$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa File: f957cfeb-5830-39ef-9099-bec5d5f55221.roa (raw, json) Hash identifier: Wcbe0gHSkTE/vOucD9r67KGe8tJTZ3QrVoXOAsrp9Pc= Subject key identifier: 71:91:98:50:2C:59:5B:3F:A2:21:EC:34:FD:99:41:76:E2:CA:2C:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE16FA0E896B8EAF375780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.251.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:16:fa:0e:89:6b:8e:af:37:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a6b0f6f0-492f-48a3-906e-00a59081f569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:be:23:4a:1a:98:cb:05:dd:e5:fc:b2:af: ad:bf:25:0d:45:dd:8f:54:f8:fd:c3:52:eb:9c:0f: bf:73:2e:05:4d:62:ab:f5:92:1b:27:4b:e3:91:39: a5:1b:23:8d:8f:7d:4a:44:dc:7c:53:1e:74:8e:d8: 12:8a:7c:db:fc:e0:a9:0e:e7:fe:9e:17:66:5c:e2: ff:14:b5:43:6d:c5:6b:fb:e0:02:06:22:7b:1c:dc: 56:11:e8:fd:43:b9:5b:aa:0b:d7:db:23:18:4f:62: 23:fa:9e:29:6f:dd:1b:cb:59:5f:08:68:00:d6:0b: 33:ab:5a:f5:ba:c1:14:88:31:5d:b7:bc:c0:4f:86: bf:c0:7c:4d:17:da:54:ba:ca:c4:35:c7:e3:97:14: e0:be:8b:3c:15:c1:f2:c0:5b:70:60:22:4b:31:6b: 50:7c:cf:ff:7d:26:04:b3:79:6b:a0:9c:99:af:92: 84:d1:1a:b6:1f:0e:e8:0f:a6:6e:f4:56:2a:43:d3: 34:af:a5:16:f4:f2:d8:8a:59:5d:38:54:22:a3:0d: ae:fa:d1:23:39:b3:30:fe:8b:65:33:75:f9:47:bf: f3:bd:46:d1:39:97:d8:80:88:9d:30:b4:ec:fa:d4: 1d:f1:32:70:ab:82:2c:3a:a5:e4:56:4a:6f:66:72: 3a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:91:98:50:2C:59:5B:3F:A2:21:EC:34:FD:99:41:76:E2:CA:2C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f9:c0:35:02:f5:a1:cf:d4:7d:15:e5:47:75:6e:be:4e:69: c0:e6:2b:cb:98:83:e8:ce:a7:fa:5f:87:e1:49:19:be:4b:25: 7b:ea:eb:9c:e3:7d:f5:48:de:d5:a3:5b:be:d0:70:1e:31:bc: 06:84:92:43:3f:16:9e:1b:b6:4d:6b:6c:04:05:3b:68:a6:db: 09:e7:44:b7:15:ca:66:f9:71:bb:2f:b2:38:e2:37:90:57:e8: 36:3f:33:ac:b5:85:6c:a2:f7:4e:eb:de:89:6a:af:45:86:10: 7b:90:9b:41:d2:63:23:72:dc:33:7a:06:14:2e:fb:18:a1:ce: 6a:f3:7c:5f:4c:aa:ac:ee:c2:fb:35:d0:ab:d4:5e:68:e0:b9: c0:57:50:ed:62:89:1f:f3:5e:d4:be:17:1c:de:bb:69:3a:9f: 9a:46:e6:6e:8d:3c:67:83:9d:d4:81:0f:07:af:6a:a9:cc:90: c2:68:72:3e:93:4e:5b:38:41:46:89:6d:d3:5b:23:8d:18:e0: 4f:4a:75:8e:e6:3c:ac:4e:ba:cb:61:47:8f:1c:3d:a4:91:4a: c5:ac:56:61:31:b4:7e:10:2e:45:db:9e:d2:44:c8:4f:51:cc: 3e:19:be:72:cc:00:da:46:ec:e3:72:fc:12:e0:0f:c0:f4:d6: 95:fd:2f:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhb6Dolrjq83V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTZiMGY2ZjAtNDkyZi00OGEzLTkwNmUtMDBhNTkwODFmNTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoa+I0oamMsF3eX8sq+tvyUNRd2PVPj9w1Lr nA+/cy4FTWKr9ZIbJ0vjkTmlGyONj31KRNx8Ux50jtgSinzb/OCpDuf+nhdmXOL/ FLVDbcVr++ACBiJ7HNxWEej9Q7lbqgvX2yMYT2Ij+p4pb90by1lfCGgA1gszq1r1 usEUiDFdt7zAT4a/wHxNF9pUusrENcfjlxTgvos8FcHywFtwYCJLMWtQfM//fSYE s3lroJyZr5KE0Rq2Hw7oD6Zu9FYqQ9M0r6UW9PLYilldOFQiow2u+tEjObMw/otl M3X5R7/zvUbROZfYgIidMLTs+tQd8TJwq4IsOqXkVkpvZnI6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGRmFAsWVs/oiHsNP2ZQXbiyiyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjk1N2NmZWItNTgzMC0z OWVmLTkwOTktYmVjNWQ1ZjU1MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL5wDUC9aHP1H0V5Ud1br5OacDmK8uYg+jOp/pfh+FJGb5LJXvq65zj ffVI3tWjW77QcB4xvAaEkkM/Fp4btk1rbAQFO2im2wnnRLcVymb5cbsvsjjiN5BX 6DY/M6y1hWyi907r3olqr0WGEHuQm0HSYyNy3DN6BhQu+xihzmrzfF9Mqqzuwvs1 0KvUXmjgucBXUO1iiR/zXtS+Fxzeu2k6n5pG5m6NPGeDndSBDwevaqnMkMJocj6T Tls4QUaJbdNbI40Y4E9KdY7mPKxOusthR48cPaSRSsWsVmExtH4QLkXbntJEyE9R zD4ZvnLMANpG7ONy/BLgD8D01pX9L38= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:02 2025 by rpki-client