$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa File: a437d84b-eb8c-3132-8b30-68325fa0f33d.roa (raw, json) Hash identifier: YYpP5mdrJKC7WrfzPmXZbx2+TjL4bHMHbr8HOXrvCCo= Subject key identifier: 67:7A:4D:31:D4:1C:29:CF:D2:56:FF:87:6F:DF:6E:00:71:40:29:59 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E446B77C370560BC425AA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 142.250.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:6b:77:c3:70:56:0b:c4:25:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=50ea48b3-d77b-4080-8954-08a1ac17d1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c0:4d:55:0c:db:97:39:32:b9:b9:6b:2b:77: 30:aa:94:13:c8:a7:45:a1:5c:16:99:dd:e5:80:51: c6:bf:2b:30:8c:9f:db:5e:2f:4a:a3:bb:9d:55:84: 68:7a:a5:93:dc:bd:1e:ae:d5:33:40:f8:97:46:ef: 3c:80:81:90:6b:d5:57:8a:5f:34:64:1e:b2:e9:9c: 74:c1:bc:f8:72:5a:70:0b:ec:05:67:cf:ec:bd:25: 58:34:78:e2:c7:bb:be:8c:61:54:7b:d5:6d:af:61: 39:09:45:cc:b8:f6:bd:ce:6e:28:ea:84:91:ac:99: 78:c0:3e:0f:b5:1e:64:44:4f:79:b5:c1:18:f1:f4: cf:f5:66:47:c1:fe:95:85:b2:84:a5:91:1d:f5:ec: 1a:fc:15:8d:a0:2b:86:97:19:5c:a6:9e:1e:58:41: aa:fb:d3:b6:61:77:11:49:a2:ac:0a:03:5c:7f:09: ce:0e:51:07:a6:d1:43:79:ea:ba:46:88:83:45:de: 21:cb:30:61:9e:3c:d5:d1:d9:b5:df:16:1d:a2:e8: ec:36:0f:1e:31:48:7f:74:65:05:57:b7:c6:12:f3: 1a:75:60:9f:e9:61:44:10:59:2c:51:b2:e9:87:83: fa:d0:38:78:00:6e:1f:ee:55:9e:1d:51:43:c4:38: 5e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7A:4D:31:D4:1C:29:CF:D2:56:FF:87:6F:DF:6E:00:71:40:29:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a437d84b-eb8c-3132-8b30-68325fa0f33d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:18:65:db:de:7b:4b:14:ee:75:3f:f5:5c:3b:93:04:c4:ba: 51:e5:d5:6d:35:54:5a:60:74:1c:74:26:fd:8b:11:c9:ae:88: 61:4b:76:c9:33:ad:b4:53:49:9f:14:15:84:ea:44:d1:5b:6b: 72:d7:d3:09:74:aa:5e:b8:a8:41:bd:b6:10:8a:cd:6b:fa:9c: 25:a9:19:ac:c9:62:a6:d4:be:71:34:ca:45:04:7c:82:5d:6a: a4:7d:40:0c:ff:a4:4a:a3:e8:97:13:8f:59:97:82:60:6d:f9: da:83:1d:d5:43:f4:52:cb:99:b8:a6:89:27:ee:00:e5:74:ea: 89:71:90:03:be:bc:82:d1:46:bc:b7:ae:50:ff:02:6f:26:ae: d8:22:14:4f:13:6a:e2:88:c3:2f:bc:41:4e:eb:10:2d:4e:2d: 4d:b4:27:f0:c1:f0:8c:3b:0f:34:fd:e0:0f:ff:8c:52:6c:8e: c3:84:5c:54:c6:05:50:3f:1d:7f:7d:62:04:16:4c:c7:a4:0a: 3c:c3:12:7a:68:34:75:ad:3b:2d:e6:49:05:e5:1e:d5:0a:18: 03:83:68:e9:0c:bb:0b:5c:55:52:ff:4c:99:95:f1:07:53:71: e0:3b:a8:0e:47:8d:61:9a:e6:6c:19:e5:e1:a6:33:0d:36:79: 08:f5:15:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRGt3w3BWC8QlqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NTBlYTQ4YjMtZDc3Yi00MDgwLTg5NTQtMDhhMWFjMTdkMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sBNVQzblzkyublrK3cwqpQTyKdFoVwWmd3l gFHGvyswjJ/bXi9Ko7udVYRoeqWT3L0ertUzQPiXRu88gIGQa9VXil80ZB6y6Zx0 wbz4clpwC+wFZ8/svSVYNHjix7u+jGFUe9Vtr2E5CUXMuPa9zm4o6oSRrJl4wD4P tR5kRE95tcEY8fTP9WZHwf6VhbKEpZEd9ewa/BWNoCuGlxlcpp4eWEGq+9O2YXcR SaKsCgNcfwnODlEHptFDeeq6RoiDRd4hyzBhnjzV0dm13xYdoujsNg8eMUh/dGUF V7fGEvMadWCf6WFEEFksUbLph4P60Dh4AG4f7lWeHVFDxDhemQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd6TTHUHCnP0lb/h2/fbgBxQClZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQzN2Q4NGItZWI4Yy0z MTMyLThiMzAtNjgzMjVmYTBmMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0YZdvee0sU7nU/9Vw7kwTEulHl1W01VFpgdBx0Jv2LEcmuiGFLdskz rbRTSZ8UFYTqRNFba3LX0wl0ql64qEG9thCKzWv6nCWpGazJYqbUvnE0ykUEfIJd aqR9QAz/pEqj6JcTj1mXgmBt+dqDHdVD9FLLmbimiSfuAOV06olxkAO+vILRRry3 rlD/Am8mrtgiFE8TauKIwy+8QU7rEC1OLU20J/DB8Iw7DzT94A//jFJsjsOEXFTG BVA/HX99YgQWTMekCjzDEnpoNHWtOy3mSQXlHtUKGAODaOkMuwtcVVL/TJmV8QdT ceA7qA5HjWGa5mwZ5eGmMw02eQj1FRo= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:42 2026 by rpki-client