$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa File: de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa (raw, json) Hash identifier: PCkNMicCtR6HXR6450sDzt4CyjlnjU+AdkH0ZsTsVro= Subject key identifier: 10:0D:10:08:4A:5B:01:DB:CD:1C:6A:C5:C4:57:9E:54:F4:14:41:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB817C736BF9168492DC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b8:17:c7:36:bf:91:68:49:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=cd4edc85-2f71-4d14-8157-16c2677950d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:41:bb:f3:58:10:4f:ec:47:7c:4c:8e:0d:8a: 89:e6:ee:10:4d:3d:e5:6a:3a:ad:31:6f:18:b6:3b: ba:a1:3b:9c:0e:86:72:89:96:16:b2:89:a1:c0:27: 28:90:b2:8f:1a:ba:cc:d2:c5:f2:8c:ae:aa:9a:eb: 04:cb:84:57:40:bd:09:35:a4:f8:7a:64:4c:4e:3e: fa:d0:f8:36:5c:2c:24:a6:6d:b6:c0:60:69:ed:dc: 48:d6:61:ab:ff:dd:8f:03:84:fe:3c:a7:1f:0a:96: 40:88:24:23:7a:58:b4:ca:58:cf:08:34:fd:69:ce: ac:dc:42:dd:1a:05:f7:2a:73:81:b3:58:21:72:b1: 9b:3d:6a:9f:1c:37:6f:1a:95:92:74:f1:58:5a:04: 78:93:16:0d:c4:fe:13:c9:31:94:2d:0e:97:84:d6: 71:e4:21:bd:a6:43:55:a3:97:b3:8e:ba:d1:a7:80: a9:33:94:ef:76:34:5f:08:2b:4d:0a:8e:cf:8d:db: 0f:1a:0e:b9:66:03:9e:bd:32:b6:14:c5:30:5b:7e: 4d:20:77:10:db:1e:c2:98:6d:b4:36:01:e5:4d:fa: bd:f1:fd:f1:ec:7e:02:0f:cd:ee:73:cb:fa:06:3c: b6:70:d1:d4:60:74:a3:4c:55:0a:fb:2d:11:dd:79: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0D:10:08:4A:5B:01:DB:CD:1C:6A:C5:C4:57:9E:54:F4:14:41:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de21432b-2ad4-3c12-93ba-2c7f60fe62de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:fd:b8:60:bd:40:02:a8:91:e0:7b:62:59:8d:dd:94:5f:5f: ba:b7:bf:61:70:27:b6:99:ff:7a:66:77:fa:4d:76:d9:a6:e4: a7:73:23:6f:14:c0:cc:16:4e:85:fe:94:39:3f:10:e1:7a:79: b1:94:04:ff:55:b3:a0:73:c1:d6:a7:97:4e:4f:f5:11:9c:e4: 2c:25:f0:76:b3:ad:df:7c:34:c8:c8:fc:31:91:bf:92:24:d2: ee:f2:45:c9:39:19:97:93:9b:25:8d:82:42:fa:aa:9f:2c:0e: 68:26:cd:1c:16:d6:5b:76:60:fa:9f:be:ff:9e:31:0b:1f:d4: 8e:20:d9:e6:0a:de:48:2c:bd:fc:80:b3:fd:ec:d8:05:92:d9: f1:0e:a3:ce:6c:e9:fa:55:f0:60:20:d9:f4:62:c1:a6:40:c0: 24:00:44:8e:2a:e2:42:57:02:64:b6:3e:36:24:7e:22:ae:63: 58:3a:0b:2a:d4:57:58:e9:ca:88:70:a8:43:05:43:09:65:93: 45:3b:05:6f:9b:74:e9:43:eb:58:88:e0:2d:c1:54:6c:6d:05: 83:9d:34:79:ac:5c:05:a7:70:3c:44:ae:4e:e5:67:a9:b3:a2: fc:e7:fd:0a:fb:4c:7a:a2:30:f4:0b:64:ff:41:e1:01:78:6d: f9:89:ed:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LgXxza/kWhJLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk Y2Q0ZWRjODUtMmY3MS00ZDE0LTgxNTctMTZjMjY3Nzk1MGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEG781gQT+xHfEyODYqJ5u4QTT3lajqtMW8Y tju6oTucDoZyiZYWsomhwCcokLKPGrrM0sXyjK6qmusEy4RXQL0JNaT4emRMTj76 0Pg2XCwkpm22wGBp7dxI1mGr/92PA4T+PKcfCpZAiCQjeli0yljPCDT9ac6s3ELd GgX3KnOBs1ghcrGbPWqfHDdvGpWSdPFYWgR4kxYNxP4TyTGULQ6XhNZx5CG9pkNV o5ezjrrRp4CpM5TvdjRfCCtNCo7PjdsPGg65ZgOevTK2FMUwW35NIHcQ2x7CmG20 NgHlTfq98f3x7H4CD83uc8v6Bjy2cNHUYHSjTFUK+y0R3XlDtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBANEAhKWwHbzRxqxcRXnlT0FEHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGUyMTQzMmItMmFkNC0z YzEyLTkzYmEtMmM3ZjYwZmU2MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv9uGC9QAKokeB7YlmN3ZRfX7q3v2FwJ7aZ/3pmd/pNdtmm5KdzI28U wMwWToX+lDk/EOF6ebGUBP9Vs6Bzwdanl05P9RGc5Cwl8Hazrd98NMjI/DGRv5Ik 0u7yRck5GZeTmyWNgkL6qp8sDmgmzRwW1lt2YPqfvv+eMQsf1I4g2eYK3kgsvfyA s/3s2AWS2fEOo85s6fpV8GAg2fRiwaZAwCQARI4q4kJXAmS2PjYkfiKuY1g6CyrU V1jpyohwqEMFQwllk0U7BW+bdOlD61iI4C3BVGxtBYOdNHmsXAWncDxErk7lZ6mz ovzn/Qr7THqiMPQLZP9B4QF4bfmJ7ek= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:55 2025 by rpki-client