G+N5dp7mZEePyItm17g= Subject key identifier: 0C:69:CC:AD:2F:21:D5:CC:05:D7:48:E9:1B:C4:8F:F5:39:0D:15:A8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB6A83AC93F49F313DD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b6:a8:3a:c9:3f:49:f3:13:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=5cb40274-0e27-46b0-a3b5-389b458e842a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:29:17:60:4e:d1:2d:de:c9:ff:ea:7f:7d: b7:f4:f4:d1:5c:4d:8e:86:c3:d5:ff:5b:49:8b:56: e8:17:67:0b:78:17:33:3b:4c:18:39:97:44:2e:93: 53:1f:5f:f1:f9:54:64:a2:f4:d6:5e:c2:07:82:09: 1c:bd:8b:fc:ad:9c:7b:7c:cf:35:eb:c8:24:e5:6d: 68:c0:06:19:9d:40:41:4f:16:b7:8b:dd:15:ea:ba: 35:c9:82:e4:ca:86:ef:37:49:68:ae:e3:3a:3a:cf: 0c:0e:cb:f9:b8:26:4f:35:bb:f5:17:1c:9d:7a:79: c9:a3:55:40:ba:39:78:58:30:11:40:68:be:01:fc: d9:2d:17:06:ca:ca:1b:33:7f:c8:ed:f5:be:ed:9b: 19:a0:3a:df:11:36:b5:cf:1c:8b:6c:50:34:6b:4d: f7:a9:b5:27:90:29:43:c5:a2:3a:4f:5b:71:7f:48: a5:41:11:b7:c7:2a:85:db:78:0c:20:38:31:e4:4e: 77:5c:a6:db:4e:72:8c:2f:c0:97:12:5e:5b:77:da: 22:57:30:20:36:a9:36:fa:22:c2:bd:a4:8f:d2:d2: 9a:8c:14:91:62:90:f0:04:e8:b6:98:6c:fc:aa:0d: 8f:a2:d7:d5:66:f2:bc:76:43:5a:88:a7:ac:14:d9: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:69:CC:AD:2F:21:D5:CC:05:D7:48:E9:1B:C4:8F:F5:39:0D:15:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:10:f9:e4:5a:1a:d0:fe:20:0e:82:b8:01:0a:90:91:27:f3: 7a:4a:0a:63:22:00:5b:13:4b:68:66:69:0e:6b:82:6c:d0:83: 2e:28:1a:f2:cf:db:e2:65:be:68:98:b8:90:e3:6e:82:cd:15: 6e:a0:7d:11:f0:e5:63:e6:a2:56:92:da:b0:42:91:e6:fc:dc: 31:3c:d2:77:ce:aa:e7:e6:25:ea:15:48:3b:6f:78:17:73:4a: ff:35:60:92:39:07:01:1b:bb:f5:40:11:dc:59:a5:04:9f:e3: 8f:5d:11:03:d4:30:9d:b8:02:80:ab:af:b5:1e:a4:51:e0:b4: 46:32:2f:d0:9a:e1:aa:33:b3:9a:0d:f0:1f:92:88:54:57:46: 29:bb:67:0a:05:59:ed:a1:ce:c0:3a:cb:d1:92:a6:10:dc:5b: 77:ce:1f:78:83:17:74:91:87:c5:6f:e6:d2:4b:70:e3:8d:d9: 79:07:d5:34:90:c8:16:5a:ab:84:33:cc:77:d0:cd:6a:ba:4a: a7:65:21:e2:61:41:5c:53:ed:32:f8:24:d5:31:62:92:ea:6d: 4f:61:f9:36:ad:4a:cd:f4:55:1e:bb:02:8d:b1:23:a0:37:7c: dd:b1:0b:14:29:ff:bc:d3:5a:ea:cc:72:2f:96:a3:f4:4a:1f: 42:af:f8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LaoOsk/SfMT3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NWNiNDAyNzQtMGUyNy00NmIwLWEzYjUtMzg5YjQ1OGU4NDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbspF2BO0S3eyf/qf3239PTRXE2OhsPV/1tJ i1boF2cLeBczO0wYOZdELpNTH1/x+VRkovTWXsIHggkcvYv8rZx7fM8168gk5W1o wAYZnUBBTxa3i90V6ro1yYLkyobvN0loruM6Os8MDsv5uCZPNbv1FxydennJo1VA ujl4WDARQGi+AfzZLRcGysobM3/I7fW+7ZsZoDrfETa1zxyLbFA0a033qbUnkClD xaI6T1txf0ilQRG3xyqF23gMIDgx5E53XKbbTnKML8CXEl5bd9oiVzAgNqk2+iLC vaSP0tKajBSRYpDwBOi2mGz8qg2PotfVZvK8dkNaiKesFNmZBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxpzK0vIdXMBddI6RvEj/U5DRWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGEzZTQ4ZmQtNmVhOC0z NDYyLTlhNmItN2MxZTNkYTUwZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYQ+eRaGtD+IA6CuAEKkJEn83pKCmMiAFsTS2hmaQ5rgmzQgy4oGvLP 2+JlvmiYuJDjboLNFW6gfRHw5WPmolaS2rBCkeb83DE80nfOqufmJeoVSDtveBdz Sv81YJI5BwEbu/VAEdxZpQSf449dEQPUMJ24AoCrr7UepFHgtEYyL9Ca4aozs5oN 8B+SiFRXRim7ZwoFWe2hzsA6y9GSphDcW3fOH3iDF3SRh8Vv5tJLcOON2XkH1TSQ yBZaq4QzzHfQzWq6SqdlIeJhQVxT7TL4JNUxYpLqbU9h+TatSs30VR67Ao2xI6A3 fN2xCxQp/7zTWurMci+Wo/RKH0Kv+IA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:36 2025 by rpki-client