$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa File: 407f53f0-2a9c-3136-9379-57a68568a38a.roa (raw, json) Hash identifier: fVbDfRTwKzUQLtXF1ZYya/ouDaERQ+joVxRYpvwgp3g= Subject key identifier: 6B:9C:6C:3E:EF:E6:11:E4:C5:7F:03:A7:8F:3E:49:E2:EC:74:56:6A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C392F2F53C25F7E7D1640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.250.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:39:2f:2f:53:c2:5f:7e:7d:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=41908383-df41-4cf1-8ab0-101d3d8293e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:44:20:15:42:74:0b:13:a2:20:04:6c:29: d4:58:d0:93:e5:e6:bb:b0:46:18:d2:f1:0d:d1:31: 1b:1d:28:c5:e3:db:c2:8f:af:ea:c9:87:11:84:8c: be:03:d4:9b:49:9d:8c:1e:a1:81:b0:6a:08:a1:59: 80:ec:10:12:ef:af:29:a3:f7:d7:cd:64:f8:d7:91: d1:6f:cc:7c:36:ff:f8:e1:51:08:84:00:97:38:91: 1d:bd:fa:eb:03:15:95:a4:28:a6:62:30:92:38:c2: 76:10:6c:e6:b6:cf:1c:d1:b8:09:58:ce:fc:68:84: 19:f4:77:19:a4:83:b6:5f:73:fa:5e:0f:d7:cb:d1: 4f:8e:8e:fa:4e:11:07:a7:fd:00:36:b3:c8:02:c8: 12:28:d8:86:cf:1b:fc:31:5b:0d:51:ca:20:44:61: cd:4b:3d:27:4b:90:0b:cc:83:42:6d:63:9b:a7:6f: 24:9c:c8:78:36:1a:dc:fe:04:a7:4a:90:73:64:72: 89:dd:6a:04:da:64:25:e2:54:6b:c9:55:9d:c1:10: fb:34:34:e2:f2:b5:2c:87:90:bf:d4:6d:20:fa:91: 99:f9:4d:fd:50:4e:0a:a1:93:bb:7b:bf:c3:12:80: 8b:85:5f:95:66:bd:fa:fa:90:c6:54:f0:a6:a5:55: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9C:6C:3E:EF:E6:11:E4:C5:7F:03:A7:8F:3E:49:E2:EC:74:56:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/407f53f0-2a9c-3136-9379-57a68568a38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4f:9f:78:50:98:ec:9e:8e:52:1b:24:3b:b4:de:b7:28:79: 03:a0:4a:1d:d9:8e:7c:36:c0:1d:77:b5:a3:ca:5d:6f:28:af: e4:d1:90:12:17:e3:8b:aa:e4:27:e4:e9:90:a8:a9:e1:ba:c8: cb:74:29:0c:b1:56:52:de:21:4a:83:bc:18:e6:5e:70:f5:93: f5:8e:ee:17:d5:bf:0a:9d:1f:48:e9:6b:a4:85:a9:20:09:f2: ba:89:b5:18:69:7e:90:d7:00:0b:35:59:d6:04:98:93:1c:84: e8:6e:95:23:f3:27:a2:4f:d9:51:5d:3a:e8:f3:54:85:11:05: bc:ec:01:b3:75:04:be:eb:f7:c8:d7:21:49:ad:b4:71:03:e3: 42:6f:26:02:b0:04:e9:7d:45:3f:ee:6b:2b:57:24:ec:8f:51: 16:ef:32:ef:c6:a3:58:da:65:f3:7d:b9:db:76:c6:b2:9f:fa: 50:b7:cf:e1:96:a4:c5:01:ec:bd:a0:77:3f:57:55:63:68:28: c5:e1:5d:8d:34:15:b4:88:88:10:3c:4f:9c:bc:1f:4a:d4:ef: 29:34:79:f1:94:5d:c1:43:2d:d7:f7:ed:50:af:06:11:0d:22: 72:a1:0f:1b:7f:58:2d:5b:95:4a:f0:cd:05:dd:e6:1a:c3:8c: c9:b5:46:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnDkvL1PCX359FkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDE5MDgzODMtZGY0MS00Y2YxLThhYjAtMTAxZDNkODI5M2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu79EIBVCdAsToiAEbCnUWNCT5ea7sEYY0vEN 0TEbHSjF49vCj6/qyYcRhIy+A9SbSZ2MHqGBsGoIoVmA7BAS768po/fXzWT415HR b8x8Nv/44VEIhACXOJEdvfrrAxWVpCimYjCSOMJ2EGzmts8c0bgJWM78aIQZ9HcZ pIO2X3P6Xg/Xy9FPjo76ThEHp/0ANrPIAsgSKNiGzxv8MVsNUcogRGHNSz0nS5AL zINCbWObp28knMh4Nhrc/gSnSpBzZHKJ3WoE2mQl4lRryVWdwRD7NDTi8rUsh5C/ 1G0g+pGZ+U39UE4KoZO7e7/DEoCLhV+VZr36+pDGVPCmpVWDswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGucbD7v5hHkxX8Dp48+SeLsdFZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDA3ZjUzZjAtMmE5Yy0z MTM2LTkzNzktNTdhNjg1NjhhMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5Pn3hQmOyejlIbJDu03rcoeQOgSh3Zjnw2wB13taPKXW8or+TRkBIX 44uq5Cfk6ZCoqeG6yMt0KQyxVlLeIUqDvBjmXnD1k/WO7hfVvwqdH0jpa6SFqSAJ 8rqJtRhpfpDXAAs1WdYEmJMchOhulSPzJ6JP2VFdOujzVIURBbzsAbN1BL7r98jX IUmttHED40JvJgKwBOl9RT/uaytXJOyPURbvMu/Go1jaZfN9udt2xrKf+lC3z+GW pMUB7L2gdz9XVWNoKMXhXY00FbSIiBA8T5y8H0rU7yk0efGUXcFDLdf37VCvBhEN InKhDxt/WC1blUrwzQXd5hrDjMm1Rng= -----END CERTIFICATE-----Generated at Sat Jun 13 14:58:29 2026 by rpki-client