$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/54a44c7e-b500-3620-b0c5-26debd70e0b0.roa File: 54a44c7e-b500-3620-b0c5-26debd70e0b0.roa (raw, json) Hash identifier: +xZvKk8UNW6i9M/1mKNnB4uUteHgVwIpDtdNKgmtvic= Subject key identifier: 48:C0:2D:1E:71:E6:9D:39:C5:37:92:34:1D:1A:AD:50:A8:70:FB:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD6E79F225EF8665C65520 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/54a44c7e-b500-3620-b0c5-26debd70e0b0.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6e:79:f2:25:ef:86:65:c6:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b6a240d0-a7df-4fc9-8232-46b76b882cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3e:3c:34:0c:db:28:62:7a:4a:f4:01:9a:6a: 5a:14:41:c7:b8:a9:53:16:f6:6e:31:bd:e6:f2:dc: 84:ec:46:b7:47:ab:d5:2e:92:b1:b6:08:d7:ba:5e: a1:3f:ad:5e:55:12:1d:4a:10:b0:c2:e8:20:62:a3: 0b:97:c5:e4:57:b2:8c:35:3e:26:a7:b0:62:b7:27: 8d:8e:c1:a9:af:12:eb:26:60:c1:0c:4c:9a:fd:76: f8:cb:1d:88:94:cd:43:7c:9d:13:b5:82:6b:ce:59: a2:f5:7a:fd:a9:ec:55:19:8e:ae:4f:4e:0a:3b:47: e8:f4:4e:c3:63:13:4a:59:d2:ed:fb:22:3a:73:c7: ac:a3:f4:a3:e2:d5:08:ea:9c:8d:0a:7c:cd:b8:60: cc:b9:b1:31:12:3c:86:96:ea:d5:a3:45:6c:ae:1e: 6c:2f:83:46:6f:1b:a5:fc:90:33:5c:6c:f4:2d:4b: d9:86:fe:ba:0a:5a:01:e9:53:e3:66:bc:71:0b:17: 14:25:c4:d6:53:89:26:38:7a:ec:29:da:08:32:b9: 6c:33:9b:25:5e:ad:aa:2f:51:81:77:c3:bd:fb:a2: 7c:33:a6:be:6e:37:37:84:22:ce:8d:1e:ff:60:bc: 82:23:5b:91:91:e0:d0:0d:56:14:f2:81:b6:53:30: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C0:2D:1E:71:E6:9D:39:C5:37:92:34:1D:1A:AD:50:A8:70:FB:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/54a44c7e-b500-3620-b0c5-26debd70e0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:55:21:a1:08:a9:5c:e1:27:41:90:ea:00:1e:b8:90:a7:9d: f1:fc:ca:a7:5f:27:88:91:43:c6:ec:f4:35:4e:b5:e3:eb:57: cf:ba:98:18:0b:9e:b7:90:0a:d6:d9:e1:59:1d:2f:88:94:e9: a6:f2:4e:be:be:38:78:1d:f0:70:7d:ea:17:aa:d6:66:56:5a: cf:fc:29:54:51:d5:e0:ed:d8:b8:35:3b:0b:af:91:b3:2c:09: db:c3:8f:84:3f:4e:c5:d1:a4:99:1c:46:9c:0b:51:86:12:40: e4:dc:26:89:07:73:76:e7:43:6e:e9:87:10:40:76:f9:40:0a: 02:82:07:d1:56:e6:67:b7:1d:52:3a:a7:0f:56:b5:f7:eb:60: 8f:ae:d5:91:84:09:04:1e:b0:57:fe:a4:b4:40:38:41:5b:c7: 40:c6:99:2b:b9:5a:4d:61:fb:23:03:66:e6:75:10:c2:a7:07: 07:53:c5:51:e4:56:62:98:34:45:f6:7c:66:1a:12:6e:c7:45: 3f:e6:e6:ab:b0:48:f7:0b:4a:86:68:ab:99:f8:6a:bd:b3:b2: c5:f8:98:64:5a:5b:b0:18:93:93:2c:a3:78:48:8a:60:a8:6e: 9e:1c:e8:97:e4:42:01:96:6e:a8:e6:62:e2:a4:bb:13:86:0c: 77:d1:e8:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzW558iXvhmXGVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjZhMjQwZDAtYTdkZi00ZmM5LTgyMzItNDZiNzZiODgyY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD48NAzbKGJ6SvQBmmpaFEHHuKlTFvZuMb3m 8tyE7Ea3R6vVLpKxtgjXul6hP61eVRIdShCwwuggYqMLl8XkV7KMNT4mp7BityeN jsGprxLrJmDBDEya/Xb4yx2IlM1DfJ0TtYJrzlmi9Xr9qexVGY6uT04KO0fo9E7D YxNKWdLt+yI6c8eso/Sj4tUI6pyNCnzNuGDMubExEjyGlurVo0Vsrh5sL4NGbxul /JAzXGz0LUvZhv66CloB6VPjZrxxCxcUJcTWU4kmOHrsKdoIMrlsM5slXq2qL1GB d8O9+6J8M6a+bjc3hCLOjR7/YLyCI1uRkeDQDVYU8oG2UzCaTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjALR5x5p05xTeSNB0arVCocPvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTRhNDRjN2UtYjUwMC0z NjIwLWIwYzUtMjZkZWJkNzBlMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdVIaEIqVzhJ0GQ6gAeuJCnnfH8yqdfJ4iRQ8bs9DVOtePrV8+6mBgL nreQCtbZ4VkdL4iU6abyTr6+OHgd8HB96heq1mZWWs/8KVRR1eDt2Lg1OwuvkbMs CdvDj4Q/TsXRpJkcRpwLUYYSQOTcJokHc3bnQ27phxBAdvlACgKCB9FW5me3HVI6 pw9WtffrYI+u1ZGECQQesFf+pLRAOEFbx0DGmSu5Wk1h+yMDZuZ1EMKnBwdTxVHk VmKYNEX2fGYaEm7HRT/m5quwSPcLSoZoq5n4ar2zssX4mGRaW7AYk5Mso3hIimCo bp4c6JfkQgGWbqjmYuKkuxOGDHfR6Bc= -----END CERTIFICATE-----Generated at Sun Oct 19 23:42:42 2025 by rpki-client