$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa File: dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa (raw, json) Hash identifier: TQXQrZ8g8wzlhbqGVJzdKmc8+b3CdGmebNNq3upLqSA= Subject key identifier: 50:65:C1:48:B8:49:CE:73:AF:7D:EB:1F:AF:69:3B:E8:BA:C9:48:37 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6293071BDA9C9B6AA777EA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:1b:da:9c:9b:6a:a7:77:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=37bfd2c5-e505-4bee-badd-068f5163b6b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:72:0b:cc:ce:e8:19:6b:52:e0:81:60:8e: f3:b3:4c:90:a4:3d:7b:82:1b:ad:56:05:c1:af:37: 51:18:fa:2e:20:4a:84:07:e0:cd:cf:b5:c5:fe:85: bb:24:ad:f8:72:e4:94:16:db:66:97:e4:4d:55:8b: b7:7d:9f:70:cc:8b:37:f8:9f:9f:4d:06:8f:84:99: ba:cc:d0:78:45:fa:86:22:c5:9b:62:df:b2:43:f0: ef:97:08:5e:20:03:4d:5f:e7:7a:1e:7a:38:3c:71: f7:66:c5:35:28:71:af:11:49:bd:c9:1b:ba:3c:e7: 7b:62:3f:ce:8f:4c:4c:76:aa:34:18:ea:b4:36:b7: 2d:80:a1:36:d7:13:a7:a3:a9:a8:90:f3:9d:e2:00: f4:a6:01:f6:0d:8e:ac:1d:14:f2:38:42:2a:34:cf: c9:b0:65:7a:0a:6e:5a:b6:1f:5f:23:f2:0b:75:16: 08:de:04:1a:e2:4a:bd:c1:6b:40:36:db:14:28:6a: 34:3c:53:f1:bf:6d:58:4a:ab:31:73:b9:99:09:fd: 0d:3b:7b:52:f2:71:2b:98:79:8e:8f:b6:33:9d:71: 92:fb:d0:12:a1:21:3f:e3:4c:d6:2a:98:be:c1:19: 3f:9d:03:87:dd:b4:26:96:27:c3:b7:47:d2:b0:13: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:65:C1:48:B8:49:CE:73:AF:7D:EB:1F:AF:69:3B:E8:BA:C9:48:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:b9:65:fe:34:7a:f2:9f:9c:36:dd:b5:4c:84:15:51:66:f2: ef:1d:99:29:a1:29:75:1e:66:be:59:54:31:b1:68:b9:8d:d1: 79:4e:07:a0:5f:1c:8c:8a:70:b9:4a:79:32:a9:84:c2:84:6a: 17:82:e9:9d:cb:b7:e4:ab:8d:6b:00:be:0f:8e:b9:40:a9:79: 63:3c:9a:37:8a:9b:57:e4:4c:3d:16:e8:f6:8a:20:fe:a9:f9: 73:5f:83:9f:bf:e2:e9:e2:c0:bd:ef:41:0c:87:59:46:a5:e8: 68:a2:e4:e7:6c:07:24:35:d5:42:c4:fe:73:40:5b:6e:fe:17: 7b:a7:0f:6a:2c:61:b5:04:99:e6:4f:b6:01:31:99:fa:84:cb: c1:1d:a2:2c:bc:7c:5f:f7:01:90:7a:31:c5:5c:82:f7:22:f3: 5e:fe:41:dc:56:d7:2e:10:b9:36:b3:76:4d:d2:e5:e3:50:b5: da:38:b2:e5:22:b6:69:16:ee:1f:18:a2:69:16:c6:92:d5:2a: ce:37:5e:0f:b2:15:a1:73:a8:b6:25:94:7b:d1:45:60:b0:f1: b0:bd:60:51:64:92:5d:48:a6:e2:58:66:0e:cc:5a:eb:1f:57: b0:fd:5d:83:99:91:07:0c:5b:f5:a7:c8:9a:3f:62:27:0f:02: 99:81:75:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwcb2pybaqd36gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MzdiZmQyYzUtZTUwNS00YmVlLWJhZGQtMDY4ZjUxNjNiNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4NyC8zO6BlrUuCBYI7zs0yQpD17ghutVgXB rzdRGPouIEqEB+DNz7XF/oW7JK34cuSUFttml+RNVYu3fZ9wzIs3+J+fTQaPhJm6 zNB4RfqGIsWbYt+yQ/DvlwheIANNX+d6Hno4PHH3ZsU1KHGvEUm9yRu6POd7Yj/O j0xMdqo0GOq0NrctgKE21xOno6mokPOd4gD0pgH2DY6sHRTyOEIqNM/JsGV6Cm5a th9fI/ILdRYI3gQa4kq9wWtANtsUKGo0PFPxv21YSqsxc7mZCf0NO3tS8nErmHmO j7YznXGS+9ASoSE/40zWKpi+wRk/nQOH3bQmlifDt0fSsBOQ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBlwUi4Sc5zr33rH69pO+i6yUg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQxZWU2ZWYtZTMxNy0z ZTRiLWJlYTAtNzdlZmViMjQ0NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJq5Zf40evKfnDbdtUyEFVFm8u8dmSmhKXUeZr5ZVDGxaLmN0XlOB6Bf HIyKcLlKeTKphMKEaheC6Z3Lt+SrjWsAvg+OuUCpeWM8mjeKm1fkTD0W6PaKIP6p +XNfg5+/4uniwL3vQQyHWUal6Gii5OdsByQ11ULE/nNAW27+F3unD2osYbUEmeZP tgExmfqEy8Edoiy8fF/3AZB6McVcgvci817+QdxW1y4QuTazdk3S5eNQtdo4suUi tmkW7h8YomkWxpLVKs43Xg+yFaFzqLYllHvRRWCw8bC9YFFkkl1IpuJYZg7MWusf V7D9XYOZkQcMW/WnyJo/YicPApmBdcQ= -----END CERTIFICATE-----Generated at Thu Nov 5 17:28:23 2026 by rpki-client