$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa File: bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa (raw, json) Hash identifier: U7ug7KwXE3ZysRCcWpGYzJOQ7VfegFSsvBfeRRIygfI= Subject key identifier: AB:98:8E:00:EE:6F:02:39:A0:96:A4:FE:93:0E:3C:5C:24:7E:8F:0F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD62E39711B227E96D7F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:62:e3:97:11:b2:27:e9:6d:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=648b568b-c19e-45bc-88f6-0630521c23f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:8a:57:c1:d9:d0:53:49:e8:ec:5f:d3:da: 59:b5:75:94:b7:fb:ae:c9:52:c6:a3:a7:41:38:23: c4:7b:cc:a6:93:34:69:e6:36:97:01:62:b0:28:37: b3:af:86:ad:9e:8e:31:26:b3:27:ab:9b:07:40:e7: 87:31:08:f0:71:03:60:9e:69:6f:89:0d:ed:da:73: 91:f7:b1:5d:06:d6:c6:4a:7e:30:ae:9e:5a:51:01: b5:8f:56:68:17:66:53:9e:de:d5:ab:f9:76:5f:ad: 4f:94:4c:f5:59:b5:cd:c2:56:82:56:63:8c:ac:80: 48:f5:56:23:11:e7:d6:4f:ce:05:bb:be:7b:80:ea: 5d:45:8f:27:b9:6b:c7:d9:a9:dc:ef:fe:e8:49:5a: 68:7c:a3:5c:96:96:77:3c:5d:fb:20:4a:47:a4:3f: 4d:3a:0c:3d:7b:3f:02:f5:eb:c0:d6:7f:d3:64:bf: 00:d2:97:0f:13:15:e8:e0:fe:1c:48:20:19:27:bd: e1:df:bf:d4:18:41:12:d2:4a:ee:7f:4e:c5:d1:f0: 1e:9f:14:e0:ea:e1:32:20:1c:0d:5b:02:86:8b:90: ac:ce:cf:9e:3b:b2:23:b8:d3:9b:9c:5c:ff:e4:41: a8:eb:0e:bd:78:1d:91:8f:63:b0:f9:a8:a0:7a:a8: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:98:8E:00:EE:6F:02:39:A0:96:A4:FE:93:0E:3C:5C:24:7E:8F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf4f46d1-ad6a-307c-adbb-ed8fbae9bd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4e:1f:e4:a6:76:5d:c5:6d:48:f0:be:4d:51:e5:bf:c9:88: 2f:b5:4f:78:ad:78:8b:45:34:81:37:2c:06:da:e8:8a:9c:bb: 45:0b:a8:37:88:f8:46:f8:b5:26:ab:9c:a5:e2:18:48:dd:7a: a3:ab:d4:21:4b:ba:ea:a6:81:a7:10:7a:1d:6a:28:a7:07:5f: f7:0f:d5:5a:1f:75:b0:c0:ef:39:89:fd:8c:bc:b3:08:09:44: cb:e2:a6:d1:bc:0d:ef:f0:87:84:7a:04:d6:36:c5:87:1f:db: f3:fd:7b:c2:8b:21:08:df:12:1e:b9:a3:38:c8:c6:07:ff:04: 15:ec:06:3d:41:98:f4:71:9e:be:cf:6a:cb:1c:8b:08:6e:4c: 33:c7:73:73:7d:a7:08:67:61:25:b1:63:52:95:f5:77:d2:ba: 3e:5c:e1:83:48:7f:1e:8b:7e:2e:3b:b5:e0:2e:e8:4a:cb:2a: 97:2d:f1:3a:52:48:d4:8b:59:2c:a4:35:48:1e:37:77:dd:d0: 80:75:f6:22:8a:bf:3c:08:48:f0:94:a7:51:d9:c6:98:e2:14: 45:34:98:fb:de:2a:2b:25:60:55:89:08:c8:ba:e4:ad:66:86: b4:9a:8d:63:40:11:37:34:b0:e9:2b:31:a3:be:62:ec:9f:10: ea:2b:79:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzWLjlxGyJ+ltfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjQ4YjU2OGItYzE5ZS00NWJjLTg4ZjYtMDYzMDUyMWMyM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNiKV8HZ0FNJ6Oxf09pZtXWUt/uuyVLGo6dB OCPEe8ymkzRp5jaXAWKwKDezr4atno4xJrMnq5sHQOeHMQjwcQNgnmlviQ3t2nOR 97FdBtbGSn4wrp5aUQG1j1ZoF2ZTnt7Vq/l2X61PlEz1WbXNwlaCVmOMrIBI9VYj EefWT84Fu757gOpdRY8nuWvH2anc7/7oSVpofKNclpZ3PF37IEpHpD9NOgw9ez8C 9evA1n/TZL8A0pcPExXo4P4cSCAZJ73h37/UGEES0kruf07F0fAenxTg6uEyIBwN WwKGi5Cszs+eO7IjuNObnFz/5EGo6w69eB2Rj2Ow+aigeqi3UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuYjgDubwI5oJak/pMOPFwkfo8PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmY0ZjQ2ZDEtYWQ2YS0z MDdjLWFkYmItZWQ4ZmJhZTliZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvplMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENOH+Smdl3FbUjwvk1R5b/JiC+1T3iteItFNIE3LAba6Iqcu0ULqDeI +Eb4tSarnKXiGEjdeqOr1CFLuuqmgacQeh1qKKcHX/cP1VofdbDA7zmJ/Yy8swgJ RMviptG8De/wh4R6BNY2xYcf2/P9e8KLIQjfEh65ozjIxgf/BBXsBj1BmPRxnr7P assciwhuTDPHc3N9pwhnYSWxY1KV9XfSuj5c4YNIfx6Lfi47teAu6ErLKpct8TpS SNSLWSykNUgeN3fd0IB19iKKvzwISPCUp1HZxpjiFEU0mPveKislYFWJCMi65K1m hrSajWNAETc0sOkrMaO+YuyfEOoreeo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:25 2025 by rpki-client