$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa File: 66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa (raw, json) Hash identifier: +xjd6MeHZgH/KxBKeyX5bt50JNgiX3FEfc42O5hRCHc= Subject key identifier: B5:2B:7F:ED:87:9D:BF:04:6C:1D:C0:2A:C3:7D:40:CF:52:D1:B4:30 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6293098B458626784E7DA700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:09:8b:45:86:26:78:4e:7d:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=a2076015-985b-4f17-969b-fc242aaa3194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4d:d1:5f:58:f2:2b:37:68:28:27:05:ac:87: ad:43:ea:88:d0:c2:f6:33:e8:42:ec:24:32:0b:d9: ca:79:87:74:54:f2:33:57:f8:03:a1:e5:ad:ff:8f: 9a:3f:8f:36:39:bf:26:24:0e:53:54:db:2e:ef:90: 59:1b:b8:75:2d:dd:32:29:9c:8c:9c:5b:42:43:ea: 67:c2:2e:0b:fb:5b:cc:8a:97:80:41:5a:4d:e9:a4: 6b:3c:eb:b5:99:c0:61:35:76:b4:ae:4d:54:61:22: 34:7c:cd:1c:66:90:fe:5a:2f:59:a0:c2:cf:9c:e0: 56:05:bf:46:03:c5:ae:a6:15:d7:53:06:2f:31:ad: 03:92:8d:1a:ec:0d:72:fa:e5:6f:23:64:6b:81:30: 34:9a:31:30:92:7f:e0:b2:f1:c8:45:87:bb:eb:ec: f9:02:9a:1b:51:fa:c3:09:cf:25:6d:53:15:99:7e: a1:b5:e2:73:f4:28:f4:17:33:8c:d2:72:88:a4:ce: 7e:23:9d:be:1a:6d:4a:4d:a0:22:44:4b:9e:68:ab: c1:da:e1:3a:7f:94:c6:71:09:59:6e:b6:54:3a:b7: 1f:fb:90:16:fa:7a:b8:bf:0c:60:c7:84:90:4e:78: c5:06:b7:50:83:e3:a8:8d:d6:e2:2c:8a:59:dd:fc: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2B:7F:ED:87:9D:BF:04:6C:1D:C0:2A:C3:7D:40:CF:52:D1:B4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66d38f0b-ad17-3ca3-97ce-b8fe8d8e9b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a8:1e:34:8c:8d:07:23:41:83:87:6f:81:c4:7d:ef:d0:f8: 6e:a0:00:6e:25:e4:19:51:01:5f:a7:f0:0e:4f:9f:1a:9a:50: 0f:81:6a:2e:e4:dd:5e:2b:21:ff:65:36:f5:3d:5b:e8:2f:9a: bc:e9:ef:9a:2b:59:26:a9:2f:a1:40:78:d8:00:ba:3c:e0:24: d8:35:0f:0b:ef:aa:95:3e:c5:06:38:7f:10:ce:93:bb:20:3c: e9:13:19:fa:77:2f:31:85:59:f5:ac:32:2a:b7:82:2d:f2:4e: 4a:81:6c:42:5f:1a:88:fb:16:ed:22:2c:d2:f6:b8:8e:07:da: 6a:b7:b3:f5:91:e7:d6:e0:54:e8:b4:ca:ad:31:c7:bd:1a:15: 4f:f6:71:7d:42:fd:66:9a:3a:91:67:57:45:58:36:3d:1f:a7: 4b:ae:a9:88:69:23:fd:ec:7d:a1:e0:7a:df:b2:70:56:40:cc: fa:d3:09:ad:65:76:3f:72:82:c9:c0:d4:4d:06:8a:44:66:30: 50:53:92:4f:1c:61:ce:ff:37:28:d9:75:1a:8b:2f:9a:c0:cc: 44:c6:be:b6:c0:ef:4d:09:5f:90:73:30:d3:95:3a:7a:d0:16: a9:11:59:64:3c:af:22:76:20:0a:1a:3d:8a:4f:e3:1a:e2:ec: 91:42:ab:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwmLRYYmeE59pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTIwNzYwMTUtOTg1Yi00ZjE3LTk2OWItZmMyNDJhYWEzMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm03RX1jyKzdoKCcFrIetQ+qI0ML2M+hC7CQy C9nKeYd0VPIzV/gDoeWt/4+aP482Ob8mJA5TVNsu75BZG7h1Ld0yKZyMnFtCQ+pn wi4L+1vMipeAQVpN6aRrPOu1mcBhNXa0rk1UYSI0fM0cZpD+Wi9ZoMLPnOBWBb9G A8WuphXXUwYvMa0Dko0a7A1y+uVvI2RrgTA0mjEwkn/gsvHIRYe76+z5ApobUfrD Cc8lbVMVmX6hteJz9Cj0FzOM0nKIpM5+I52+Gm1KTaAiREueaKvB2uE6f5TGcQlZ brZUOrcf+5AW+nq4vwxgx4SQTnjFBrdQg+OojdbiLIpZ3fwsQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUrf+2Hnb8EbB3AKsN9QM9S0bQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjZkMzhmMGItYWQxNy0z Y2EzLTk3Y2UtYjhmZThkOGU5YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmoHjSMjQcjQYOHb4HEfe/Q+G6gAG4l5BlRAV+n8A5PnxqaUA+Bai7k 3V4rIf9lNvU9W+gvmrzp75orWSapL6FAeNgAujzgJNg1DwvvqpU+xQY4fxDOk7sg POkTGfp3LzGFWfWsMiq3gi3yTkqBbEJfGoj7Fu0iLNL2uI4H2mq3s/WR59bgVOi0 yq0xx70aFU/2cX1C/WaaOpFnV0VYNj0fp0uuqYhpI/3sfaHget+ycFZAzPrTCa1l dj9ygsnA1E0GikRmMFBTkk8cYc7/NyjZdRqLL5rAzETGvrbA700JX5BzMNOVOnrQ FqkRWWQ8ryJ2IAoaPYpP4xri7JFCq98= -----END CERTIFICATE-----Generated at Thu Nov 5 16:38:57 2026 by rpki-client