$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa File: 21c30bc2-e254-3dfc-8044-27631c929828.roa (raw, json) Hash identifier: IZ3jTxS1o71qJ3dZpZVOzkzMfdnpCBR8LUs0ZGHJZww= Subject key identifier: 10:B2:7F:73:5F:A6:8D:0E:66:18:A1:BC:F8:31:4F:31:7F:54:A2:BF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C4E538ABB691DD5DD5D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.250.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:4e:53:8a:bb:69:1d:d5:dd:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=8a3a3536-58c9-41bd-850b-9dfbd8aaa66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:00:f5:bf:45:d7:05:56:6f:8e:76:14:bf: ba:0a:56:2e:17:a2:aa:f6:e4:13:6b:d8:04:2d:8c: e9:31:d9:cf:81:bb:88:b2:88:ce:ce:12:44:fd:14: a2:8d:fd:14:e7:5e:05:4a:41:e9:ef:dc:d3:e3:b0: 41:46:56:f4:41:37:04:c3:f9:a2:e2:16:1b:27:c7: 64:81:8f:d2:c9:1c:66:f8:59:f5:18:33:e0:ca:f5: 22:31:58:f2:57:7b:ca:a4:45:8d:ac:d4:8c:51:49: 89:6f:29:d1:2f:93:b5:a8:44:3c:62:b6:ed:bd:4f: 6a:13:43:e3:13:9d:c6:8e:9f:0f:21:e9:30:5c:9d: 1d:9c:8c:46:dc:45:57:c4:ba:1b:49:48:83:4c:85: 9d:15:d8:48:e2:fa:48:6c:f8:61:74:9e:d6:67:d9: 81:89:47:a6:c1:e9:de:67:97:b4:de:95:3c:4e:3c: 27:03:a9:5b:96:16:7f:69:21:33:be:a1:9c:ee:bd: 15:25:cc:33:b6:87:28:37:07:61:20:cc:ef:68:c5: c6:25:40:06:00:39:71:c7:2c:da:6e:d6:18:81:90: 38:10:3b:80:44:68:eb:7c:69:79:10:27:5d:e4:63: 6f:42:72:a0:ed:be:fb:58:ad:f5:7a:2f:7f:60:47: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B2:7F:73:5F:A6:8D:0E:66:18:A1:BC:F8:31:4F:31:7F:54:A2:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:38:b7:d1:67:2a:58:23:c3:c9:aa:c8:9a:a7:1e:64:40:b5: fa:7b:08:33:4a:6f:af:3b:65:64:92:0f:25:2c:20:2f:8d:10: cb:37:6b:14:a1:e1:c9:2c:2a:d0:74:72:81:95:98:d0:cc:ef: 3a:91:29:b4:1a:35:ab:bf:72:19:ce:ac:e3:34:a2:e9:5f:6e: 65:c6:3b:db:ae:7a:6d:4e:8f:c4:82:0c:ad:12:32:fa:5d:48: 52:92:9d:71:7b:f0:5e:a1:5e:41:68:87:ef:9f:04:70:40:38: d9:ed:4e:01:2c:ac:be:24:c2:5a:f3:9a:05:d3:ff:6e:da:68: 33:ee:99:f8:c2:04:e7:b5:68:ec:02:62:57:45:b6:c6:62:22: be:83:15:f3:e2:67:01:a5:09:6f:5a:9f:be:2a:f8:73:32:95: d3:21:a6:c2:38:54:f6:42:f9:b0:68:e7:21:61:d6:9d:05:d9: e9:2c:97:f5:50:84:c3:8f:f0:99:85:d9:66:05:9d:96:78:0d: c3:87:3b:3f:05:78:84:46:5e:d6:94:2b:56:66:4c:73:10:11: ac:cc:7e:88:2f:69:a0:0e:6e:8b:c4:22:55:3e:37:e3:54:7b: 73:6a:0e:4d:0c:44:4c:77:2d:9d:d5:f8:2e:c9:72:92:0a:c2: 80:e3:ff:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnE5TirtpHdXdXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk OGEzYTM1MzYtNThjOS00MWJkLTg1MGItOWRmYmQ4YWFhNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHMA9b9F1wVWb452FL+6ClYuF6Kq9uQTa9gE LYzpMdnPgbuIsojOzhJE/RSijf0U514FSkHp79zT47BBRlb0QTcEw/mi4hYbJ8dk gY/SyRxm+Fn1GDPgyvUiMVjyV3vKpEWNrNSMUUmJbynRL5O1qEQ8YrbtvU9qE0Pj E53Gjp8PIekwXJ0dnIxG3EVXxLobSUiDTIWdFdhI4vpIbPhhdJ7WZ9mBiUemwene Z5e03pU8TjwnA6lblhZ/aSEzvqGc7r0VJcwztocoNwdhIMzvaMXGJUAGADlxxyza btYYgZA4EDuARGjrfGl5ECdd5GNvQnKg7b77WK31ei9/YEdOfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCyf3Nfpo0OZhihvPgxTzF/VKK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjFjMzBiYzItZTI1NC0z ZGZjLTgwNDQtMjc2MzFjOTI5ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM4t9FnKlgjw8mqyJqnHmRAtfp7CDNKb687ZWSSDyUsIC+NEMs3axSh 4cksKtB0coGVmNDM7zqRKbQaNau/chnOrOM0oulfbmXGO9uuem1Oj8SCDK0SMvpd SFKSnXF78F6hXkFoh++fBHBAONntTgEsrL4kwlrzmgXT/27aaDPumfjCBOe1aOwC YldFtsZiIr6DFfPiZwGlCW9an74q+HMyldMhpsI4VPZC+bBo5yFh1p0F2eksl/VQ hMOP8JmF2WYFnZZ4DcOHOz8FeIRGXtaUK1ZmTHMQEazMfogvaaAObovEIlU+N+NU e3NqDk0MREx3LZ3V+C7JcpIKwoDj/9M= -----END CERTIFICATE-----Generated at Sat Jun 13 13:09:10 2026 by rpki-client