$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa File: fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa (raw, json) Hash identifier: D/7Fiz/ce8HQTNdCIpvHx+bFC4ODKMKq1gLG0JsMz8E= Subject key identifier: 1E:9B:16:B1:26:39:7B:66:B1:A3:FA:73:69:C6:6B:07:97:C2:CE:42 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD4D195975AD9F6EBA62E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 142.250.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4d:19:59:75:ad:9f:6e:ba:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=6a2d9e48-5041-4a61-b2f9-6802d2922fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a0:50:05:e3:2c:bb:ce:5f:94:38:ca:30:4f: 39:e7:d0:df:a1:38:9f:27:43:fc:e8:c8:8e:e4:7b: 99:cb:14:25:3b:df:f8:9d:c5:06:05:94:fc:70:8b: 99:98:42:ce:f2:22:81:1f:e8:d6:5a:1e:5d:4c:3f: e1:80:a9:33:7e:00:5c:b5:28:c1:a4:f0:c0:61:01: e9:b5:6b:e8:aa:d4:df:d6:8d:8c:b4:2c:42:08:97: 9f:63:3c:f7:da:71:58:cc:45:60:da:e2:e9:2d:e6: b3:84:15:b9:92:54:62:06:a4:66:02:d1:9e:5f:07: 43:b5:49:a8:78:c9:6b:51:ba:62:40:e7:0b:83:1e: e8:3f:47:e4:05:96:52:1e:54:0c:e8:39:28:7b:c8: 3f:70:a2:47:f3:08:f2:93:10:ac:3e:74:34:df:fe: 8c:9f:a9:5d:db:07:a4:55:a9:6a:c9:ac:02:8a:3c: bc:8a:b7:cc:d7:e0:fb:e2:d5:10:88:dc:3f:ec:b8: 2a:9c:c6:00:73:41:54:3f:8a:a4:0c:6c:03:56:c5: fa:4f:7f:38:02:90:68:69:84:58:86:78:29:4b:93: 6d:b8:9b:be:ff:e7:d1:d0:6c:f4:cb:4d:e5:6b:dc: 65:8f:6d:67:fa:70:7c:5b:c8:a9:b8:45:05:05:e0: c7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9B:16:B1:26:39:7B:66:B1:A3:FA:73:69:C6:6B:07:97:C2:CE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa4df7c8-fc40-3143-a570-4a4ce3019f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6a:08:85:67:cf:e1:c9:69:1d:af:da:f6:50:9e:dd:2a:e2: a0:aa:e0:cd:46:b0:83:2f:81:e0:41:35:37:8f:63:36:3a:88: ce:be:83:94:82:34:30:36:98:93:41:f0:10:d5:04:fb:11:bf: c9:58:83:df:71:9c:b1:83:25:a9:1d:d7:da:50:a4:8e:96:27: 48:4a:d4:cd:95:7f:b4:5e:d8:2e:bc:4e:83:49:20:d8:1e:4a: 48:e6:56:d6:50:0e:45:24:45:9e:d4:b5:99:10:ec:a9:e9:31: 55:3d:f9:f6:52:2d:a7:5c:36:f2:95:eb:8d:23:fb:c3:cd:6a: a3:e5:e4:26:fa:1a:99:6a:83:8f:f3:e0:5f:31:7e:06:37:7b: 44:c6:a2:68:d7:28:b8:dd:a0:1a:91:78:19:54:3c:b5:9c:d5: fe:c4:51:a8:f6:76:48:52:92:ff:89:39:b6:82:8c:ce:ed:dc: 12:2a:43:ff:a4:e3:be:10:68:e2:84:b9:c0:4f:eb:c9:60:97: 61:ba:c1:0d:27:07:98:72:4d:9b:e5:1d:09:1b:3f:48:e6:94: 0f:c4:07:e0:be:18:95:5d:3c:dd:8b:cd:ec:8d:92:ca:42:03: 1f:61:d5:1a:65:ec:e6:38:14:28:c6:7b:35:ef:ce:69:9a:92: 87:ea:7c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzU0ZWXWtn266YuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NmEyZDllNDgtNTA0MS00YTYxLWIyZjktNjgwMmQyOTIyZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqBQBeMsu85flDjKME8559DfoTifJ0P86MiO 5HuZyxQlO9/4ncUGBZT8cIuZmELO8iKBH+jWWh5dTD/hgKkzfgBctSjBpPDAYQHp tWvoqtTf1o2MtCxCCJefYzz32nFYzEVg2uLpLeazhBW5klRiBqRmAtGeXwdDtUmo eMlrUbpiQOcLgx7oP0fkBZZSHlQM6Dkoe8g/cKJH8wjykxCsPnQ03/6Mn6ld2wek ValqyawCijy8irfM1+D74tUQiNw/7LgqnMYAc0FUP4qkDGwDVsX6T384ApBoaYRY hngpS5NtuJu+/+fR0Gz0y03la9xlj21n+nB8W8ipuEUFBeDHOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6bFrEmOXtmsaP6c2nGaweXws5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmE0ZGY3YzgtZmM0MC0z MTQzLWE1NzAtNGE0Y2UzMDE5ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpqCIVnz+HJaR2v2vZQnt0q4qCq4M1GsIMvgeBBNTePYzY6iM6+g5SC NDA2mJNB8BDVBPsRv8lYg99xnLGDJakd19pQpI6WJ0hK1M2Vf7Re2C68ToNJINge SkjmVtZQDkUkRZ7UtZkQ7KnpMVU9+fZSLadcNvKV640j+8PNaqPl5Cb6Gplqg4/z 4F8xfgY3e0TGomjXKLjdoBqReBlUPLWc1f7EUaj2dkhSkv+JObaCjM7t3BIqQ/+k 474QaOKEucBP68lgl2G6wQ0nB5hyTZvlHQkbP0jmlA/EB+C+GJVdPN2LzeyNkspC Ax9h1Rpl7OY4FCjGezXvzmmakofqfCM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:38 2025 by rpki-client