$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa File: 8e3f565f-19fb-3655-be31-21a3ad990702.roa (raw, json) Hash identifier: 4k5JQTSyR7vNTgOPLnlmHWWpQNznMalwbghV7ScfY4A= Subject key identifier: 41:A7:D1:41:F6:F2:3B:D2:B4:7F:BD:AB:32:CE:04:D4:2F:46:8A:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C3E18DB332F9A54CF42A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.250.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:3e:18:db:33:2f:9a:54:cf:42:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=4168749c-ffe8-477e-b45d-7f04f80795b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:21:d2:b7:ec:fd:a3:07:06:01:e1:a6:4d:ce: 0d:98:7c:08:97:dc:78:7c:e9:3c:e1:29:00:50:ac: bf:0a:05:27:e2:4f:b5:60:28:e7:0d:24:88:6f:0f: 67:a3:18:59:e9:a8:e9:96:5d:ef:4c:d5:11:25:8f: d6:09:ce:3c:f7:77:4f:c0:9e:99:c0:a9:d8:fb:d0: f9:18:fc:d5:e1:bc:b8:42:01:a0:db:8c:78:cd:9c: 35:43:d5:3a:27:31:a4:9d:a6:25:40:ae:67:27:2b: c8:51:91:7f:5d:30:49:ef:96:f1:c2:cf:08:51:ca: f1:5b:07:8f:9d:90:28:09:91:4b:0e:22:85:b5:48: ef:19:0c:0b:71:6d:c8:34:9f:b7:64:2c:39:80:d8: 5f:5a:d5:4c:e2:ee:19:69:e1:2f:9d:00:5b:6b:56: f1:76:0f:b8:5d:30:e4:ff:4e:2f:b4:82:a2:19:e4: a6:52:36:b8:d7:43:12:eb:1a:8b:1c:03:a8:e1:a5: f1:5b:c4:0c:ab:c2:7d:0b:a6:93:9f:c5:fa:37:d8: 9e:35:d2:32:c4:c5:67:2d:3a:33:04:c8:f8:ed:2b: 96:45:d8:60:f9:7a:96:2c:3f:ee:e8:d3:65:52:bb: 53:2c:df:6e:d7:27:35:e9:ab:7c:7b:eb:06:50:3b: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A7:D1:41:F6:F2:3B:D2:B4:7F:BD:AB:32:CE:04:D4:2F:46:8A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e1:c5:08:5a:5d:c4:cd:59:75:f2:ee:3f:62:19:1e:43:9d: 72:89:04:45:d7:a4:dc:dd:e8:98:97:0d:4c:9c:b4:70:62:8f: 65:4f:7d:fb:14:5f:db:7e:b7:a5:23:a1:81:1d:b4:19:d3:31: 27:6d:26:0c:99:c1:78:55:7e:bf:dc:72:59:2d:8d:a5:b5:56: 92:b2:a4:a4:c4:fb:46:c3:68:d7:d7:24:35:07:28:19:25:b0: 45:e2:76:de:51:61:77:90:a4:c4:98:45:ea:fc:f3:f0:5c:98: 01:2b:3e:4a:c7:75:24:00:f6:82:5b:89:18:84:4b:84:bc:1c: bc:54:3c:fd:89:0e:08:11:58:46:fe:3a:ea:54:11:04:88:72: b8:88:0a:c4:38:0e:4a:e9:f0:b5:b1:45:e9:cf:e9:2f:92:c2: ae:65:b9:4a:0c:15:62:44:8b:bd:aa:67:89:29:03:12:3a:0b: ec:ca:fd:35:79:64:d2:5a:51:c2:26:e0:fe:be:ac:ed:fc:4e: 8a:a3:1d:65:f0:57:43:bb:33:03:50:67:6e:1c:aa:71:43:a2: 1b:3b:0b:7a:64:06:cf:48:4d:a9:9c:68:4e:1c:1d:b6:61:5a: ba:6f:76:5e:38:45:a3:2c:ba:08:89:7e:e2:f9:da:fe:aa:88: a3:aa:5c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnD4Y2zMvmlTPQqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDE2ODc0OWMtZmZlOC00NzdlLWI0NWQtN2YwNGY4MDc5NWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyHSt+z9owcGAeGmTc4NmHwIl9x4fOk84SkA UKy/CgUn4k+1YCjnDSSIbw9noxhZ6ajpll3vTNURJY/WCc4893dPwJ6ZwKnY+9D5 GPzV4by4QgGg24x4zZw1Q9U6JzGknaYlQK5nJyvIUZF/XTBJ75bxws8IUcrxWweP nZAoCZFLDiKFtUjvGQwLcW3INJ+3ZCw5gNhfWtVM4u4ZaeEvnQBba1bxdg+4XTDk /04vtIKiGeSmUja410MS6xqLHAOo4aXxW8QMq8J9C6aTn8X6N9ieNdIyxMVnLToz BMj47SuWRdhg+XqWLD/u6NNlUrtTLN9u1yc16at8e+sGUDs8XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGn0UH28jvStH+9qzLOBNQvRorZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGUzZjU2NWYtMTlmYi0z NjU1LWJlMzEtMjFhM2FkOTkwNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJThxQhaXcTNWXXy7j9iGR5DnXKJBEXXpNzd6JiXDUyctHBij2VPffsU X9t+t6UjoYEdtBnTMSdtJgyZwXhVfr/cclktjaW1VpKypKTE+0bDaNfXJDUHKBkl sEXidt5RYXeQpMSYRer88/BcmAErPkrHdSQA9oJbiRiES4S8HLxUPP2JDggRWEb+ OupUEQSIcriICsQ4Dkrp8LWxRenP6S+Swq5luUoMFWJEi72qZ4kpAxI6C+zK/TV5 ZNJaUcIm4P6+rO38ToqjHWXwV0O7MwNQZ24cqnFDohs7C3pkBs9ITamcaE4cHbZh Wrpvdl44RaMsugiJfuL52v6qiKOqXK8= -----END CERTIFICATE-----Generated at Sat Jun 13 09:21:34 2026 by rpki-client