$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa File: b1faf120-6b01-3ca0-986e-d6804e54299b.roa (raw, json) Hash identifier: f6taNoNf8UWBpjwrujifJ7GzPYm2cgqyTsAYBVk755o= Subject key identifier: D9:FA:CE:C3:97:CA:DB:34:65:6A:1D:4F:51:0A:DC:1E:E8:FF:72:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6293073E867A98D163CCDCC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:3e:86:7a:98:d1:63:cc:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b0426bed-b344-4b0d-9bf2-79d7179a0f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:37:e6:16:dc:36:d7:ac:99:54:09:d9:2d: 26:df:0b:73:b0:ed:bb:38:06:3e:f2:18:0d:0f:f6: e1:ac:91:de:4b:80:d3:80:58:4f:3d:c0:45:04:a0: 13:3c:c1:d5:f0:3f:06:ce:2e:6b:16:04:ca:03:54: 4d:f1:31:fa:5f:b3:2d:eb:05:07:23:df:a8:4c:04: 88:cd:e6:bb:b5:42:71:7f:10:c6:e9:66:d6:60:96: d0:0b:23:91:28:f0:d8:19:99:d6:57:28:ab:a9:cb: f9:18:f6:1b:2e:61:df:bf:33:01:28:f3:d6:5e:f8: 5f:1d:e4:37:2d:a1:40:ae:8e:27:0e:21:7d:05:a9: 94:ca:3f:d4:d5:f2:2d:52:2b:df:68:05:61:8d:1d: a2:c5:b9:7c:12:b1:17:64:f3:9c:52:3d:32:d1:83: 47:e4:fa:95:3c:34:30:1d:b7:e7:ab:85:5c:95:15: 31:3f:c5:8d:f3:70:26:89:e6:b9:48:6e:9d:b1:39: b9:58:9b:02:be:d0:00:89:a4:84:eb:a6:01:f6:5f: 87:59:37:b5:ae:69:ff:d8:fb:3e:76:d5:6b:92:17: 6f:40:e7:6e:44:5c:48:30:ba:6d:ac:e6:fa:b3:3e: 08:a1:e9:4f:f4:b9:78:82:7d:b3:d9:64:59:93:67: eb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FA:CE:C3:97:CA:DB:34:65:6A:1D:4F:51:0A:DC:1E:E8:FF:72:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6c:fe:c4:b4:44:25:24:5f:90:ed:51:94:58:0b:d9:2a:2c: 26:c6:6a:26:de:d2:f4:71:3e:e7:a1:5b:a9:9a:46:72:3c:06: 0f:8b:31:7c:54:48:b5:0c:96:73:d8:ee:2c:5e:2f:f9:bf:b0: 59:bf:a4:ca:fa:39:1c:08:52:f4:b5:d8:9a:2d:6a:4b:4d:08: 02:8c:62:22:00:bf:d5:ee:3e:a6:b5:2a:92:c5:22:d2:db:8e: c9:74:96:95:1e:10:28:1d:47:bf:96:20:50:ef:65:bf:a6:ca: 71:9f:05:97:8e:4d:96:ae:49:ac:dd:57:cf:53:30:8e:76:41: 30:9f:8e:df:c1:1a:f3:8b:f7:db:da:c7:f7:c1:97:41:a2:76: 5f:78:3f:93:7a:2b:47:03:6e:8b:7d:82:75:c5:ee:6f:34:73: db:a7:e9:2a:4e:aa:63:08:ea:a7:56:56:b3:b7:bd:a7:e8:23: f7:f4:49:6a:db:c8:d1:0d:6b:c8:b6:52:22:45:a4:1f:5c:da: d5:de:5c:d0:82:d4:b9:69:a5:42:5d:8a:bb:6b:d5:a1:4c:1f: 31:72:1d:a6:b3:9a:52:e8:67:74:89:f6:a1:4b:f4:2b:88:7a: a6:37:00:80:ff:85:7e:72:77:a0:15:84:e9:cc:6c:3a:f0:09: 1d:a1:ba:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwc+hnqY0WPM3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjA0MjZiZWQtYjM0NC00YjBkLTliZjItNzlkNzE3OWEwZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu035hbcNtesmVQJ2S0m3wtzsO27OAY+8hgN D/bhrJHeS4DTgFhPPcBFBKATPMHV8D8Gzi5rFgTKA1RN8TH6X7Mt6wUHI9+oTASI zea7tUJxfxDG6WbWYJbQCyORKPDYGZnWVyirqcv5GPYbLmHfvzMBKPPWXvhfHeQ3 LaFAro4nDiF9BamUyj/U1fItUivfaAVhjR2ixbl8ErEXZPOcUj0y0YNH5PqVPDQw Hbfnq4VclRUxP8WN83Amiea5SG6dsTm5WJsCvtAAiaSE66YB9l+HWTe1rmn/2Ps+ dtVrkhdvQOduRFxIMLptrOb6sz4IoelP9Ll4gn2z2WRZk2frxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn6zsOXyts0ZWodT1EK3B7o/3IxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFmYWYxMjAtNmIwMS0z Y2EwLTk4NmUtZDY4MDRlNTQyOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGls/sS0RCUkX5DtUZRYC9kqLCbGaibe0vRxPuehW6maRnI8Bg+LMXxU SLUMlnPY7ixeL/m/sFm/pMr6ORwIUvS12JotaktNCAKMYiIAv9XuPqa1KpLFItLb jsl0lpUeECgdR7+WIFDvZb+mynGfBZeOTZauSazdV89TMI52QTCfjt/BGvOL99va x/fBl0Gidl94P5N6K0cDbot9gnXF7m80c9un6SpOqmMI6qdWVrO3vafoI/f0SWrb yNENa8i2UiJFpB9c2tXeXNCC1LlppUJdirtr1aFMHzFyHaazmlLoZ3SJ9qFL9CuI eqY3AID/hX5yd6AVhOnMbDrwCR2huiI= -----END CERTIFICATE-----Generated at Thu Nov 5 18:54:25 2026 by rpki-client