$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa File: 95de198e-9bc7-3f62-8579-2e33c1164c71.roa (raw, json) Hash identifier: T6Dq1xHa3s8QxRWD7fRv84KedZ8ZxkzzBx6+2VAN2z8= Subject key identifier: 3C:E6:F0:A5:B7:7B:92:58:63:1D:85:1E:8A:4F:DA:78:90:51:CE:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629308AD84B0A9400F3C1AAC Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:08:ad:84:b0:a9:40:0f:3c:1a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b6353f03-870f-4e26-8267-942ac148599e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:c2:4a:06:0e:e4:cf:48:d6:da:36:f9:5f: b4:27:0e:25:98:cc:99:40:e6:cd:2c:81:1c:db:51: 25:23:9b:8f:68:52:ce:e7:64:85:80:3f:af:32:5d: a2:84:ef:7e:30:43:af:37:9e:7f:00:13:bd:d2:12: a6:c9:61:d7:e9:4d:78:e2:fc:fc:c6:67:6a:82:ef: 63:f0:d4:e6:49:db:8c:9d:f6:2c:6b:73:1d:a1:3c: d2:33:7a:57:5e:5e:c4:c6:3a:a3:bc:8b:ba:83:61: ca:0e:2d:2c:b5:85:6b:09:a4:15:fc:47:e5:c5:8d: 22:d8:5a:b1:d1:24:a4:ab:38:89:a4:9e:00:f2:9e: 47:8c:03:06:67:c1:a3:4a:82:8c:71:2b:54:6d:de: 85:6c:68:5c:0c:c3:38:98:82:06:f3:58:48:9e:c7: 3d:ff:b4:7c:aa:1c:2a:9a:7d:a7:54:a8:62:d8:7f: d0:1b:1b:c8:19:cf:e5:30:ae:16:71:be:1d:eb:94: 4c:f5:61:c4:9b:a8:45:55:cc:3b:84:2e:02:3a:22: d6:c8:74:9b:9d:4b:de:da:cf:8f:3e:a5:f5:7f:e0: 16:1d:53:ef:6e:39:85:56:c8:9f:63:fd:96:5c:16: df:32:a2:49:8c:82:d9:cc:e4:34:a7:91:a9:80:88: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E6:F0:A5:B7:7B:92:58:63:1D:85:1E:8A:4F:DA:78:90:51:CE:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9e:ce:d2:68:c0:34:c2:d3:4a:70:ed:f2:89:ce:47:54:61: 5d:50:49:62:4a:ba:dc:b4:54:cf:0c:8f:f4:e5:cb:1e:c3:37: 13:83:cc:e4:09:1a:6d:e9:09:fa:23:f6:f9:2e:43:be:d9:ce: 2c:a7:1e:53:7d:60:b5:aa:87:6f:19:67:9a:75:c9:6b:2f:9a: 54:01:78:71:f2:ae:41:c9:74:aa:a1:21:97:b4:fe:74:32:41: a5:da:c0:da:97:7c:a8:11:c8:5d:e6:d6:64:83:2c:1d:b2:a0: bc:a6:8e:c3:56:16:b1:85:32:04:0e:9d:95:d7:15:2e:35:68: 52:36:ca:0a:82:53:17:2e:56:c1:61:38:8c:60:c9:17:31:8b: 74:12:95:a4:4a:69:f5:78:3d:ec:6e:d9:40:f9:34:1a:ec:58: f1:9a:32:e3:82:93:ce:29:df:56:62:35:8d:c7:13:6d:7a:7c: 6a:c1:4c:95:78:59:ce:1b:85:36:01:e1:69:36:44:97:64:5f: 30:1e:50:06:bf:5d:99:cd:6e:23:fb:e1:32:b3:89:5d:51:e0: 26:ae:bf:56:ad:eb:8c:ce:94:ed:85:99:4b:66:e0:20:62:7f: 6c:29:48:2b:d6:a1:9d:7c:e3:d7:4c:d6:c4:22:73:6b:32:24: 80:8a:78:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwithLCpQA88GqwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjYzNTNmMDMtODcwZi00ZTI2LTgyNjctOTQyYWMxNDg1OTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsArCSgYO5M9I1to2+V+0Jw4lmMyZQObNLIEc 21ElI5uPaFLO52SFgD+vMl2ihO9+MEOvN55/ABO90hKmyWHX6U144vz8xmdqgu9j 8NTmSduMnfYsa3MdoTzSM3pXXl7ExjqjvIu6g2HKDi0stYVrCaQV/EflxY0i2Fqx 0SSkqziJpJ4A8p5HjAMGZ8GjSoKMcStUbd6FbGhcDMM4mIIG81hInsc9/7R8qhwq mn2nVKhi2H/QGxvIGc/lMK4Wcb4d65RM9WHEm6hFVcw7hC4COiLWyHSbnUve2s+P PqX1f+AWHVPvbjmFVsifY/2WXBbfMqJJjILZzOQ0p5GpgIgT9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzm8KW3e5JYYx2FHopP2niQUc6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTVkZTE5OGUtOWJjNy0z ZjYyLTg1NzktMmUzM2MxMTY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKeztJowDTC00pw7fKJzkdUYV1QSWJKuty0VM8Mj/Tlyx7DNxODzOQJ Gm3pCfoj9vkuQ77ZziynHlN9YLWqh28ZZ5p1yWsvmlQBeHHyrkHJdKqhIZe0/nQy QaXawNqXfKgRyF3m1mSDLB2yoLymjsNWFrGFMgQOnZXXFS41aFI2ygqCUxcuVsFh OIxgyRcxi3QSlaRKafV4Pexu2UD5NBrsWPGaMuOCk84p31ZiNY3HE216fGrBTJV4 Wc4bhTYB4Wk2RJdkXzAeUAa/XZnNbiP74TKziV1R4Cauv1at64zOlO2FmUtm4CBi f2wpSCvWoZ1849dM1sQic2syJICKeK4= -----END CERTIFICATE-----Generated at Thu Nov 5 16:59:07 2026 by rpki-client