$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa File: 0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa (raw, json) Hash identifier: kHLkGnc2pZVflHbe0L4vUAAZVw2HBYri0GSUn0iy+Rw= Subject key identifier: 7A:D9:96:17:12:30:1B:F4:7A:6B:F5:89:68:D0:73:79:DB:79:8A:D1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B7DECB5F18D41FBE67537A3C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 15169 IP address blocks: 142.250.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b5:f1:8d:41:fb:e6:75:37:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=d0c98090-75b2-4f62-aeba-b64e1aef4853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:93:d0:0e:b6:3f:d7:22:cd:cf:ae:a3:3f: a9:c5:33:20:0d:5a:32:75:1c:e7:87:c7:c4:df:b7: d9:13:68:58:c8:4b:0e:9e:84:3f:9e:92:d9:e5:da: b0:20:a6:91:4c:7d:ed:b2:19:34:0b:6a:c9:f2:9f: 6d:31:39:47:59:e5:61:de:37:12:ea:2f:83:87:13: f3:06:c5:c3:a0:d1:54:a0:91:2b:48:51:6d:58:31: 68:28:23:96:be:81:a3:56:ff:ef:1b:ec:32:87:3a: 6a:65:76:8e:b0:15:ed:76:8a:19:ec:6d:5a:36:8b: 6d:8e:ba:58:02:79:8f:2f:cf:5a:5a:66:64:48:c1: 27:19:3f:11:7e:ab:32:88:a2:f6:ab:64:a8:50:3a: 10:b2:f7:8b:3e:ba:f1:96:02:c2:53:3a:37:14:40: 2c:0b:6c:c1:4b:c7:d1:ed:fb:94:de:e1:ac:84:a7: 29:b4:1d:d7:d6:b3:ae:c1:06:80:c4:1c:61:2d:cd: f3:16:1f:4b:7c:f8:97:74:d8:7f:cd:86:25:75:da: 37:f5:0d:88:f1:bc:4f:33:60:f6:01:5e:20:f9:24: 55:4e:92:8a:aa:9d:ff:3d:18:ce:cd:27:da:53:4c: bc:87:ca:b0:00:66:dd:56:2c:54:ec:96:90:87:9a: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D9:96:17:12:30:1B:F4:7A:6B:F5:89:68:D0:73:79:DB:79:8A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0dae54fe-6b7a-3dd2-add6-8d3782e9b75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0a:0f:9d:1a:a1:48:e6:b6:8e:7e:ae:11:ac:5a:b7:b8:68: 92:74:c3:5f:e3:8f:98:3e:79:71:0f:76:f8:57:5b:0f:4b:b6: 73:73:da:9f:5b:b6:ea:a0:8a:a8:96:16:e6:e1:f7:81:e2:0c: eb:bd:7b:aa:c2:c1:63:b3:b7:dd:3c:3d:c1:3c:88:62:2d:7f: 36:3f:97:87:bc:da:53:f4:91:70:68:0c:53:8b:17:d8:2d:1e: d3:47:d0:e3:f2:9f:fb:96:25:79:8b:55:ad:3a:5c:dc:96:7e: a6:56:ae:8a:16:fe:8b:c7:4b:70:9c:2c:c6:57:c1:df:57:43: 27:36:56:67:30:eb:2f:db:7b:87:90:2e:2c:00:b6:6d:63:2a: 43:ab:4d:1e:02:3b:ac:9d:d7:4b:95:61:13:b0:63:e9:7f:c7: 80:5d:cc:96:73:56:9d:b9:2c:55:05:a1:49:ed:94:86:be:3a: e2:61:ec:ee:58:58:a5:c7:ac:aa:82:a2:f5:2a:f8:05:7b:4d: cc:67:5d:ec:e8:4d:83:0a:c1:a2:39:60:7d:ca:0f:d2:a3:ae: d4:07:48:00:6e:8a:5e:15:10:87:d2:40:0f:8e:07:eb:65:1d: 9c:d7:52:f3:f1:01:99:77:82:c0:ed:7b:13:08:d4:04:4a:09: b1:3e:52:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LXxjUH75nU3o8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDBjOTgwOTAtNzViMi00ZjYyLWFlYmEtYjY0ZTFhZWY0ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeWT0A62P9cizc+uoz+pxTMgDVoydRznh8fE 37fZE2hYyEsOnoQ/npLZ5dqwIKaRTH3tshk0C2rJ8p9tMTlHWeVh3jcS6i+DhxPz BsXDoNFUoJErSFFtWDFoKCOWvoGjVv/vG+wyhzpqZXaOsBXtdooZ7G1aNottjrpY AnmPL89aWmZkSMEnGT8RfqsyiKL2q2SoUDoQsveLPrrxlgLCUzo3FEAsC2zBS8fR 7fuU3uGshKcptB3X1rOuwQaAxBxhLc3zFh9LfPiXdNh/zYYlddo39Q2I8bxPM2D2 AV4g+SRVTpKKqp3/PRjOzSfaU0y8h8qwAGbdVixU7JaQh5rUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrZlhcSMBv0emv1iWjQc3nbeYrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGRhZTU0ZmUtNmI3YS0z ZGQyLWFkZDYtOGQzNzgyZTliNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcKD50aoUjmto5+rhGsWre4aJJ0w1/jj5g+eXEPdvhXWw9LtnNz2p9b tuqgiqiWFubh94HiDOu9e6rCwWOzt908PcE8iGItfzY/l4e82lP0kXBoDFOLF9gt HtNH0OPyn/uWJXmLVa06XNyWfqZWrooW/ovHS3CcLMZXwd9XQyc2Vmcw6y/be4eQ LiwAtm1jKkOrTR4CO6yd10uVYROwY+l/x4BdzJZzVp25LFUFoUntlIa+OuJh7O5Y WKXHrKqCovUq+AV7TcxnXezoTYMKwaI5YH3KD9KjrtQHSABuil4VEIfSQA+OB+tl HZzXUvPxAZl3gsDtexMI1ARKCbE+Urc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:24 2025 by rpki-client