$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa File: 4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa (raw, json) Hash identifier: 28rj+QGvFbB4dqP1DWZ4rNSKWhMKi09x6P0IiGp09Dk= Subject key identifier: 95:D4:0E:29:5A:67:7C:51:FC:8A:07:0B:9F:43:4E:E8:79:89:4B:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BD07CA0365BA4D5F8A080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.250.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d0:7c:a0:36:5b:a4:d5:f8:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=4dca3de5-5308-45ee-8a97-179ac7d58413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:b5:39:7a:29:dd:64:80:6f:2f:e0:3b:48: 3e:bf:76:50:d2:cc:e3:ca:c8:c3:b7:44:98:28:fc: 3a:39:76:ee:06:cf:39:b3:18:0d:47:8a:cd:6c:6d: c5:30:76:58:75:c8:48:bd:bc:da:5e:db:c9:29:57: 3f:d5:b2:7a:a7:8b:f3:28:83:73:2c:77:2d:dc:97: 25:95:41:b7:9a:c5:c2:a2:39:70:a4:83:65:83:71: a3:70:1d:72:86:24:43:8b:11:ae:b4:d6:8a:d2:b7: 6e:5d:4b:38:b6:42:82:61:2e:25:d3:4a:ec:30:c9: d1:2f:18:b3:f5:2d:48:51:e4:00:7e:5c:83:4b:cd: c7:b7:a8:e2:a8:f5:f0:0d:0f:28:3d:63:d3:36:88: 06:7a:9d:2e:7b:37:fb:96:98:65:9b:42:e8:a1:41: d1:9a:f2:15:3b:ed:d0:d2:da:34:dc:08:ae:70:e2: 68:1b:6c:eb:31:f1:d4:1d:15:0b:d4:b8:58:5f:c4: 86:74:86:ab:28:d5:2e:4c:58:94:27:fe:00:01:ab: e8:e5:29:a1:bb:70:a9:91:f9:42:0b:9b:88:8f:83: f1:e1:30:34:2f:b6:e8:48:c7:96:85:b7:24:a1:cd: 0b:02:35:e7:b4:ed:06:4a:3c:3f:34:30:c0:38:fb: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D4:0E:29:5A:67:7C:51:FC:8A:07:0B:9F:43:4E:E8:79:89:4B:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ffcb626-59a7-378f-8cd1-fdbdfc49617f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:3e:0c:3c:18:7e:c3:16:95:18:2c:c9:aa:cb:32:d4:81:13: 72:f8:ed:ab:73:f9:17:98:f8:fa:da:ed:db:03:70:12:49:05: 47:48:d4:f3:4e:de:9e:2a:97:ab:3f:5c:19:73:cf:f8:3a:61: 63:8f:3f:93:04:f0:9a:51:a2:1a:49:2a:78:8c:f7:3c:33:4e: f0:5d:15:bf:3b:67:ee:9e:12:90:88:8d:d8:e4:d5:b5:df:dd: 97:0e:03:28:42:4c:e6:d0:ac:71:c4:ed:96:2c:55:00:f5:8d: c8:56:18:af:16:46:60:97:67:23:0b:57:db:47:79:78:13:3b: 0a:22:8c:35:5b:94:b9:b7:3f:95:7e:90:47:f6:e7:24:52:5e: 10:10:16:b0:3b:88:c2:08:d8:85:9b:be:f4:2f:77:0e:23:05: ee:83:c4:3a:79:4d:22:72:4c:a8:45:3c:58:a3:b4:03:f2:e4: f9:4f:66:79:5e:c7:e8:3b:16:61:3e:e1:cf:1f:73:05:94:15: 51:48:e2:bb:c9:f4:5e:61:f0:f7:cf:40:ea:9d:af:d2:ee:48: 03:f5:34:28:eb:49:41:23:aa:52:cb:69:05:44:c9:13:d5:81: 4c:dd:19:56:3e:b9:7f:f1:0e:d2:29:62:54:a9:13:57:63:8d: 7f:d4:e9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm9B8oDZbpNX4oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NGRjYTNkZTUtNTMwOC00NWVlLThhOTctMTc5YWM3ZDU4NDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9+1OXop3WSAby/gO0g+v3ZQ0szjysjDt0SY KPw6OXbuBs85sxgNR4rNbG3FMHZYdchIvbzaXtvJKVc/1bJ6p4vzKINzLHct3Jcl lUG3msXCojlwpINlg3GjcB1yhiRDixGutNaK0rduXUs4tkKCYS4l00rsMMnRLxiz 9S1IUeQAflyDS83Ht6jiqPXwDQ8oPWPTNogGep0uezf7lphlm0LooUHRmvIVO+3Q 0to03AiucOJoG2zrMfHUHRUL1LhYX8SGdIarKNUuTFiUJ/4AAavo5Smhu3CpkflC C5uIj4Px4TA0L7boSMeWhbckoc0LAjXntO0GSjw/NDDAOPuv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXUDilaZ3xR/IoHC59DTuh5iUu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGZmY2I2MjYtNTlhNy0z NzhmLThjZDEtZmRiZGZjNDk2MTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII+DDwYfsMWlRgsyarLMtSBE3L47atz+ReY+Pra7dsDcBJJBUdI1PNO 3p4ql6s/XBlzz/g6YWOPP5ME8JpRohpJKniM9zwzTvBdFb87Z+6eEpCIjdjk1bXf 3ZcOAyhCTObQrHHE7ZYsVQD1jchWGK8WRmCXZyMLV9tHeXgTOwoijDVblLm3P5V+ kEf25yRSXhAQFrA7iMII2IWbvvQvdw4jBe6DxDp5TSJyTKhFPFijtAPy5PlPZnle x+g7FmE+4c8fcwWUFVFI4rvJ9F5h8PfPQOqdr9LuSAP1NCjrSUEjqlLLaQVEyRPV gUzdGVY+uX/xDtIpYlSpE1djjX/U6Wk= -----END CERTIFICATE-----Generated at Sat Jun 13 09:21:59 2026 by rpki-client