$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa File: 7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa (raw, json) Hash identifier: fQ2FvgpSXaHOM9SccK1Wef+Dw44DsE/J7UL7aQqtN74= Subject key identifier: E7:91:E8:34:56:6F:A7:4E:E2:E5:3B:B2:DD:48:C0:86:0A:C8:F0:A1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB4A540DB764C0F045E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.251.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b4:a5:40:db:76:4c:0f:04:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=dd4e4ec7-3304-4612-ba93-40a7fceada46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:4c:bd:53:be:92:6a:fd:ac:fc:61:8c:98: 2f:5b:97:3e:98:f0:9b:be:ba:17:ef:22:da:70:85: 27:8f:50:34:2b:71:23:b1:5d:5a:d2:8d:98:c0:1e: d0:15:7b:03:25:9d:da:6f:27:de:dc:ad:4c:b0:89: d4:ee:5b:a7:4c:7a:a0:f2:70:17:06:7e:c9:2f:7e: 61:d7:05:5e:fa:bc:02:af:6f:29:f5:6f:82:c9:06: 38:3b:50:4d:e0:0d:96:a8:56:85:9b:b0:80:a7:2f: 50:67:9c:da:26:cb:34:aa:b5:0a:d4:a3:de:08:1b: 81:b5:70:94:51:75:cc:6e:98:fe:35:e1:d3:30:32: 94:ba:39:34:43:c3:e0:59:67:2a:1b:e5:9c:13:2c: 23:fd:c0:8a:45:24:29:26:90:8b:c5:5c:56:18:a3: 80:d3:74:1a:f7:c1:61:29:ce:fa:58:c8:f5:34:83: c1:49:83:08:e9:79:29:77:17:20:b4:a8:67:39:0b: d4:91:cb:76:c4:80:21:0e:62:ee:39:fd:34:28:50: 17:a7:85:b8:42:88:c4:55:c8:59:92:e5:72:13:98: e8:46:7f:3e:59:01:62:0a:dd:3f:6f:e8:31:46:1b: b3:1c:76:f2:ad:a2:29:89:06:b6:63:73:b0:37:69: 8c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:91:E8:34:56:6F:A7:4E:E2:E5:3B:B2:DD:48:C0:86:0A:C8:F0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:82:45:af:32:25:4a:bd:3c:d2:3d:fd:4e:83:5b:c2:47:2f: 17:d2:43:81:ef:8f:ee:40:a6:17:41:52:bc:a5:16:40:bb:c3: 16:33:8c:e5:42:8e:5a:b2:97:c6:6a:1c:fe:b7:21:17:ca:65: f7:88:a2:48:bd:85:b6:67:25:5f:43:ff:03:ef:84:0d:45:ba: 5b:75:f5:83:5b:ec:a4:66:24:3b:d7:59:59:eb:ff:fe:62:29: 59:e4:8d:dd:f3:c6:73:64:d9:98:7f:9f:84:de:2e:22:34:b6: b2:c8:ac:90:0c:39:fe:81:ab:c7:d0:8d:03:f7:fe:d4:d0:5c: e4:cd:d8:24:34:6b:a5:c6:99:12:7c:65:e5:43:38:fb:99:0a: 1b:69:7e:f6:ee:a7:e0:8d:87:93:fa:ff:83:fe:ac:b2:e9:d0: 6e:29:c2:f7:94:30:53:af:53:55:8a:8d:b6:e3:70:22:84:f6: 57:f5:48:76:11:31:0e:08:4e:60:fd:7f:16:d9:2c:a5:10:32: 0d:55:01:b4:8d:66:79:fe:40:67:eb:ac:35:1f:2e:34:56:55: 19:01:7e:f1:14:77:8d:33:b8:7b:ae:3b:35:90:90:97:8a:3c: 5d:13:a9:b9:19:64:76:42:8a:a8:30:5c:dc:29:26:0c:73:b4: 44:03:a4:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LSlQNt2TA8EXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZGQ0ZTRlYzctMzMwNC00NjEyLWJhOTMtNDBhN2ZjZWFkYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqklMvVO+kmr9rPxhjJgvW5c+mPCbvroX7yLa cIUnj1A0K3EjsV1a0o2YwB7QFXsDJZ3abyfe3K1MsInU7lunTHqg8nAXBn7JL35h 1wVe+rwCr28p9W+CyQY4O1BN4A2WqFaFm7CApy9QZ5zaJss0qrUK1KPeCBuBtXCU UXXMbpj+NeHTMDKUujk0Q8PgWWcqG+WcEywj/cCKRSQpJpCLxVxWGKOA03Qa98Fh Kc76WMj1NIPBSYMI6XkpdxcgtKhnOQvUkct2xIAhDmLuOf00KFAXp4W4QojEVchZ kuVyE5joRn8+WQFiCt0/b+gxRhuzHHbyraIpiQa2Y3OwN2mMFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeR6DRWb6dO4uU7st1IwIYKyPChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzQ3MWIzYTQtMzAzZi0z ZGQwLWIyMTEtOTRkOWEwNDY3ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeCRa8yJUq9PNI9/U6DW8JHLxfSQ4Hvj+5AphdBUrylFkC7wxYzjOVC jlqyl8ZqHP63IRfKZfeIoki9hbZnJV9D/wPvhA1Fult19YNb7KRmJDvXWVnr//5i KVnkjd3zxnNk2Zh/n4TeLiI0trLIrJAMOf6Bq8fQjQP3/tTQXOTN2CQ0a6XGmRJ8 ZeVDOPuZChtpfvbup+CNh5P6/4P+rLLp0G4pwveUMFOvU1WKjbbjcCKE9lf1SHYR MQ4ITmD9fxbZLKUQMg1VAbSNZnn+QGfrrDUfLjRWVRkBfvEUd40zuHuuOzWQkJeK PF0TqbkZZHZCiqgwXNwpJgxztEQDpMY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:12 2025 by rpki-client