$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa File: dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa (raw, json) Hash identifier: 2E7m96g4BXFNlijw4gV/Ar+gBx2Fd4atcLokbZO9j/U= Subject key identifier: 01:75:34:D8:39:DE:56:37:15:0F:5B:D8:E3:37:15:AB:DC:1A:3F:83 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD72751DEC910506C8BA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.251.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:72:75:1d:ec:91:05:06:c8:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a502b244-23cd-491f-ac19-632c8289be75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:53:e4:bd:fd:d4:8b:b6:88:e7:da:c8:03: ed:1b:5e:61:11:75:fc:da:95:b8:34:f0:14:b1:2b: 38:3d:34:13:30:05:81:f3:a4:a8:34:ff:de:91:5d: 7d:f6:e7:70:61:e4:16:71:4b:67:9a:74:10:39:f9: 0e:30:04:1a:da:91:97:a4:21:98:e0:51:f2:d3:a3: 37:db:c6:bc:d5:5d:68:a2:9a:88:3d:6b:bb:5a:b1: 63:f4:21:f1:8f:3f:a3:8b:aa:a5:b0:07:d6:10:bb: e9:84:9c:71:6f:5c:38:b3:dc:dd:b7:72:05:e4:f5: 77:61:f7:e5:a8:f1:4d:1e:79:fd:c4:7a:c8:81:6b: 18:b7:51:2f:3d:9e:3d:73:00:fe:06:ab:cd:8d:7b: 30:5c:78:05:0b:84:bd:8a:25:b6:be:af:97:82:dd: 2b:3f:7c:d3:6f:f3:d7:ce:eb:c2:97:16:e7:76:b1: 87:1e:82:dd:09:1a:96:a3:3b:26:92:f3:df:92:19: f2:9e:a4:96:0a:0d:64:59:6c:a7:e4:56:ad:f3:e1: 1d:6b:28:15:59:ae:13:78:7b:dd:73:87:e8:8f:5f: 54:a6:6f:3b:37:c1:30:8d:b0:60:2c:ba:d0:18:dd: d5:c8:ee:0f:f8:ef:e4:21:a4:12:6d:64:01:bf:02: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:75:34:D8:39:DE:56:37:15:0F:5B:D8:E3:37:15:AB:DC:1A:3F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ea:c0:7a:37:29:de:2e:70:96:d3:45:03:c1:d9:1f:9b:73: 80:e2:a3:0f:35:37:5b:43:7e:d5:ec:1a:f6:14:cd:9d:a7:a1: 2a:76:a2:89:5f:f2:40:96:fb:93:d6:a5:50:fe:44:8a:ac:78: f7:14:fd:55:bb:ad:8c:fd:da:09:65:12:7e:f1:1b:15:56:fa: 32:6d:38:c4:e7:e1:73:4c:10:69:75:da:44:bb:b8:3d:ef:1e: 30:c6:7d:5d:20:8b:d1:f1:72:61:3f:58:ef:41:9a:58:73:d5: 17:90:d4:93:9e:d5:5d:e9:44:2e:02:97:f3:51:99:6a:03:9e: bf:3d:05:0b:a0:5f:52:53:57:a1:09:d9:46:42:a9:d5:0e:3a: e5:33:0f:94:fc:ad:83:0d:34:4f:1f:c1:c8:b5:7d:c9:04:ec: 4f:4a:65:4d:0b:39:8a:af:e0:d3:3b:74:56:07:85:39:66:82: 6c:98:70:f2:90:b3:db:70:e4:9c:6c:34:dc:9e:67:f7:0b:ff: d6:b0:01:ed:e7:bc:45:68:80:d8:24:51:6c:ac:67:3e:6d:70: 0f:3c:b0:5b:81:49:d9:f4:13:b6:f8:90:cd:48:61:89:de:d4: 08:68:22:ea:26:5b:19:2f:3b:0d:51:e3:f2:5b:ce:65:d7:c1: e0:e1:6f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXJ1HeyRBQbIuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTUwMmIyNDQtMjNjZC00OTFmLWFjMTktNjMyYzgyODliZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w1T5L391Iu2iOfayAPtG15hEXX82pW4NPAU sSs4PTQTMAWB86SoNP/ekV199udwYeQWcUtnmnQQOfkOMAQa2pGXpCGY4FHy06M3 28a81V1oopqIPWu7WrFj9CHxjz+ji6qlsAfWELvphJxxb1w4s9zdt3IF5PV3Yffl qPFNHnn9xHrIgWsYt1EvPZ49cwD+BqvNjXswXHgFC4S9iiW2vq+Xgt0rP3zTb/PX zuvClxbndrGHHoLdCRqWozsmkvPfkhnynqSWCg1kWWyn5Fat8+EdaygVWa4TeHvd c4foj19Upm87N8EwjbBgLLrQGN3VyO4P+O/kIaQSbWQBvwK9PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF1NNg53lY3FQ9b2OM3FavcGj+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGNjOWUwMTMtOWUxYi0z NjAwLTk0YWEtYTBiOGVmMDA4ZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXqwHo3Kd4ucJbTRQPB2R+bc4Diow81N1tDftXsGvYUzZ2noSp2oolf 8kCW+5PWpVD+RIqsePcU/VW7rYz92gllEn7xGxVW+jJtOMTn4XNMEGl12kS7uD3v HjDGfV0gi9HxcmE/WO9Bmlhz1ReQ1JOe1V3pRC4Cl/NRmWoDnr89BQugX1JTV6EJ 2UZCqdUOOuUzD5T8rYMNNE8fwci1fckE7E9KZU0LOYqv4NM7dFYHhTlmgmyYcPKQ s9tw5JxsNNyeZ/cL/9awAe3nvEVogNgkUWysZz5tcA88sFuBSdn0E7b4kM1IYYne 1AhoIuomWxkvOw1R4/JbzmXXweDhb5w= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:25 2025 by rpki-client