$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa File: 7cf2fd49-6469-31b7-b902-e90312ec317d.roa (raw, json) Hash identifier: Z3H2IJUGKf1buTGWTLr5OiGZ2Jitywoh+vVDxlvXgO0= Subject key identifier: 6E:64:9C:0C:C6:BF:96:E1:BD:D0:59:4C:AC:E3:87:2C:18:D3:FE:62 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CE1A06A7C14F6178E6B480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:1a:06:a7:c1:4f:61:78:e6:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a74d0ad7-9c04-434b-b13a-988dbe8fe618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3a:51:ed:13:8a:05:57:0c:5f:f9:1b:3c:55: 67:d4:b5:7a:09:e6:2e:33:34:3f:97:94:ba:a7:7f: 4c:9d:dc:76:2e:95:b1:77:d8:ae:1b:0e:e8:91:50: 58:12:c6:f4:91:85:8b:97:68:12:e1:a2:67:ea:21: c1:48:33:1c:5e:fd:e9:32:70:14:31:0d:e2:d8:8e: a1:a5:1d:9e:f1:20:2f:c3:a7:a4:09:58:2a:eb:64: 84:69:20:11:2c:14:77:93:d6:22:24:df:31:db:0f: a5:f3:f6:1b:30:82:f9:a7:06:a7:06:19:e7:8c:c9: 6e:85:b9:bf:51:27:3f:92:7b:5e:d6:fe:f7:60:c4: 89:99:de:d0:1c:81:97:b2:58:e2:28:5f:08:eb:7f: 5d:e9:8c:f2:2b:c1:1d:77:5a:f0:be:e4:22:19:64: 4b:cb:02:08:2d:72:2e:b3:16:db:f9:68:90:7e:2f: 00:78:97:4e:2e:bd:1b:17:92:1a:7c:84:53:7f:7f: 4d:98:eb:0f:d7:46:fe:29:b8:7e:6f:5e:dc:c0:a1: b9:83:e2:43:e6:f1:c6:59:5d:12:84:1a:90:c0:5f: f6:b3:36:0c:a5:cf:79:e8:87:a0:7d:b4:59:f7:e3: 30:f7:bc:35:94:98:d2:b1:11:53:b0:d4:88:1f:b7: 15:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:64:9C:0C:C6:BF:96:E1:BD:D0:59:4C:AC:E3:87:2C:18:D3:FE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:5a:90:fc:81:05:14:ae:a7:f3:37:9e:56:e3:64:eb:05:11: 92:75:3f:45:57:0f:bc:0b:ac:a8:b6:17:02:56:64:da:f1:7e: 04:e2:e7:5c:fe:61:f3:07:05:63:bc:51:68:04:d0:56:95:da: 11:6c:5e:1d:23:52:ef:70:a5:59:35:ff:ac:2b:94:19:90:cf: 32:39:10:b5:89:fc:1b:d6:8f:10:91:d9:3d:ae:8d:d9:6f:34: c3:49:0e:99:ec:d4:e6:5a:51:0b:15:53:0e:6f:82:32:63:af: b0:e0:a2:35:37:9a:8e:12:f1:44:66:53:c4:bf:7c:b0:f4:48: 15:82:d6:ed:a5:99:df:4b:7e:d2:f9:39:07:81:bb:d0:fc:57: e9:03:2f:eb:89:24:d1:d6:27:de:17:90:8c:9d:4a:f2:c4:9f: c7:3b:c5:a1:ba:b3:03:09:f5:12:4a:4a:3e:25:02:a2:ac:7d: 8f:15:4c:3c:89:48:13:24:0c:22:bf:65:5e:94:cc:4c:d9:d8: 47:59:3e:6e:40:35:f1:e5:5f:ec:96:6a:a9:f6:41:99:b2:cb: 6a:eb:fc:b6:08:6e:52:0d:a2:27:14:1f:67:ad:04:b2:69:d1: b3:b8:68:95:ea:9f:6d:bd:74:a6:9c:29:d0:2f:98:f0:69:52: ab:53:65:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhoGp8FPYXjmtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTc0ZDBhZDctOWMwNC00MzRiLWIxM2EtOTg4ZGJlOGZlNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzpR7ROKBVcMX/kbPFVn1LV6CeYuMzQ/l5S6 p39Mndx2LpWxd9iuGw7okVBYEsb0kYWLl2gS4aJn6iHBSDMcXv3pMnAUMQ3i2I6h pR2e8SAvw6ekCVgq62SEaSARLBR3k9YiJN8x2w+l8/YbMIL5pwanBhnnjMluhbm/ USc/knte1v73YMSJmd7QHIGXsljiKF8I639d6YzyK8Edd1rwvuQiGWRLywIILXIu sxbb+WiQfi8AeJdOLr0bF5IafIRTf39NmOsP10b+Kbh+b17cwKG5g+JD5vHGWV0S hBqQwF/2szYMpc956IegfbRZ9+Mw97w1lJjSsRFTsNSIH7cVGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5knAzGv5bhvdBZTKzjhywY0/5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2NmMmZkNDktNjQ2OS0z MWI3LWI5MDItZTkwMzEyZWMzMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhakPyBBRSup/M3nlbjZOsFEZJ1P0VXD7wLrKi2FwJWZNrxfgTi51z+ YfMHBWO8UWgE0FaV2hFsXh0jUu9wpVk1/6wrlBmQzzI5ELWJ/BvWjxCR2T2ujdlv NMNJDpns1OZaUQsVUw5vgjJjr7DgojU3mo4S8URmU8S/fLD0SBWC1u2lmd9LftL5 OQeBu9D8V+kDL+uJJNHWJ94XkIydSvLEn8c7xaG6swMJ9RJKSj4lAqKsfY8VTDyJ SBMkDCK/ZV6UzEzZ2EdZPm5ANfHlX+yWaqn2QZmyy2rr/LYIblINoicUH2etBLJp 0bO4aJXqn229dKacKdAvmPBpUqtTZRg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:42:06 2025 by rpki-client