$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa File: 589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa (raw, json) Hash identifier: sQwfo9Nw/DGyyyIqAEIuakLT2vwB5XrVtk2tLqpa/fk= Subject key identifier: 9A:FB:8B:E5:93:92:CB:35:2F:42:0A:AD:AC:9E:E0:EB:CA:9C:17:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C41D042565643C4D4AB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.250.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:41:d0:42:56:56:43:c4:d4:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=72fa2921-61bb-4d58-bac9-a67eb71fd673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:fd:66:15:b7:36:75:05:d7:0e:21:43:ff: 11:e4:13:6b:3a:ee:9c:8d:f1:f0:5f:af:5d:9e:99: bd:e5:42:f8:00:b1:1c:2a:c6:12:b4:12:b4:74:5e: 96:23:69:34:a6:9f:b4:90:aa:29:26:10:5a:1a:ae: bd:67:17:29:80:1c:b1:77:54:64:5b:58:3e:12:36: 1c:3d:19:f7:66:41:8b:88:8f:fe:7b:61:08:ba:c2: b7:bc:d9:02:56:c7:15:5e:16:c9:5c:3c:a6:32:41: ef:69:1d:c8:18:98:c9:2b:26:51:2d:a8:2a:76:75: 6a:d4:65:96:d2:3f:54:44:d3:c5:c5:74:85:41:94: 80:95:48:4c:b0:82:72:53:1f:bd:2f:35:cd:d4:28: 6d:20:0a:3a:d3:79:46:fd:1d:6b:6e:98:39:8f:98: 8a:1f:4a:82:ef:61:80:35:0e:c5:92:9b:68:61:ca: 12:08:b8:7f:56:b0:e7:a4:5e:df:73:a8:a4:a0:73: 5d:e7:68:c7:ba:c7:76:0b:64:96:12:1f:8c:34:65: 67:a3:9c:c4:e3:34:3a:98:6e:8e:18:df:f1:2f:3d: d1:0b:ea:2c:e2:16:94:6a:bd:a9:43:08:5a:bd:da: bd:6a:da:c9:21:20:32:c1:0e:dd:3b:04:34:86:9f: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FB:8B:E5:93:92:CB:35:2F:42:0A:AD:AC:9E:E0:EB:CA:9C:17:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/589dd97d-dcdb-3dac-99e7-b678a7ea3b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5d:75:12:7a:91:9e:3c:e0:49:cf:85:25:76:d5:47:f8:9d: 4e:ef:a3:3b:0a:0e:ad:06:aa:e0:84:b4:22:45:b1:7b:a4:4d: 75:bb:22:70:9f:5c:48:42:32:cf:19:95:d4:e7:7b:44:32:d4: ce:c9:3f:1b:ba:49:ce:b4:7d:f5:83:29:f9:2c:80:56:5f:9d: 9e:e5:5d:39:95:75:06:40:75:f5:87:81:5a:8c:80:7e:06:07: 57:f4:e7:3c:2d:88:e3:9c:29:2f:27:bb:07:09:82:c2:50:97: 7a:21:d3:dc:a8:23:a9:b4:65:16:6f:37:b6:a8:25:f0:93:82: b3:9d:b2:bf:40:bf:b6:68:0f:8b:84:49:ce:d2:77:a4:97:86: f1:7f:3c:90:a7:3c:3b:3f:95:df:56:03:df:23:6a:16:1c:90: 3f:b1:73:e8:2b:28:86:49:ec:99:65:41:1f:2d:72:17:13:a2: 1d:f3:1b:9f:53:79:09:1c:6d:34:23:aa:85:5d:01:05:3e:fa: b3:dd:fe:0c:a9:f6:4a:49:d4:25:6e:90:80:bb:a5:24:86:c5: 03:3d:0c:a8:29:22:8c:9b:85:b3:bb:b2:43:0f:a5:be:0c:46: a6:93:97:f2:81:56:7c:33:da:93:30:3e:88:67:df:aa:02:1a: ec:85:52:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEHQQlZWQ8TUqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NzJmYTI5MjEtNjFiYi00ZDU4LWJhYzktYTY3ZWI3MWZkNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvL9ZhW3NnUF1w4hQ/8R5BNrOu6cjfHwX69d npm95UL4ALEcKsYStBK0dF6WI2k0pp+0kKopJhBaGq69ZxcpgByxd1RkW1g+EjYc PRn3ZkGLiI/+e2EIusK3vNkCVscVXhbJXDymMkHvaR3IGJjJKyZRLagqdnVq1GWW 0j9URNPFxXSFQZSAlUhMsIJyUx+9LzXN1ChtIAo603lG/R1rbpg5j5iKH0qC72GA NQ7FkptoYcoSCLh/VrDnpF7fc6ikoHNd52jHusd2C2SWEh+MNGVno5zE4zQ6mG6O GN/xLz3RC+os4haUar2pQwhavdq9atrJISAywQ7dOwQ0hp/iNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr7i+WTkss1L0IKraye4OvKnBcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg5ZGQ5N2QtZGNkYi0z ZGFjLTk5ZTctYjY3OGE3ZWEzYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvphMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBddRJ6kZ484EnPhSV21Uf4nU7vozsKDq0GquCEtCJFsXukTXW7InCf XEhCMs8ZldTne0Qy1M7JPxu6Sc60ffWDKfksgFZfnZ7lXTmVdQZAdfWHgVqMgH4G B1f05zwtiOOcKS8nuwcJgsJQl3oh09yoI6m0ZRZvN7aoJfCTgrOdsr9Av7ZoD4uE Sc7Sd6SXhvF/PJCnPDs/ld9WA98jahYckD+xc+grKIZJ7JllQR8tchcToh3zG59T eQkcbTQjqoVdAQU++rPd/gyp9kpJ1CVukIC7pSSGxQM9DKgpIoybhbO7skMPpb4M RqaTl/KBVnwz2pMwPohn36oCGuyFUsQ= -----END CERTIFICATE-----Generated at Sat Jun 13 10:30:01 2026 by rpki-client