$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28a62139-5b9c-3af2-b9ed-1a5f3d775dda.roa File: 28a62139-5b9c-3af2-b9ed-1a5f3d775dda.roa (raw, json) Hash identifier: kkca1lQsTQUgvPKIcYLzR8UzNXioG2UOfY49rQ0Y34M= Subject key identifier: 2A:7E:B5:8D:1C:74:5E:0E:DC:BD:FF:21:59:C8:C0:2D:8D:FB:58:10 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498542FF672272C469392600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28a62139-5b9c-3af2-b9ed-1a5f3d775dda.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.250.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:42:ff:67:22:72:c4:69:39:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=927d7679-9109-4a50-9390-2ccc0dd74b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:96:8c:19:6f:8d:6f:b1:4f:de:e2:f4:88: fc:14:78:69:0b:27:57:2c:6c:f3:c9:5e:6c:33:d1: 8d:8a:94:17:29:cb:eb:5a:ee:7e:f1:d5:84:b3:3e: d2:1d:89:10:c6:f5:ee:22:1e:f2:2e:77:4e:31:ef: cd:af:e1:3a:ad:80:65:68:27:58:1f:d1:6c:b6:b5: 5a:39:ca:7d:d5:19:b8:0a:34:b8:2f:4c:d4:6f:b2: a0:06:cf:6e:b3:43:d6:82:9e:48:db:66:08:bb:44: 13:4f:c8:ee:e2:85:17:fd:19:7d:e8:df:86:b5:2e: 8b:6a:19:af:c4:19:08:d5:00:3b:d5:56:3b:99:12: 2b:67:a1:34:ba:0e:1a:72:bd:03:47:f6:08:5f:7a: 69:81:f5:24:82:5a:17:6d:bf:3a:0f:d1:4e:88:f0: 2e:7d:9f:73:50:62:4f:3f:84:2f:18:51:3b:e5:73: 0a:1e:94:ec:ec:ff:e9:e6:9f:17:06:e7:66:91:3a: 31:ff:d1:ff:2c:d9:25:f9:62:33:2d:5f:c2:ad:72: 46:a1:34:73:ff:2b:e4:10:f1:78:36:89:12:00:d5: 87:f6:d5:9f:07:63:c4:3a:13:3c:b4:5d:32:5c:3b: 81:87:24:40:fa:96:d2:f3:30:14:54:b3:fc:fa:e0: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7E:B5:8D:1C:74:5E:0E:DC:BD:FF:21:59:C8:C0:2D:8D:FB:58:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28a62139-5b9c-3af2-b9ed-1a5f3d775dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a9:1b:01:44:9a:39:71:62:d7:fb:51:5e:65:b9:9c:de:72: 4f:36:75:08:e5:9c:c7:94:46:24:ad:3a:1c:1d:dd:81:d2:85: 8f:a7:ed:e8:a1:03:7a:0e:3a:04:12:48:f0:56:eb:b1:ea:f4: 29:80:8d:4a:89:be:d0:83:75:7b:a8:a3:16:2c:2d:f1:c0:d5: 9b:d5:e8:b4:36:df:74:24:83:74:0e:4d:ea:8e:79:c8:0b:e8: 35:07:9a:41:2f:9d:55:e5:da:0a:15:7c:24:dd:e7:cd:bd:d7: 4d:fa:60:7e:20:89:f2:15:6e:f8:9f:b4:e5:6c:4d:9c:6c:53: ba:43:e3:06:3c:e1:55:90:a4:b1:91:0b:06:87:d8:9d:33:0f: f7:be:8c:0b:23:03:60:66:a2:a6:83:2a:91:fa:2a:bf:58:ec: 00:c2:52:dd:48:5e:4c:fd:63:f3:39:31:96:e6:7e:33:0b:5b: e6:3b:5d:9b:d2:07:33:db:c1:9a:a4:3b:6b:01:62:5b:21:c1: 08:7e:3d:4d:50:07:04:c0:11:58:fe:af:33:f5:13:ac:34:96: a3:83:2a:b1:bb:a8:c5:6f:87:d5:b6:b4:b9:a7:ac:6e:eb:6c: 5f:05:ec:c1:c3:45:64:a1:54:e7:be:17:38:e8:1f:f5:6c:11: 4c:87:63:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhUL/ZyJyxGk5JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTI3ZDc2NzktOTEwOS00YTUwLTkzOTAtMmNjYzBkZDc0YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsGWjBlvjW+xT97i9Ij8FHhpCydXLGzzyV5s M9GNipQXKcvrWu5+8dWEsz7SHYkQxvXuIh7yLndOMe/Nr+E6rYBlaCdYH9FstrVa Ocp91Rm4CjS4L0zUb7KgBs9us0PWgp5I22YIu0QTT8ju4oUX/Rl96N+GtS6Lahmv xBkI1QA71VY7mRIrZ6E0ug4acr0DR/YIX3ppgfUkgloXbb86D9FOiPAufZ9zUGJP P4QvGFE75XMKHpTs7P/p5p8XBudmkTox/9H/LNkl+WIzLV/CrXJGoTRz/yvkEPF4 NokSANWH9tWfB2PEOhM8tF0yXDuBhyRA+pbS8zAUVLP8+uApKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp+tY0cdF4O3L3/IVnIwC2N+1gQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjhhNjIxMzktNWI5Yy0z YWYyLWI5ZWQtMWE1ZjNkNzc1ZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSpGwFEmjlxYtf7UV5luZzeck82dQjlnMeURiStOhwd3YHShY+n7eih A3oOOgQSSPBW67Hq9CmAjUqJvtCDdXuooxYsLfHA1ZvV6LQ233Qkg3QOTeqOecgL 6DUHmkEvnVXl2goVfCTd58291036YH4gifIVbviftOVsTZxsU7pD4wY84VWQpLGR CwaH2J0zD/e+jAsjA2BmoqaDKpH6Kr9Y7ADCUt1IXkz9Y/M5MZbmfjMLW+Y7XZvS BzPbwZqkO2sBYlshwQh+PU1QBwTAEVj+rzP1E6w0lqODKrG7qMVvh9W2tLmnrG7r bF8F7MHDRWShVOe+FzjoH/VsEUyHY3o= -----END CERTIFICATE-----Generated at Sat Sep 26 01:47:55 2026 by rpki-client