$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa File: 39791293-3e4a-31e7-bd76-093a1ea73ab8.roa (raw, json) Hash identifier: T4uN1w8sc3pV3i43737TVpB11zde2YD2FVLLDT7H2sw= Subject key identifier: 4A:3E:15:7C:0A:F0:FC:06:7D:B5:7C:C5:69:FF:11:87:A5:0A:F2:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A07C8F8996E82A50402340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 142.250.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:7c:8f:89:96:e8:2a:50:40:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b22e6ab9-7869-42bb-8236-23ce6bcb7ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:a1:22:32:1b:4e:5c:77:5b:d3:42:eb:b6: a0:db:d4:30:ae:40:4b:8e:a9:38:74:96:cb:b7:21: 02:c6:6f:b8:46:43:1d:8b:87:45:66:1b:d4:f1:eb: a5:26:03:aa:5f:08:df:ec:fc:5d:bd:af:a5:b8:db: 69:28:ef:8c:61:a2:bd:80:7a:89:99:42:e0:2d:23: 96:f1:0b:33:ef:5d:86:3c:76:0c:76:a8:11:01:cd: fa:0d:44:5d:9f:e3:77:62:1d:9f:f9:47:c8:0c:0f: a2:5f:67:5f:6e:9d:be:af:eb:2c:8e:77:28:eb:b0: fc:fd:8a:70:7d:1a:b3:c5:94:52:3d:8a:30:00:73: a4:be:c0:9a:53:c2:43:c9:e3:7c:9f:b5:3f:dc:6e: 2b:51:98:45:c0:54:62:fb:e4:65:53:ff:76:ba:c0: 06:9f:5f:6f:14:51:ce:4e:cb:d0:78:da:c4:6f:30: 96:65:71:ab:86:51:b1:66:85:5a:b9:da:a9:d5:97: 2a:48:06:2a:fd:40:20:db:21:a1:0f:11:9c:34:69: d2:8e:19:76:ab:0d:e8:73:57:26:9a:f2:59:57:9a: 0d:d0:02:26:7f:bd:2e:f7:5a:c6:9f:00:c9:dc:28: 3d:43:0b:e9:d3:c5:e0:ec:2c:d8:8f:54:8a:82:c9: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3E:15:7C:0A:F0:FC:06:7D:B5:7C:C5:69:FF:11:87:A5:0A:F2:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39791293-3e4a-31e7-bd76-093a1ea73ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:49:e7:0d:2b:59:f3:63:94:fc:91:56:95:56:d9:79:8c:29: fd:a3:94:56:1b:3c:63:5d:13:43:59:1a:b3:74:61:10:1d:4d: 71:cf:9d:f1:fb:67:55:8c:e1:b6:ef:4c:c0:dc:53:55:fc:0d: c6:d8:20:24:15:d2:bd:88:17:cd:95:34:20:aa:3c:49:96:93: df:40:54:a7:9f:04:0a:c2:aa:c3:dc:10:f9:78:c7:db:f7:a1: f6:12:d5:d6:01:92:88:6c:36:7f:86:1f:e6:ca:f0:3f:13:90: 3c:8f:51:99:4d:27:53:85:d7:4e:67:80:22:44:e6:75:39:90: d9:d6:fd:ad:e0:3b:a8:65:6f:71:5a:4e:ce:c0:8d:62:ef:89: 41:0b:c9:2c:b1:07:07:75:03:8e:48:b2:60:b5:0b:5e:da:2d: f5:c6:b9:af:e8:b9:64:63:10:dc:49:51:66:7f:41:d5:bd:4c: f3:63:ea:22:17:f7:3a:e9:c6:bb:31:0c:a9:01:ae:99:1a:79: 31:c2:86:72:16:bc:f5:48:7d:0a:ed:a6:d1:17:5a:cf:0b:40: 34:db:04:8d:08:3b:e5:8a:e2:4a:c2:da:3d:3d:d0:82:a1:59: 86:80:3c:a5:a4:6e:c5:68:06:79:7f:b2:58:b9:c5:90:47:4f: 69:8e:c5:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noHyPiZboKlBAI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjIyZTZhYjktNzg2OS00MmJiLTgyMzYtMjNjZTZiY2I3ZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybKhIjIbTlx3W9NC67ag29QwrkBLjqk4dJbL tyECxm+4RkMdi4dFZhvU8eulJgOqXwjf7Pxdva+luNtpKO+MYaK9gHqJmULgLSOW 8Qsz712GPHYMdqgRAc36DURdn+N3Yh2f+UfIDA+iX2dfbp2+r+ssjnco67D8/Ypw fRqzxZRSPYowAHOkvsCaU8JDyeN8n7U/3G4rUZhFwFRi++RlU/92usAGn19vFFHO TsvQeNrEbzCWZXGrhlGxZoVaudqp1ZcqSAYq/UAg2yGhDxGcNGnSjhl2qw3oc1cm mvJZV5oN0AImf70u91rGnwDJ3Cg9Qwvp08Xg7CzYj1SKgsmsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo+FXwK8PwGfbV8xWn/EYelCvL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzk3OTEyOTMtM2U0YS0z MWU3LWJkNzYtMDkzYTFlYTczYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRJ5w0rWfNjlPyRVpVW2XmMKf2jlFYbPGNdE0NZGrN0YRAdTXHPnfH7 Z1WM4bbvTMDcU1X8DcbYICQV0r2IF82VNCCqPEmWk99AVKefBArCqsPcEPl4x9v3 ofYS1dYBkohsNn+GH+bK8D8TkDyPUZlNJ1OF105ngCJE5nU5kNnW/a3gO6hlb3Fa Ts7AjWLviUELySyxBwd1A45IsmC1C17aLfXGua/ouWRjENxJUWZ/QdW9TPNj6iIX 9zrpxrsxDKkBrpkaeTHChnIWvPVIfQrtptEXWs8LQDTbBI0IO+WK4krC2j090IKh WYaAPKWkbsVoBnl/sli5xZBHT2mOxfI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:10:13 2026 by rpki-client