$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa File: 2496aed2-6643-3205-9f31-bcdb349f0efa.roa (raw, json) Hash identifier: J4qG2HwQtilJP8+4FPR5zBu7TlLJ96AlErndlZ85Wnc= Subject key identifier: A9:00:CE:97:8F:0C:C0:D6:46:29:D4:CD:BE:CC:7E:61:72:DD:22:3C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E448F2DC1333B71543BDB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 142.250.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:8f:2d:c1:33:3b:71:54:3b:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=b877db69-b3b4-4164-b867-32c2b603fe24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:b4:8e:7a:e7:09:b6:07:43:eb:b7:6a:b4: d0:47:35:91:b1:2d:c1:30:67:90:73:35:c0:d4:68: 1d:61:7d:a5:6c:c5:43:f0:d6:6d:0b:a9:d0:bf:cc: 68:59:3e:06:c1:16:0f:2a:1f:7e:cd:4a:3c:c3:26: 4b:95:72:a3:20:a3:91:67:12:82:77:4a:ec:8b:e3: b1:42:10:84:eb:9b:66:79:34:1a:e1:62:76:4c:27: b7:84:e0:5d:29:6c:16:77:a5:3b:9a:7a:d0:74:c2: 28:ad:e7:95:56:2b:ca:70:84:48:aa:84:4b:98:24: 09:9f:a9:df:89:55:3d:71:83:30:88:75:d3:a1:d8: 77:e9:95:c5:8f:97:05:7f:65:cd:58:dc:d0:20:ca: 93:e2:33:a9:e9:aa:9b:ee:b1:82:71:89:15:3e:e5: 31:d0:d1:7d:49:a5:5f:60:bc:9c:79:f4:77:0f:c2: 4c:19:b2:f3:94:84:7c:2b:64:f7:2d:b2:ff:79:d8: 8f:7f:dd:89:5f:e0:51:b5:db:40:9b:8d:e6:53:5e: f4:77:78:8e:d1:6a:d5:af:77:24:1f:3f:f6:f4:7a: 09:dc:7f:cf:23:3c:db:c8:91:dd:0b:1c:67:e9:9e: d2:84:96:8b:10:43:bf:de:37:5c:ba:c1:9e:db:ac: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:00:CE:97:8F:0C:C0:D6:46:29:D4:CD:BE:CC:7E:61:72:DD:22:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2496aed2-6643-3205-9f31-bcdb349f0efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d0:a4:22:9d:df:56:76:cb:da:78:2b:83:c9:c2:09:a9:5a: 01:9a:fd:4f:07:57:3b:e2:66:7f:66:0e:da:a7:c4:70:6f:3a: bf:bf:bd:89:3d:e8:e6:33:00:88:8e:fa:ae:49:68:c8:16:ee: d7:f8:ae:b0:31:cc:fa:31:98:a8:86:94:14:38:20:e5:3a:a2: 09:1c:ae:c5:e8:a1:e8:ff:b9:ca:db:72:69:2e:d2:4a:f7:fb: 54:79:fa:4f:44:1d:24:ce:27:ec:dd:cb:e2:e1:03:0a:fc:e4: 45:2f:d8:a0:ad:87:69:51:b6:33:0e:4c:99:10:3b:ad:60:b2: 2e:1d:ab:64:bd:93:b5:c1:34:fd:23:45:ff:d8:ee:43:68:af: 2b:f8:5b:4b:9a:d8:c4:d0:56:3b:33:9e:ef:41:bf:f3:18:c0: 3c:1c:4a:7c:91:24:33:9c:6d:45:81:8d:d7:48:e5:e4:09:d5: ca:4e:dd:2d:e1:01:15:f3:24:29:b9:cc:72:7d:4f:f5:76:2e: b1:3c:8a:96:de:8d:0e:34:aa:92:e1:b7:2e:72:27:dd:6c:18: a1:4f:2d:4f:10:dd:7b:3f:fe:88:c1:b9:83:40:8a:f6:8b:00: 37:64:53:40:72:53:a9:a4:41:ab:8d:2c:5f:fe:61:9b:8b:83: 71:55:dc:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRI8twTM7cVQ724AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk Yjg3N2RiNjktYjNiNC00MTY0LWI4NjctMzJjMmI2MDNmZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbK0jnrnCbYHQ+u3arTQRzWRsS3BMGeQczXA 1GgdYX2lbMVD8NZtC6nQv8xoWT4GwRYPKh9+zUo8wyZLlXKjIKORZxKCd0rsi+Ox QhCE65tmeTQa4WJ2TCe3hOBdKWwWd6U7mnrQdMIoreeVVivKcIRIqoRLmCQJn6nf iVU9cYMwiHXTodh36ZXFj5cFf2XNWNzQIMqT4jOp6aqb7rGCcYkVPuUx0NF9SaVf YLycefR3D8JMGbLzlIR8K2T3LbL/ediPf92JX+BRtdtAm43mU170d3iO0WrVr3ck Hz/29HoJ3H/PIzzbyJHdCxxn6Z7ShJaLEEO/3jdcusGe26wPMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkAzpePDMDWRinUzb7MfmFy3SI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjQ5NmFlZDItNjY0My0z MjA1LTlmMzEtYmNkYjM0OWYwZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELQpCKd31Z2y9p4K4PJwgmpWgGa/U8HVzviZn9mDtqnxHBvOr+/vYk9 6OYzAIiO+q5JaMgW7tf4rrAxzPoxmKiGlBQ4IOU6ogkcrsXooej/ucrbcmku0kr3 +1R5+k9EHSTOJ+zdy+LhAwr85EUv2KCth2lRtjMOTJkQO61gsi4dq2S9k7XBNP0j Rf/Y7kNoryv4W0ua2MTQVjsznu9Bv/MYwDwcSnyRJDOcbUWBjddI5eQJ1cpO3S3h ARXzJCm5zHJ9T/V2LrE8ipbejQ40qpLhty5yJ91sGKFPLU8Q3Xs//ojBuYNAivaL ADdkU0ByU6mkQauNLF/+YZuLg3FV3AE= -----END CERTIFICATE-----Generated at Sat Jun 13 11:23:44 2026 by rpki-client