$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1293f858-c5bf-3f6f-8dd9-7d8dca4b0de2.roa File: 1293f858-c5bf-3f6f-8dd9-7d8dca4b0de2.roa (raw, json) Hash identifier: 3G3iXZQoYgTxD2T7zDMUO+aNFXkuCguCQCofTDb6o94= Subject key identifier: B5:3D:FA:30:C0:78:0C:C9:EA:30:C9:9E:AD:28:CC:72:E6:64:A3:9D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A0365C52E554F193F5B580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1293f858-c5bf-3f6f-8dd9-7d8dca4b0de2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 142.250.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:36:5c:52:e5:54:f1:93:f5:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ae4cd00e-6d00-41d9-877f-4053c407de5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:1f:04:fe:f4:00:16:68:b8:d3:31:c1:0b: ee:a9:30:6b:19:6c:eb:c8:a5:9f:cb:73:ca:2f:c9: 57:8d:bc:f7:3d:31:eb:f2:1d:83:de:74:e6:75:ca: 01:7b:4a:36:60:b5:57:98:ae:8b:c9:bf:46:98:fc: 00:8e:a3:de:6d:57:ec:83:31:b4:ae:02:39:26:2f: ce:d6:d0:76:0f:26:e3:69:42:82:f3:af:c8:db:11: a7:8c:62:67:10:11:24:ef:d4:7e:3a:59:e3:4e:6c: de:47:c2:7d:6d:36:cb:f6:e7:c8:70:2f:2f:40:e9: de:fa:80:8e:33:91:cb:af:5a:a9:7c:75:b7:84:be: 59:e0:73:d5:2d:7d:e0:03:01:32:76:d3:eb:70:d5: 5e:a7:a5:2e:a9:c4:7d:6a:df:34:81:fa:b5:97:d1: d4:73:c8:ed:e2:b7:13:9f:c1:91:e9:4c:77:0a:ba: 23:71:06:26:c9:e9:40:63:13:fc:03:0d:ab:98:b2: 27:ce:48:4a:70:1e:75:2d:d2:9f:a0:2c:3c:e8:b6: b8:93:78:f2:44:a8:ba:6a:a9:c4:de:c6:72:f9:ed: 76:7b:b5:5f:f0:07:d3:9f:0f:ea:6e:ed:15:27:98: 65:d0:0d:2f:d5:29:8c:e8:df:64:b2:00:37:92:ca: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3D:FA:30:C0:78:0C:C9:EA:30:C9:9E:AD:28:CC:72:E6:64:A3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1293f858-c5bf-3f6f-8dd9-7d8dca4b0de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ce:b3:46:7c:9c:ad:92:9a:c0:85:bc:2b:00:bd:a1:01:62: 23:0f:7f:e5:9e:da:32:9c:61:59:4f:60:d8:bf:01:e6:f0:54: fd:0a:9f:f0:bc:2b:1d:41:c3:7d:49:8e:36:89:1c:ec:62:1a: 73:66:d9:49:ef:e0:21:44:b2:4a:ee:ac:37:64:a8:e0:23:ef: 0a:eb:10:93:e5:f8:b3:83:cd:b6:00:2c:9f:fb:29:8a:69:12: 18:a2:81:d7:b5:ac:6d:5a:3b:62:8d:56:92:25:27:62:e0:3e: 55:72:d8:c1:d7:81:aa:0a:cd:49:8a:b5:85:f6:94:7d:3e:66: bc:dd:4d:24:29:71:42:43:16:27:43:1b:3d:dd:69:7c:25:4c: 7c:10:41:fc:33:df:64:67:37:4a:64:86:bc:db:9a:9a:48:fb: 78:d0:61:92:16:0a:b7:1b:06:c5:fd:9d:2b:3a:b0:fc:c4:0f: 9e:a3:ce:2d:96:7b:87:29:58:e5:a7:89:c1:1f:2e:3b:e0:89: ae:ee:84:b2:27:9e:6e:09:3d:15:21:79:c9:25:14:00:12:83: 10:3a:53:d8:fc:41:75:76:7e:d0:53:58:2e:42:46:d2:3c:94: d1:8e:3b:11:94:fa:96:85:24:11:98:f5:43:4a:83:a3:71:8a: 91:3c:68:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noDZcUuVU8ZP1tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWU0Y2QwMGUtNmQwMC00MWQ5LTg3N2YtNDA1M2M0MDdkZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tQfBP70ABZouNMxwQvuqTBrGWzryKWfy3PK L8lXjbz3PTHr8h2D3nTmdcoBe0o2YLVXmK6Lyb9GmPwAjqPebVfsgzG0rgI5Ji/O 1tB2DybjaUKC86/I2xGnjGJnEBEk79R+OlnjTmzeR8J9bTbL9ufIcC8vQOne+oCO M5HLr1qpfHW3hL5Z4HPVLX3gAwEydtPrcNVep6UuqcR9at80gfq1l9HUc8jt4rcT n8GR6Ux3CrojcQYmyelAYxP8Aw2rmLInzkhKcB51LdKfoCw86La4k3jyRKi6aqnE 3sZy+e12e7Vf8AfTnw/qbu0VJ5hl0A0v1SmM6N9ksgA3ksq/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU9+jDAeAzJ6jDJnq0ozHLmZKOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTI5M2Y4NTgtYzViZi0z ZjZmLThkZDktN2Q4ZGNhNGIwZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3Os0Z8nK2SmsCFvCsAvaEBYiMPf+We2jKcYVlPYNi/AebwVP0Kn/C8 Kx1Bw31JjjaJHOxiGnNm2Unv4CFEskrurDdkqOAj7wrrEJPl+LODzbYALJ/7KYpp Ehiigde1rG1aO2KNVpIlJ2LgPlVy2MHXgaoKzUmKtYX2lH0+ZrzdTSQpcUJDFidD Gz3daXwlTHwQQfwz32RnN0pkhrzbmppI+3jQYZIWCrcbBsX9nSs6sPzED56jzi2W e4cpWOWnicEfLjvgia7uhLInnm4JPRUhecklFAASgxA6U9j8QXV2ftBTWC5CRtI8 lNGOOxGU+paFJBGY9UNKg6NxipE8aMw= -----END CERTIFICATE-----Generated at Wed Jul 29 05:35:45 2026 by rpki-client