$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1b41fd-fa7a-39ed-a72a-3989d9a3e769.roa File: fd1b41fd-fa7a-39ed-a72a-3989d9a3e769.roa (raw, json) Hash identifier: 3ec0OdT12x159oZdbRgiYsHTSO3c9ONGMhNcXe8Lf2g= Subject key identifier: EB:36:6E:2F:63:84:85:96:B1:D9:1A:47:71:20:F8:9C:29:C2:76:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CE8656CA18FD814CE5400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1b41fd-fa7a-39ed-a72a-3989d9a3e769.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.250.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:e8:65:6c:a1:8f:d8:14:ce:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4aa0b1b7-e21a-48dd-b8fb-a2e955085b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:e3:ec:56:db:4c:5f:2c:a8:2b:63:91:25: 28:f0:1c:7f:4a:d0:29:0e:d4:ff:86:2b:12:99:bd: 13:aa:1e:10:cf:9f:ab:d1:28:62:05:93:f9:14:37: 1d:7c:77:10:94:c9:23:01:97:2f:a6:b5:19:b4:26: 37:22:37:e2:c6:24:5a:0d:30:30:15:90:f0:80:fd: 6f:76:73:68:34:9c:2b:a8:aa:1f:b3:a8:d0:9c:f9: c7:b8:6a:fe:c1:ab:77:51:bb:3b:69:5b:6e:5d:b9: f9:ad:c2:9f:e7:99:f9:a0:39:fd:94:3e:8b:fc:46: 15:fc:61:b7:b7:79:fe:1f:c5:a9:28:e4:63:37:b3: 18:a0:95:a5:69:44:94:79:6c:9e:6a:74:04:89:1e: 26:3b:7a:5e:c7:79:0a:0d:42:49:cd:42:15:46:c8: a2:1b:f2:44:07:a5:86:7d:51:aa:e9:df:65:58:3f: aa:b3:a8:b2:e4:af:af:ff:7c:9c:48:df:34:84:ee: 05:fd:0f:bc:6b:67:55:a5:e5:2a:db:84:18:6a:9c: 82:31:77:6e:36:9f:18:cd:bc:a7:7d:06:f2:d0:b4: f0:f4:a4:61:d4:9c:24:13:cd:82:b8:41:bf:29:85: e5:c4:44:e8:06:56:85:a2:6d:30:e4:96:b8:34:9d: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:36:6E:2F:63:84:85:96:B1:D9:1A:47:71:20:F8:9C:29:C2:76:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1b41fd-fa7a-39ed-a72a-3989d9a3e769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b4:82:62:78:74:17:b8:d3:7a:28:6d:51:32:3a:92:74:69: 34:05:d7:5a:f5:65:4c:ac:b6:45:f6:f3:0c:5a:ab:38:8a:9d: 81:dc:aa:d1:15:56:6b:f0:9f:74:42:1f:44:3e:64:bd:11:a2: ea:3a:f4:69:16:ca:e6:90:48:d0:b9:ee:b5:b6:c9:22:82:ad: 71:f1:cc:31:80:c3:86:52:39:fa:7e:47:9b:1e:db:64:50:f9: 98:c3:de:05:96:58:7e:95:a8:07:d8:f3:ab:d5:14:0d:05:29: 93:98:17:b1:58:d3:70:aa:75:5e:b7:1e:f5:b6:bb:99:07:6d: 86:52:f0:d1:1c:71:9a:e9:16:92:e4:b3:5e:2d:35:32:88:ab: e5:85:7c:4d:de:d7:7b:20:37:08:0b:58:1e:8d:be:e3:8f:a0: 0d:b0:73:49:ae:45:37:a9:6d:7d:23:3d:b1:8e:ed:1a:da:09: a7:34:5c:ec:96:19:c6:09:af:4e:1a:b3:55:20:8b:cd:c2:61: 09:51:38:f2:3b:62:fe:91:44:83:cb:79:f6:9c:f5:f7:a8:72: cd:da:95:0c:a4:3f:4a:b7:2b:a0:71:55:87:70:14:cb:d8:b1: 85:32:56:9c:10:f8:c5:1a:fc:25:b5:5d:a4:32:8c:a6:7b:70: 3a:5c:ec:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfOhlbKGP2BTOVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGFhMGIxYjctZTIxYS00OGRkLWI4ZmItYTJlOTU1MDg1Yjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/nj7FbbTF8sqCtjkSUo8Bx/StApDtT/hisS mb0Tqh4Qz5+r0ShiBZP5FDcdfHcQlMkjAZcvprUZtCY3IjfixiRaDTAwFZDwgP1v dnNoNJwrqKofs6jQnPnHuGr+wat3Ubs7aVtuXbn5rcKf55n5oDn9lD6L/EYV/GG3 t3n+H8WpKORjN7MYoJWlaUSUeWyeanQEiR4mO3pex3kKDUJJzUIVRsiiG/JEB6WG fVGq6d9lWD+qs6iy5K+v/3ycSN80hO4F/Q+8a2dVpeUq24QYapyCMXduNp8Yzbyn fQby0LTw9KRh1JwkE82CuEG/KYXlxEToBlaFom0w5Ja4NJ2bbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs2bi9jhIWWsdkaR3Eg+JwpwnYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQxYjQxZmQtZmE3YS0z OWVkLWE3MmEtMzk4OWQ5YTNlNzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD60gmJ4dBe403oobVEyOpJ0aTQF11r1ZUystkX28wxaqziKnYHcqtEV Vmvwn3RCH0Q+ZL0Rouo69GkWyuaQSNC57rW2ySKCrXHxzDGAw4ZSOfp+R5se22RQ +ZjD3gWWWH6VqAfY86vVFA0FKZOYF7FY03CqdV63HvW2u5kHbYZS8NEccZrpFpLk s14tNTKIq+WFfE3e13sgNwgLWB6NvuOPoA2wc0muRTepbX0jPbGO7RraCac0XOyW GcYJr04as1Ugi83CYQlROPI7Yv6RRIPLefac9feocs3alQykP0q3K6BxVYdwFMvY sYUyVpwQ+MUa/CW1XaQyjKZ7cDpc7D0= -----END CERTIFICATE-----Generated at Sat Sep 26 14:19:32 2026 by rpki-client