$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e856e92-81ef-3bec-854a-7c5e0750555b.roa File: 8e856e92-81ef-3bec-854a-7c5e0750555b.roa (raw, json) Hash identifier: bmS+1FLsZSZ1bcooa6GDtm8jkzZvP4NV4OaSyhAXkvQ= Subject key identifier: 0A:F7:66:8B:C8:4D:81:A6:97:D9:03:B1:A1:A8:6D:86:0A:0C:FB:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E448E967E6AA7F090BD5200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e856e92-81ef-3bec-854a-7c5e0750555b.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 142.250.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:8e:96:7e:6a:a7:f0:90:bd:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=3fa6f412-1f73-40ed-b94b-ddc316275d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:c7:4d:20:9d:c6:1e:72:57:52:06:46:ae: c1:55:34:e6:24:60:1c:77:86:9c:7d:23:f6:77:a8: 1a:c6:b7:9f:42:03:4a:90:90:60:aa:57:8c:a6:ba: a1:31:80:56:bf:bb:3a:45:3e:5b:03:f9:d4:bf:60: c2:c4:9f:90:34:e9:11:dc:b0:1e:4b:24:5a:b6:a6: 0b:94:f1:fe:4e:b1:09:79:f2:dd:61:f0:50:16:73: 40:0b:83:80:02:3c:5a:ec:4c:22:2f:7e:cb:ff:58: df:33:1e:73:4e:d8:10:37:96:af:8b:77:7c:a3:de: 41:b9:9c:15:c7:5c:9e:99:1d:ed:2a:30:c6:de:f1: fe:96:c6:03:27:8c:28:5b:e6:05:3d:07:07:8b:63: d3:62:05:74:f8:9a:23:06:a3:e6:07:e5:15:53:ed: c5:5b:57:2b:62:f2:9c:29:da:8e:4a:39:c8:f2:25: f9:f6:08:3e:95:fb:50:5e:92:da:77:51:60:1c:71: 2c:75:3e:9e:8a:d7:67:29:b2:57:0e:e6:3a:6e:1f: 43:09:c5:c0:b9:e3:dd:fa:a0:2c:36:6c:de:74:64: 18:08:0b:38:e0:fd:79:d1:4f:f9:dd:84:0b:25:24: b1:39:41:9e:02:16:d5:0d:a2:db:be:80:c9:86:af: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:66:8B:C8:4D:81:A6:97:D9:03:B1:A1:A8:6D:86:0A:0C:FB:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e856e92-81ef-3bec-854a-7c5e0750555b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fe:b8:06:59:36:05:91:4e:62:80:73:2f:d7:40:eb:b3:70: 07:a9:7b:bd:48:8a:e8:b4:77:5d:74:47:4f:14:f6:6f:95:e7: 93:78:bd:cc:b8:be:62:6a:90:4b:5c:b4:c9:33:53:8e:06:88: bc:77:e6:27:16:87:64:0f:fa:6c:e9:89:1a:e5:ec:28:3a:93: 3f:9f:f4:34:71:4e:7e:9b:f8:83:33:ec:3f:b8:3e:aa:a0:64: 20:f3:e7:e4:61:8a:a7:ed:5f:94:64:46:56:bc:cb:45:0c:72: 3f:19:0f:47:f0:c9:33:cb:06:8a:93:b4:f2:3e:af:7c:7c:71: 11:bd:b7:72:24:0e:19:e4:7b:42:48:48:4f:e1:76:08:81:14: 49:4a:09:38:25:97:69:f0:56:84:73:2a:a6:44:72:92:17:a9: 8e:f6:2d:8a:1f:02:52:3c:aa:f3:77:ac:41:e1:f9:8d:76:83: 9a:93:81:40:9b:ef:bf:a5:f0:43:03:37:4a:18:d8:da:d5:76: cb:86:0d:cf:a7:d6:cc:9a:5b:9b:3f:8d:db:f8:d9:03:73:e0: 35:a7:8b:18:26:02:e4:86:be:b7:5d:34:63:6d:c8:03:b6:29: 08:e2:10:eb:e8:1b:77:ba:99:f4:49:ce:fd:75:5d:eb:65:3d: c5:4d:76:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRI6Wfmqn8JC9UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk M2ZhNmY0MTItMWY3My00MGVkLWI5NGItZGRjMzE2Mjc1ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPPHTSCdxh5yV1IGRq7BVTTmJGAcd4acfSP2 d6gaxrefQgNKkJBgqleMprqhMYBWv7s6RT5bA/nUv2DCxJ+QNOkR3LAeSyRatqYL lPH+TrEJefLdYfBQFnNAC4OAAjxa7EwiL37L/1jfMx5zTtgQN5avi3d8o95BuZwV x1yemR3tKjDG3vH+lsYDJ4woW+YFPQcHi2PTYgV0+JojBqPmB+UVU+3FW1crYvKc KdqOSjnI8iX59gg+lftQXpLad1FgHHEsdT6eitdnKbJXDuY6bh9DCcXAuePd+qAs NmzedGQYCAs44P150U/53YQLJSSxOUGeAhbVDaLbvoDJhq/RlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr3ZovITYGml9kDsaGobYYKDPvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGU4NTZlOTItODFlZi0z YmVjLTg1NGEtN2M1ZTA3NTA1NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj+uAZZNgWRTmKAcy/XQOuzcAepe71Iiui0d110R08U9m+V55N4vcy4 vmJqkEtctMkzU44GiLx35icWh2QP+mzpiRrl7Cg6kz+f9DRxTn6b+IMz7D+4Pqqg ZCDz5+RhiqftX5RkRla8y0UMcj8ZD0fwyTPLBoqTtPI+r3x8cRG9t3IkDhnke0JI SE/hdgiBFElKCTgll2nwVoRzKqZEcpIXqY72LYofAlI8qvN3rEHh+Y12g5qTgUCb 77+l8EMDN0oY2NrVdsuGDc+n1syaW5s/jdv42QNz4DWnixgmAuSGvrddNGNtyAO2 KQjiEOvoG3e6mfRJzv11XetlPcVNdic= -----END CERTIFICATE-----Generated at Sat Jun 13 13:08:11 2026 by rpki-client