$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa File: a437d84b-eb8c-3132-8b30-68325fa0f33d.roa (raw, json) Hash identifier: m9qBM4kdpUikYJoCyJltLw5bel6a7ytSBY/3lB5EC3I= Subject key identifier: 21:7F:4E:B3:81:23:94:C3:3D:E3:74:94:66:39:DF:42:3D:40:74:24 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EC9C84F4077BB7D71B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ec:9c:84:f4:07:7b:b7:d7:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9ac8963a-2d55-48c6-84e5-ac8d478d61e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:b0:5c:b9:b4:a1:63:76:4a:8f:25:14:a2: 8c:49:d7:f1:5e:c4:93:10:94:db:aa:d3:e6:d6:20: 65:50:d7:d0:f6:fb:c3:90:c3:44:33:a5:80:7a:c6: af:16:8f:98:cf:b4:f3:d2:d3:33:74:60:53:4c:9c: c4:4f:ce:d6:6d:6b:6f:49:44:05:e9:4d:63:10:c5: e8:75:f5:cf:76:b0:60:77:af:50:ac:f7:1d:c8:e5: 6c:e9:94:21:a8:e9:fe:cf:28:f1:7f:d0:7e:b3:87: 1e:71:0d:a4:80:63:5f:3d:2c:c3:18:a5:c0:8d:72: 7a:49:2b:26:a4:28:83:05:1b:1d:5d:62:f9:f0:84: a3:ff:f6:a0:08:e4:82:f1:fa:7d:5b:e1:2d:22:79: 28:4d:a6:04:2b:bb:2e:9f:ba:db:c0:e8:dc:03:7a: 36:6c:29:f3:05:2d:4a:ef:8c:85:c9:b5:97:8b:3e: 5f:2b:fa:ab:a4:90:46:c0:2e:ef:4f:b9:c0:28:a2: 03:d5:a1:6d:eb:de:99:c6:31:30:e9:69:b0:f6:37: 40:d5:91:b1:5e:d1:4d:2f:ab:90:3c:0e:66:bf:82: f7:0f:6e:c2:f4:7f:a8:4c:c2:48:d0:ac:c3:e6:26: 9f:0d:ea:ae:dd:fc:c9:93:94:92:70:d4:05:bf:fe: f0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7F:4E:B3:81:23:94:C3:3D:E3:74:94:66:39:DF:42:3D:40:74:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:fb:f1:f0:b9:92:54:5e:e1:6e:9a:59:e5:50:40:8c:29:56: 91:55:bc:f5:b2:01:47:fc:52:0f:90:54:f5:4c:54:ab:72:57: ba:25:9e:20:f8:20:fb:69:82:de:35:1c:0f:dd:6b:ce:3f:f7: ee:7d:93:5a:bd:ec:c4:ea:d9:00:66:3f:0c:63:be:4b:3a:90: a4:40:87:bd:69:96:cf:6a:4f:dd:38:5b:54:80:71:55:12:af: db:a6:e0:1b:28:1e:5d:00:32:cf:75:b9:49:10:63:b3:54:bc: ff:38:ab:ec:cb:92:27:f2:1b:06:63:58:04:d8:0c:67:98:90: 3e:2c:12:91:58:95:4c:ca:ef:4a:cd:fa:a4:a1:91:6f:4e:b3: d1:bc:a6:8a:7e:94:14:7b:0b:60:cb:19:10:24:ca:77:f5:1a: d6:96:58:14:87:b1:67:19:d7:e9:ed:a9:1b:65:5e:e2:5d:87: 41:62:11:f9:1d:e3:33:a9:c6:da:0f:0e:eb:e5:49:a4:7d:9d: 47:5c:1f:b8:4c:a5:84:b2:85:21:bc:4a:76:4d:33:d8:9c:3d: 10:ab:6a:f5:12:c4:1e:91:48:3f:bc:3c:82:2f:0a:43:55:6a: 68:08:1a:ae:ed:dd:b0:73:1e:09:88:51:3e:4e:c3:7b:01:9d: e0:b6:77:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuychPQHe7fXGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OWFjODk2M2EtMmQ1NS00OGM2LTg0ZTUtYWM4ZDQ3OGQ2MWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPGwXLm0oWN2So8lFKKMSdfxXsSTEJTbqtPm 1iBlUNfQ9vvDkMNEM6WAesavFo+Yz7Tz0tMzdGBTTJzET87WbWtvSUQF6U1jEMXo dfXPdrBgd69QrPcdyOVs6ZQhqOn+zyjxf9B+s4cecQ2kgGNfPSzDGKXAjXJ6SSsm pCiDBRsdXWL58ISj//agCOSC8fp9W+EtInkoTaYEK7sun7rbwOjcA3o2bCnzBS1K 74yFybWXiz5fK/qrpJBGwC7vT7nAKKID1aFt696ZxjEw6Wmw9jdA1ZGxXtFNL6uQ PA5mv4L3D27C9H+oTMJI0KzD5iafDequ3fzJk5SScNQFv/7wBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF/TrOBI5TDPeN0lGY530I9QHQkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzN2Q4NGItZWI4Yy0z MTMyLThiMzAtNjgzMjVmYTBmMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX78fC5klRe4W6aWeVQQIwpVpFVvPWyAUf8Ug+QVPVMVKtyV7olniD4 IPtpgt41HA/da84/9+59k1q97MTq2QBmPwxjvks6kKRAh71pls9qT904W1SAcVUS r9um4BsoHl0AMs91uUkQY7NUvP84q+zLkifyGwZjWATYDGeYkD4sEpFYlUzK70rN +qShkW9Os9G8pop+lBR7C2DLGRAkynf1GtaWWBSHsWcZ1+ntqRtlXuJdh0FiEfkd 4zOpxtoPDuvlSaR9nUdcH7hMpYSyhSG8SnZNM9icPRCravUSxB6RSD+8PIIvCkNV amgIGq7t3bBzHgmIUT5Ow3sBneC2d+M= -----END CERTIFICATE-----Generated at Sun Nov 15 11:16:07 2026 by rpki-client