$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4b02f9-1115-3e65-8e15-dccc8ec41078.roa File: 2c4b02f9-1115-3e65-8e15-dccc8ec41078.roa (raw, json) Hash identifier: Zk8/i/usSnN2Ird93Lvu+wfzha4NgfuRzR9SDQXrfA4= Subject key identifier: E7:1A:C9:A8:C2:61:3D:4A:04:9E:4C:33:A0:39:A2:6F:E4:CA:D2:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629307332906D62C02329740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4b02f9-1115-3e65-8e15-dccc8ec41078.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:33:29:06:d6:2c:02:32:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=a48f34f9-e198-4d30-a3a8-18b5d85192c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:d8:fe:10:11:cf:54:4c:69:36:6d:8e:a8: 8d:ca:97:a3:9a:49:fa:8f:ae:8a:65:55:e1:b9:06: 57:bd:af:20:6f:75:fc:30:0d:14:c7:a7:0e:0d:aa: 2d:d2:7d:f6:34:46:62:09:40:a3:cc:aa:0d:1c:b9: 63:d5:9c:b0:06:ff:50:73:9d:3d:16:2c:c2:61:1b: e3:8c:83:06:69:32:9b:74:9a:66:5e:8d:42:82:5d: 2d:2c:c2:bf:85:b5:70:cb:d1:83:be:66:6b:71:3d: ae:e1:38:4e:13:fc:60:e2:62:56:9d:f0:cc:d3:6a: 87:c2:fd:6a:f4:57:6f:06:e9:fb:38:ec:94:1b:c0: 0c:a6:49:c6:81:b9:a7:83:5d:14:e2:0d:74:0f:71: bb:d5:e8:8f:49:41:51:db:ed:5b:dd:43:00:2b:77: d7:80:2d:16:92:da:be:43:1f:6a:11:52:fa:0b:0b: 19:3b:7b:29:9f:bf:0e:8a:e1:6b:a7:f0:7c:25:4c: e8:6c:69:e6:bc:d8:ef:77:97:4e:05:84:ea:25:d1: 69:39:9f:65:aa:bc:da:c8:41:1a:f2:f2:07:1a:30: 38:0c:d8:52:40:5e:0e:41:4c:11:0a:44:a6:8f:24: e8:e9:c0:f7:21:68:07:85:9c:c8:34:c7:db:c5:60: c3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1A:C9:A8:C2:61:3D:4A:04:9E:4C:33:A0:39:A2:6F:E4:CA:D2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4b02f9-1115-3e65-8e15-dccc8ec41078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5b:30:87:52:24:4e:21:41:f1:e9:38:67:3f:3a:51:07:03: db:17:54:57:e3:8f:ee:14:4a:2b:c9:95:ca:b4:2b:31:1b:c6: 16:9a:6d:b1:46:c5:1c:44:71:44:90:6d:4a:c6:f5:08:36:b4: 99:ee:5c:a3:6e:52:40:06:dc:d4:5f:76:ad:d6:11:b6:05:83: e4:cb:73:a3:d9:a1:a7:c2:f9:9a:b8:bd:51:3f:82:5f:4f:e1: f6:74:ea:c5:9c:16:1a:93:4f:22:7b:b1:35:b0:25:d2:93:07: 4a:a8:f8:0c:11:4d:af:aa:0c:21:f2:db:e8:18:16:0b:24:9c: 36:f2:50:6c:e2:2d:1f:c3:df:40:91:2c:f0:4d:21:8c:e3:c0: 15:4a:8e:fc:46:0a:21:7d:3d:82:61:7e:d2:a9:e7:59:ab:eb: 90:98:2e:30:73:a4:ec:59:49:bd:a2:c1:c2:72:88:47:c9:e0: 6c:8d:4d:d2:70:23:a7:dd:e5:c9:b8:b1:75:d2:27:44:fa:31: 4b:8a:9d:b0:9f:b8:71:13:88:b2:f9:77:cc:34:f5:73:41:ee: 6d:26:18:85:dd:9c:d3:60:f5:49:96:d7:9a:cc:86:70:96:a7: 0a:25:fb:90:5e:1c:49:59:29:93:fc:d1:c1:38:c6:62:40:ab: 57:7c:a2:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwczKQbWLAIyl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTQ4ZjM0ZjktZTE5OC00ZDMwLWEzYTgtMThiNWQ4NTE5MmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8bY/hARz1RMaTZtjqiNypejmkn6j66KZVXh uQZXva8gb3X8MA0Ux6cODaot0n32NEZiCUCjzKoNHLlj1ZywBv9Qc509FizCYRvj jIMGaTKbdJpmXo1Cgl0tLMK/hbVwy9GDvmZrcT2u4ThOE/xg4mJWnfDM02qHwv1q 9FdvBun7OOyUG8AMpknGgbmng10U4g10D3G71eiPSUFR2+1b3UMAK3fXgC0Wktq+ Qx9qEVL6CwsZO3spn78OiuFrp/B8JUzobGnmvNjvd5dOBYTqJdFpOZ9lqrzayEEa 8vIHGjA4DNhSQF4OQUwRCkSmjyTo6cD3IWgHhZzINMfbxWDDnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcayajCYT1KBJ5MM6A5om/kytIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmM0YjAyZjktMTExNS0z ZTY1LThlMTUtZGNjYzhlYzQxMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdbMIdSJE4hQfHpOGc/OlEHA9sXVFfjj+4USivJlcq0KzEbxhaabbFG xRxEcUSQbUrG9Qg2tJnuXKNuUkAG3NRfdq3WEbYFg+TLc6PZoafC+Zq4vVE/gl9P 4fZ06sWcFhqTTyJ7sTWwJdKTB0qo+AwRTa+qDCHy2+gYFgsknDbyUGziLR/D30CR LPBNIYzjwBVKjvxGCiF9PYJhftKp51mr65CYLjBzpOxZSb2iwcJyiEfJ4GyNTdJw I6fd5cm4sXXSJ0T6MUuKnbCfuHETiLL5d8w09XNB7m0mGIXdnNNg9UmW15rMhnCW pwol+5BeHElZKZP80cE4xmJAq1d8ojg= -----END CERTIFICATE-----Generated at Sun Nov 15 18:11:11 2026 by rpki-client