$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/687f2922-1683-35d2-b282-095673dabb54.roa File: 687f2922-1683-35d2-b282-095673dabb54.roa (raw, json) Hash identifier: tFLSqbJm+cBdhd+NLDerqY6A77/blwCOyTU5n3flKXc= Subject key identifier: 40:10:0E:AE:FE:69:6E:6E:FF:1A:67:50:BA:B2:74:40:91:24:80:11 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A06C145CF498FE57962EC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/687f2922-1683-35d2-b282-095673dabb54.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 142.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:6c:14:5c:f4:98:fe:57:96:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=189aee2d-4455-4456-8f1f-ec00dce019a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:77:d8:1a:f6:c0:72:22:29:74:31:43:9f:0c: ce:79:3c:96:d9:75:ab:f7:62:a4:ea:49:72:b9:e9: 9f:fb:5f:c7:a5:76:69:fc:40:2f:38:2c:2a:74:2b: 98:35:a7:4e:cb:40:e4:05:3a:8c:64:f7:70:b4:f7: 07:5b:fc:81:9f:05:53:a0:c2:b4:0d:a0:b7:2a:e1: e0:0d:16:45:8f:15:14:9b:cb:ab:fa:89:b5:cb:28: 48:4f:46:8a:dd:29:61:45:69:48:d1:f4:3c:45:08: e9:57:0f:42:9c:80:1e:1c:ab:4f:9f:46:be:fa:0d: c9:89:95:d6:80:bb:d6:43:ba:08:3b:68:33:06:bb: 56:fb:50:fe:6b:b2:c2:08:6f:7e:e8:44:94:62:c0: 65:7b:b3:0e:49:40:61:72:cc:ae:5b:d1:3f:14:07: 70:3b:57:9d:45:9d:5a:b5:38:03:17:05:97:0b:2a: 11:8f:77:e8:f4:32:78:df:2e:f5:a6:6c:94:e2:78: 4f:b8:06:71:a9:c3:62:f9:e4:5a:7c:40:c2:52:89: 95:a8:2a:a2:18:ab:0c:ee:a8:a3:25:c9:22:16:35: 8f:7c:ab:6f:d4:1f:cb:33:b0:85:31:8a:05:37:de: 2c:4e:77:b0:44:13:14:48:0d:c4:9c:13:5d:21:69: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:10:0E:AE:FE:69:6E:6E:FF:1A:67:50:BA:B2:74:40:91:24:80:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/687f2922-1683-35d2-b282-095673dabb54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a6:0b:2b:5a:23:89:0b:4e:9f:e0:69:11:c4:dc:cc:3e:cf: b3:76:8f:3d:6b:11:c9:b0:4a:72:d1:ee:23:5b:8a:5f:07:82: b2:47:02:75:c5:ce:fe:60:ff:10:83:db:04:d0:d1:37:6c:ca: 7b:e2:33:d5:1d:3b:83:08:46:50:b7:36:5d:e9:1f:ea:de:38: 92:76:61:27:bc:f6:a5:26:d6:5a:fd:f5:80:75:84:cb:8b:7b: 5a:4c:f5:fc:4e:60:7a:cf:26:27:5f:53:f5:ef:d1:7d:b5:77: 55:a4:34:f2:1b:c1:37:6b:12:84:2b:82:ff:36:44:5e:f2:05: 42:69:48:06:6a:4f:cc:30:68:e4:e4:e5:2d:bc:b7:67:24:4b: ce:76:18:e9:66:fe:da:08:23:03:01:94:14:56:96:3f:f4:92: 87:4d:c8:30:7a:33:54:6a:28:3c:d6:7c:96:67:d3:5a:43:e6: cd:9c:87:2f:cb:b8:c1:6e:4d:07:e6:80:1e:18:9b:81:37:03: 18:d9:34:90:d6:04:18:01:ef:25:f4:ac:78:ac:40:55:47:d3: 1e:fa:3b:a4:3e:4a:77:ef:98:23:24:ba:45:34:7d:a1:f8:1f: 21:06:7b:fe:88:dc:64:0a:0d:f7:36:25:af:19:c0:79:58:fa: 0d:87:ac:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noGwUXPSY/leWLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTg5YWVlMmQtNDQ1NS00NDU2LThmMWYtZWMwMGRjZTAxOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXfYGvbAciIpdDFDnwzOeTyW2XWr92Kk6kly uemf+1/HpXZp/EAvOCwqdCuYNadOy0DkBTqMZPdwtPcHW/yBnwVToMK0DaC3KuHg DRZFjxUUm8ur+om1yyhIT0aK3SlhRWlI0fQ8RQjpVw9CnIAeHKtPn0a++g3JiZXW gLvWQ7oIO2gzBrtW+1D+a7LCCG9+6ESUYsBle7MOSUBhcsyuW9E/FAdwO1edRZ1a tTgDFwWXCyoRj3fo9DJ43y71pmyU4nhPuAZxqcNi+eRafEDCUomVqCqiGKsM7qij JckiFjWPfKtv1B/LM7CFMYoFN94sTnewRBMUSA3EnBNdIWkanwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAQDq7+aW5u/xpnULqydECRJIARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjg3ZjI5MjItMTY4My0z NWQyLWIyODItMDk1NjczZGFiYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmmCytaI4kLTp/gaRHE3Mw+z7N2jz1rEcmwSnLR7iNbil8HgrJHAnXF zv5g/xCD2wTQ0TdsynviM9UdO4MIRlC3Nl3pH+reOJJ2YSe89qUm1lr99YB1hMuL e1pM9fxOYHrPJidfU/Xv0X21d1WkNPIbwTdrEoQrgv82RF7yBUJpSAZqT8wwaOTk 5S28t2ckS852GOlm/toIIwMBlBRWlj/0kodNyDB6M1RqKDzWfJZn01pD5s2chy/L uMFuTQfmgB4Ym4E3AxjZNJDWBBgB7yX0rHisQFVH0x76O6Q+SnfvmCMkukU0faH4 HyEGe/6I3GQKDfc2Ja8ZwHlY+g2HrLc= -----END CERTIFICATE-----Generated at Wed Jul 29 06:06:42 2026 by rpki-client