$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa File: 98e2edf8-c542-3049-b50c-6a39dee13a72.roa (raw, json) Hash identifier: wnRSCe+L8jhD1CvI1nmObgJtUnttcarQSera3Z0i5Qw= Subject key identifier: 2D:7D:00:22:19:04:63:3A:A3:77:EC:D9:90:1C:20:78:4F:89:BF:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E448D19618EDAB156953140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 142.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:8d:19:61:8e:da:b1:56:95:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=a3fac66a-e75e-4dc7-8acd-36bcc47d7963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:91:26:b0:c1:7c:89:56:e8:ba:d9:6f:e1: 5d:80:13:53:5e:e0:43:95:71:a8:5d:2c:b4:c8:f0: 4a:74:07:7d:da:06:68:3d:b9:d0:70:6c:dd:33:ef: 11:3e:85:25:28:29:c1:6d:01:6e:dd:6f:ed:66:90: a4:af:9c:b0:48:d4:e3:ac:a6:53:74:43:f9:92:88: 23:8d:92:57:78:2d:7b:7c:bf:38:b5:b8:d5:66:96: fe:bf:da:5e:eb:39:52:02:e0:45:eb:53:f9:e6:c8: d7:a6:f8:71:4d:f2:96:4f:a5:bc:96:56:81:30:14: 34:4a:b2:6e:5e:b0:9b:ac:aa:d0:9e:91:5d:99:51: 27:d3:f4:d2:44:8c:ac:63:ea:d1:16:e5:52:f2:84: 44:66:3a:24:aa:ef:e2:2e:69:6f:49:c6:21:4c:c7: 3a:12:78:b0:f9:e7:30:6c:72:15:7c:e7:bb:b1:ca: 0b:96:e0:3f:e4:37:04:a5:7c:d7:e1:03:6a:24:94: d3:1a:92:a8:db:0d:4d:a6:86:88:01:b4:f3:53:5a: 61:cf:91:a5:f5:ff:d3:80:b6:d4:b2:0c:40:b2:6d: db:03:01:06:f6:5c:7b:cb:83:88:fc:c2:a0:cd:6b: 78:0a:04:ca:10:5d:fc:f4:cb:2b:d5:f2:49:a3:45: e2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7D:00:22:19:04:63:3A:A3:77:EC:D9:90:1C:20:78:4F:89:BF:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:32:94:cd:fe:75:f7:03:97:b2:af:8f:7f:50:d4:b4:ed:1d: be:b8:70:de:cb:c3:d0:dc:fd:d0:5d:a3:32:8e:c2:aa:94:30: cc:e1:5f:99:22:fc:50:84:9e:4b:08:b2:ed:ec:c0:c2:e5:4f: 8a:aa:e6:8f:b1:84:a4:b5:6c:e1:69:09:ec:e8:2d:fd:53:e1: 4d:b6:04:e8:96:2e:2c:84:c8:d8:01:d9:02:34:14:62:69:86: 09:0e:02:cc:1d:a6:a5:cb:9e:a6:39:b2:a5:2a:a0:93:b7:2a: 8e:74:6d:fa:29:03:64:cf:4b:8a:5b:89:c1:8e:68:6e:d7:07: d5:11:02:e0:7e:59:f4:81:fc:19:72:4a:79:47:9b:70:f0:1e: 47:5a:d9:24:48:49:16:18:3c:a8:84:61:b2:19:d1:8b:64:01: bb:b6:08:78:f4:9c:f2:59:49:1a:35:dd:dd:c4:fc:d7:ba:4c: 2d:3e:0f:43:fc:c9:7d:83:49:88:ec:21:46:81:0d:4e:cb:d1: f1:c3:2b:78:ff:5c:ec:a0:7a:86:3b:8e:bc:4b:81:f7:b4:f2: 54:ca:4c:75:79:ba:e5:46:11:be:2b:be:30:70:a7:8e:c5:3c: 92:f1:08:f6:d1:a2:6b:c9:23:08:2c:b9:43:c8:c7:f7:de:fa: 4e:ea:49:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRI0ZYY7asVaVMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YTNmYWM2NmEtZTc1ZS00ZGM3LThhY2QtMzZiY2M0N2Q3OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMSRJrDBfIlW6LrZb+FdgBNTXuBDlXGoXSy0 yPBKdAd92gZoPbnQcGzdM+8RPoUlKCnBbQFu3W/tZpCkr5ywSNTjrKZTdEP5kogj jZJXeC17fL84tbjVZpb+v9pe6zlSAuBF61P55sjXpvhxTfKWT6W8llaBMBQ0SrJu XrCbrKrQnpFdmVEn0/TSRIysY+rRFuVS8oREZjokqu/iLmlvScYhTMc6Eniw+ecw bHIVfOe7scoLluA/5DcEpXzX4QNqJJTTGpKo2w1NpoaIAbTzU1phz5Gl9f/TgLbU sgxAsm3bAwEG9lx7y4OI/MKgzWt4CgTKEF389Msr1fJJo0XiTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC19ACIZBGM6o3fs2ZAcIHhPib8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOThlMmVkZjgtYzU0Mi0z MDQ5LWI1MGMtNmEzOWRlZTEzYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAylM3+dfcDl7Kvj39Q1LTtHb64cN7Lw9Dc/dBdozKOwqqUMMzhX5ki /FCEnksIsu3swMLlT4qq5o+xhKS1bOFpCezoLf1T4U22BOiWLiyEyNgB2QI0FGJp hgkOAswdpqXLnqY5sqUqoJO3Ko50bfopA2TPS4pbicGOaG7XB9URAuB+WfSB/Bly SnlHm3DwHkda2SRISRYYPKiEYbIZ0YtkAbu2CHj0nPJZSRo13d3E/Ne6TC0+D0P8 yX2DSYjsIUaBDU7L0fHDK3j/XOygeoY7jrxLgfe08lTKTHV5uuVGEb4rvjBwp47F PJLxCPbRomvJIwgsuUPIx/fe+k7qSec= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:38 2026 by rpki-client