$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa File: 289e72dc-240a-3333-b80e-6a466f6a78a6.roa (raw, json) Hash identifier: yL+vcuC5ByVmh90a2z1eqtttyrAlyK4E0h6Du5PLfbk= Subject key identifier: 7A:67:6E:91:AC:6A:A2:39:62:F0:58:9C:A3:42:B3:71:9C:53:99:3E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E448FF7F3765BE13C1FBD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 142.250.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:8f:f7:f3:76:5b:e1:3c:1f:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=c8caf776-d6bb-458f-98bb-d39e77fae804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:2c:ae:89:ee:62:97:0a:48:78:13:cc:b4: 89:0b:4a:a3:7c:5d:d0:f7:42:e2:58:77:80:f2:58: 50:0a:91:bc:f0:f3:4e:55:57:05:5b:22:eb:46:5a: a2:64:62:cc:9d:a4:d2:8a:26:f2:37:56:e1:ac:d8: fa:50:0b:4f:41:90:6a:24:93:4c:47:08:e9:1a:94: 70:08:bf:9f:36:f8:05:ec:bf:5a:c9:70:67:43:d1: 35:ee:b5:f3:49:87:aa:b0:70:44:63:dd:36:5e:12: d4:c9:77:03:a5:b0:6d:eb:ca:b3:b2:31:de:b0:14: a1:7a:a7:35:b2:bb:7f:1a:75:fc:bf:7f:97:db:74: aa:80:84:1b:ef:48:b1:81:ef:4b:74:d6:f0:30:7c: f4:2b:a3:86:20:57:75:61:8f:30:54:6d:9e:14:ef: b1:73:27:bd:62:c6:d0:4b:c6:e8:d4:a9:53:e6:2c: 68:d3:7c:cb:bc:96:a6:ab:43:22:b6:9b:8a:9f:25: da:48:34:51:49:c4:8e:0c:5c:b3:50:03:ae:08:11: 3e:b7:5b:8f:ef:f7:be:d5:45:82:29:5e:2e:8b:8a: be:61:a7:4c:0e:74:f9:f6:00:88:48:2e:2a:15:33: 68:c1:0f:1c:af:c9:da:d3:f8:ce:45:73:f4:5d:12: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:67:6E:91:AC:6A:A2:39:62:F0:58:9C:A3:42:B3:71:9C:53:99:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:67:b3:89:dd:d7:ff:f2:2e:0f:89:f3:bc:95:ca:00:83:ea: 24:de:38:a9:91:c8:6d:a6:92:2b:2e:23:68:fd:a2:4b:d6:2c: 6d:f5:08:5a:56:e0:9c:78:4e:6b:30:1e:ba:00:d6:a3:27:d4: f6:59:1b:5e:3f:cf:18:50:60:b7:bb:f8:de:9d:5a:99:aa:79: ee:c7:4b:7e:0e:10:bd:2d:fc:19:20:ee:2c:1a:da:26:b4:ed: 58:8e:e9:db:5f:e3:03:e7:7c:c6:47:71:96:4c:46:cf:17:5b: f6:fd:fc:39:6e:61:1c:ee:cf:65:14:ae:d9:dc:8b:95:c9:a7: eb:f8:91:47:1e:1e:42:4a:ee:e4:63:1c:3e:55:57:d9:6e:19: a3:58:b1:78:4d:99:b2:e6:16:2a:43:fb:32:fc:ff:e6:bc:2f: 54:9b:05:02:f4:3f:07:09:ac:ab:07:47:0b:e8:f0:19:aa:a1: dc:fc:1e:4a:7c:ec:b5:d3:e6:44:8d:61:5e:25:01:76:51:af: e7:2f:c2:63:0e:03:23:b3:04:5e:ed:5f:22:58:45:52:07:0d: 2d:e3:ec:cb:34:53:89:08:9b:4c:37:98:e1:25:c2:be:0b:23: 07:c1:ff:d8:04:48:f3:44:a7:b1:b2:a1:c7:db:18:1a:2a:15: 69:3b:97:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRI/383Zb4TwfvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YzhjYWY3NzYtZDZiYi00NThmLTk4YmItZDM5ZTc3ZmFlODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2AsronuYpcKSHgTzLSJC0qjfF3Q90LiWHeA 8lhQCpG88PNOVVcFWyLrRlqiZGLMnaTSiibyN1bhrNj6UAtPQZBqJJNMRwjpGpRw CL+fNvgF7L9ayXBnQ9E17rXzSYeqsHBEY902XhLUyXcDpbBt68qzsjHesBSheqc1 srt/GnX8v3+X23SqgIQb70ixge9LdNbwMHz0K6OGIFd1YY8wVG2eFO+xcye9YsbQ S8bo1KlT5ixo03zLvJamq0MitpuKnyXaSDRRScSODFyzUAOuCBE+t1uP7/e+1UWC KV4ui4q+YadMDnT59gCISC4qFTNowQ8cr8na0/jORXP0XRJ6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpnbpGsaqI5YvBYnKNCs3GcU5k+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg5ZTcyZGMtMjQwYS0z MzMzLWI4MGUtNmE0NjZmNmE3OGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1ns4nd1//yLg+J87yVygCD6iTeOKmRyG2mkisuI2j9okvWLG31CFpW 4Jx4TmswHroA1qMn1PZZG14/zxhQYLe7+N6dWpmqee7HS34OEL0t/Bkg7iwa2ia0 7ViO6dtf4wPnfMZHcZZMRs8XW/b9/DluYRzuz2UUrtnci5XJp+v4kUceHkJK7uRj HD5VV9luGaNYsXhNmbLmFipD+zL8/+a8L1SbBQL0PwcJrKsHRwvo8Bmqodz8Hkp8 7LXT5kSNYV4lAXZRr+cvwmMOAyOzBF7tXyJYRVIHDS3j7Ms0U4kIm0w3mOElwr4L IwfB/9gESPNEp7GyocfbGBoqFWk7lx4= -----END CERTIFICATE-----Generated at Sat Jun 13 13:47:46 2026 by rpki-client