$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa File: 21c30bc2-e254-3dfc-8044-27631c929828.roa (raw, json) Hash identifier: 2LniSZ5N/JyL114E7hkEyedrrW9c5IMbYngfFeKpVZA= Subject key identifier: 80:02:A7:BA:E6:08:06:BC:25:6C:41:E3:F1:1E:9C:EB:19:60:20:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A06CE1CF4AC38893356DC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 142.250.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:6c:e1:cf:4a:c3:88:93:35:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4ce72e8a-ddbf-40ee-9191-55e085b3cf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:88:f7:f3:bf:e0:0c:68:37:3f:6d:e2:85: db:ff:60:04:60:e4:bf:32:d4:3e:b3:2f:ec:7f:df: bc:9b:cb:9d:ca:ff:31:6f:73:af:2b:10:d1:bb:70: e9:59:f5:b8:e3:35:1e:54:2d:ad:12:e3:c7:a1:b0: 2e:5d:3f:3e:90:2b:33:3f:d6:1b:b8:15:4c:80:45: 59:f7:10:b9:46:41:34:8c:81:80:cf:8c:f0:5e:e6: a7:05:68:97:39:e8:97:cc:0e:56:8c:ed:4a:89:66: 97:66:31:70:ee:85:ec:a9:53:a5:f2:bb:f1:d9:61: 36:67:ea:8b:c1:9a:47:e3:53:26:3b:ba:72:31:7d: a0:12:1c:80:bc:83:da:ac:c5:6a:92:a9:f0:96:66: 44:01:9a:3f:33:63:84:c3:94:60:68:75:65:ed:a8: 58:d5:83:e8:33:97:0b:d4:04:79:84:03:f4:e7:66: 67:cb:02:7c:cc:54:e3:3e:00:2d:29:84:b6:a4:29: 21:36:c3:43:04:ef:e8:4b:f9:6f:23:56:ee:14:a3: 18:c7:19:d1:0e:c7:19:e8:fa:85:44:86:06:a0:14: 4e:fb:47:b8:93:69:65:4d:65:04:57:31:dd:fa:cd: eb:56:1c:8a:0b:56:47:54:61:45:c6:6d:d2:41:c7: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:02:A7:BA:E6:08:06:BC:25:6C:41:E3:F1:1E:9C:EB:19:60:20:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:76:58:8c:0a:17:a9:03:c7:43:8f:1c:5f:45:a8:7c:a7:3c: 6f:c3:fc:c2:3e:cd:33:a9:ea:c0:48:ef:e7:a1:e6:c8:27:c4: d2:58:47:3c:55:55:08:29:ac:2a:ad:9a:5c:d7:4e:b0:06:54: 30:ce:86:7b:52:7a:0b:32:72:fb:53:7e:61:49:fe:e7:89:a3: 70:ca:c3:2e:1f:5d:61:2e:74:8c:6a:fc:48:e5:e0:0b:2b:ec: d9:09:04:6f:dd:f9:ab:57:f3:75:28:bb:69:70:fa:5c:64:4b: de:5a:dc:e6:ee:e6:5c:32:15:99:11:8a:59:cf:6f:5a:9d:f9: b4:bc:2c:e9:be:52:ad:65:90:34:28:8a:ee:8b:70:2f:1b:bc: ce:42:b0:65:fc:8c:c3:05:de:76:44:56:89:17:68:09:22:aa: a7:cc:fa:40:10:1e:02:bd:16:93:b1:54:7f:8a:d0:47:36:c0: 66:af:5f:d4:a2:6b:8a:77:7e:78:e1:21:a7:30:d1:99:df:e6: 00:3b:a4:cc:71:fa:98:1e:97:ab:28:44:37:21:21:ef:a0:34: 2d:bb:0e:87:6c:b4:9f:32:7e:68:3f:23:d7:5d:86:4a:88:6d: 21:ef:de:ce:18:1a:82:33:be:ff:e3:65:85:6b:45:48:cb:93: 9b:85:95:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noGzhz0rDiJM1bcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGNlNzJlOGEtZGRiZi00MGVlLTkxOTEtNTVlMDg1YjNjZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvKI9/O/4AxoNz9t4oXb/2AEYOS/MtQ+sy/s f9+8m8udyv8xb3OvKxDRu3DpWfW44zUeVC2tEuPHobAuXT8+kCszP9YbuBVMgEVZ 9xC5RkE0jIGAz4zwXuanBWiXOeiXzA5WjO1KiWaXZjFw7oXsqVOl8rvx2WE2Z+qL wZpH41MmO7pyMX2gEhyAvIParMVqkqnwlmZEAZo/M2OEw5RgaHVl7ahY1YPoM5cL 1AR5hAP052ZnywJ8zFTjPgAtKYS2pCkhNsNDBO/oS/lvI1buFKMYxxnRDscZ6PqF RIYGoBRO+0e4k2llTWUEVzHd+s3rVhyKC1ZHVGFFxm3SQcdKxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIACp7rmCAa8JWxB4/EenOsZYCBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjFjMzBiYzItZTI1NC0z ZGZjLTgwNDQtMjc2MzFjOTI5ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKd2WIwKF6kDx0OPHF9FqHynPG/D/MI+zTOp6sBI7+eh5sgnxNJYRzxV VQgprCqtmlzXTrAGVDDOhntSegsycvtTfmFJ/ueJo3DKwy4fXWEudIxq/Ejl4Asr 7NkJBG/d+atX83Uou2lw+lxkS95a3Obu5lwyFZkRilnPb1qd+bS8LOm+Uq1lkDQo iu6LcC8bvM5CsGX8jMMF3nZEVokXaAkiqqfM+kAQHgK9FpOxVH+K0Ec2wGavX9Si a4p3fnjhIacw0Znf5gA7pMxx+pgel6soRDchIe+gNC27DodstJ8yfmg/I9ddhkqI bSHv3s4YGoIzvv/jZYVrRUjLk5uFlZY= -----END CERTIFICATE-----Generated at Wed Jul 29 05:04:10 2026 by rpki-client