$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa File: 95de198e-9bc7-3f62-8579-2e33c1164c71.roa (raw, json) Hash identifier: 2s9XIpD/zrwenD47kBve4UZQDxwOYbpIZBxhHZxHR6U= Subject key identifier: 73:66:71:C2:31:CE:8B:9D:A2:18:FF:5B:06:01:3E:5D:50:0F:30:BD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E448F588A2D45B13955EFB8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 142.250.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:8f:58:8a:2d:45:b1:39:55:ef:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=d7cc55c3-5f57-41a4-b851-b3979f42ef1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:07:f5:2f:c2:20:98:76:fb:f0:ef:04:d7: f4:8c:ec:89:3f:9f:f6:ed:59:e2:2f:c4:32:6a:dc: d1:47:b6:2b:e7:33:8c:d5:a8:3f:55:47:3d:32:7f: 95:66:a7:df:9a:1b:c8:6f:77:4d:e2:07:68:60:85: e5:06:f4:e5:f2:fa:b4:6b:1d:96:19:14:83:c4:2b: 3e:11:83:ae:a1:53:56:00:ba:d0:73:96:a6:09:e5: ff:9f:c6:07:ff:ae:3d:57:17:8e:22:a7:db:c0:55: 6d:b4:24:5b:b4:e8:4f:19:05:bc:bd:60:77:bc:f2: 5c:21:e5:35:8d:38:ed:b6:2f:f9:5a:1e:16:5d:ba: 92:9f:aa:df:85:48:9e:3d:df:53:f3:5e:98:35:21: e1:68:b7:da:ab:c5:ee:0c:6f:65:d9:19:be:56:a7: a7:fa:c1:f0:f3:52:48:9e:76:4d:c0:15:bf:4b:71: f2:38:b2:da:b6:5d:c0:7b:48:19:98:b1:e9:b3:3e: 7e:14:1d:7a:fd:c1:82:22:4b:05:b8:42:a2:b5:4c: e5:9d:8f:f8:15:9f:24:8d:5a:ac:e9:1d:d3:4f:93: b5:86:a9:8d:93:56:b8:22:15:d8:8a:aa:a7:6e:ba: 93:5c:a7:b2:eb:fd:4e:ee:8c:0e:8e:8f:8b:5c:74: 92:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:66:71:C2:31:CE:8B:9D:A2:18:FF:5B:06:01:3E:5D:50:0F:30:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d9:03:a0:7a:ad:ad:3f:89:ba:96:f9:99:60:1b:fe:3d:4d: 89:3b:3a:3d:13:53:61:9d:0f:0c:81:a5:47:7d:1f:39:2c:51: 11:a0:6c:bb:5c:31:5c:39:48:d9:5d:56:67:2b:a8:8e:c2:f7: 2b:0e:cc:34:70:25:93:90:b1:25:9d:08:d5:fa:06:a5:ae:e9: a3:ae:0d:87:9c:c9:5f:04:23:97:c3:4f:3b:7c:94:65:17:c5: 77:e6:f5:f6:a8:33:06:8d:f3:06:0f:55:3d:90:88:f8:80:25: d1:ac:10:da:3d:6b:f4:79:46:7a:7d:38:5d:68:56:cb:bf:fc: c9:d0:74:39:ea:41:27:d8:47:1d:bc:8a:f5:ea:58:d6:f8:0b: 0f:a7:3d:15:08:2b:f7:57:a5:bc:4c:b2:ce:4b:cd:76:33:7e: f6:c9:98:df:12:cc:8f:c8:93:bd:d8:d6:f7:52:df:46:a9:bb: c9:d8:bf:b4:1e:ee:69:a0:28:db:f0:35:8a:d1:22:37:c5:41: fb:d9:e2:de:e6:39:b0:2a:f2:76:54:95:30:58:13:77:33:c3: 18:48:7d:46:e3:e6:e3:aa:6a:52:46:52:05:4f:f5:d4:ff:1b: b7:52:78:35:ae:e5:bf:bd:0c:fa:b9:77:1e:7d:9f:e0:9c:08: 61:d7:36:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRI9Yii1FsTlV77gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk ZDdjYzU1YzMtNWY1Ny00MWE0LWI4NTEtYjM5NzlmNDJlZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvQH9S/CIJh2+/DvBNf0jOyJP5/27VniL8Qy atzRR7Yr5zOM1ag/VUc9Mn+VZqffmhvIb3dN4gdoYIXlBvTl8vq0ax2WGRSDxCs+ EYOuoVNWALrQc5amCeX/n8YH/649VxeOIqfbwFVttCRbtOhPGQW8vWB3vPJcIeU1 jTjtti/5Wh4WXbqSn6rfhUiePd9T816YNSHhaLfaq8XuDG9l2Rm+Vqen+sHw81JI nnZNwBW/S3HyOLLatl3Ae0gZmLHpsz5+FB16/cGCIksFuEKitUzlnY/4FZ8kjVqs 6R3TT5O1hqmNk1a4IhXYiqqnbrqTXKey6/1O7owOjo+LXHSSkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNmccIxzoudohj/WwYBPl1QDzC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTVkZTE5OGUtOWJjNy0z ZjYyLTg1NzktMmUzM2MxMTY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnZA6B6ra0/ibqW+ZlgG/49TYk7Oj0TU2GdDwyBpUd9HzksURGgbLtc MVw5SNldVmcrqI7C9ysOzDRwJZOQsSWdCNX6BqWu6aOuDYecyV8EI5fDTzt8lGUX xXfm9faoMwaN8wYPVT2QiPiAJdGsENo9a/R5Rnp9OF1oVsu//MnQdDnqQSfYRx28 ivXqWNb4Cw+nPRUIK/dXpbxMss5LzXYzfvbJmN8SzI/Ik73Y1vdS30apu8nYv7Qe 7mmgKNvwNYrRIjfFQfvZ4t7mObAq8nZUlTBYE3czwxhIfUbj5uOqalJGUgVP9dT/ G7dSeDWu5b+9DPq5dx59n+CcCGHXNoI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:47 2026 by rpki-client