$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa File: b1faf120-6b01-3ca0-986e-d6804e54299b.roa (raw, json) Hash identifier: 4sBUvXsi3dlTqhk1F9OKv7Ogk4537uz4diWxtdft7Ns= Subject key identifier: 1A:6B:80:5C:A3:7E:CD:93:67:20:2C:6B:74:72:8B:FC:53:1A:18:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E448E00583F7B83D8056100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 142.250.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:8e:00:58:3f:7b:83:d8:05:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=39b5df2b-7ad9-4324-89d2-af21eb4b3b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:c4:bd:ac:40:5a:df:f4:14:d0:a4:72:bc: dc:2d:f7:50:14:fa:fa:07:c1:ac:89:0e:60:1e:cb: ad:91:21:58:43:f9:14:fb:84:3c:85:fd:1c:4b:80: b5:40:48:34:ee:f9:c6:5e:00:06:fd:5b:d8:8b:41: a7:53:47:b0:ad:65:67:35:75:d0:22:23:68:17:01: f6:30:b4:de:e5:c8:21:fa:17:bc:0c:67:36:70:ab: 30:01:8b:a0:68:eb:6d:b6:83:de:26:c4:65:dc:7f: bd:58:a8:7e:8c:22:f3:2a:b6:b6:cd:7c:0a:9f:de: 90:e7:c8:39:39:3c:26:3a:15:f2:1d:bd:f2:54:ea: c0:6c:e3:ae:3d:9b:2b:fc:36:71:53:44:60:59:3b: 44:94:b9:ee:a3:f9:35:11:bb:ef:60:dc:ef:80:5e: 94:09:61:5f:11:bf:0a:43:bb:62:94:61:ff:7d:da: 39:df:ed:2c:12:07:50:e5:1a:84:d6:74:2a:da:1d: 74:bc:26:40:5d:85:18:9f:80:d9:57:66:36:48:be: f6:f1:3d:82:a3:92:a4:cb:a2:de:53:10:f7:34:58: c0:f8:75:e0:63:80:2f:f2:12:d2:ab:91:a0:26:e2: 30:72:fd:7e:3a:b9:a9:7d:88:04:7c:88:98:f3:27: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6B:80:5C:A3:7E:CD:93:67:20:2C:6B:74:72:8B:FC:53:1A:18:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9c:4e:e8:73:71:9b:0a:04:1e:b0:55:65:9f:55:a1:9a:9d: fe:29:72:a8:e0:03:e0:11:60:2d:7a:c2:2d:71:24:0b:68:6e: d2:65:c7:9c:fe:ee:54:f0:bc:0e:f2:72:fa:61:bd:f3:f5:e1: 0a:05:35:30:9b:51:a1:23:69:33:4d:79:ae:f7:91:d6:f6:07: 55:61:b9:e5:91:de:99:c0:af:f5:f6:88:b6:31:99:34:22:78: 5a:ed:2e:99:e9:e1:b1:44:5f:4c:f6:56:e3:b9:14:5d:64:73: 04:e9:89:38:61:e4:9a:fa:aa:9b:36:d2:00:12:c8:3c:8c:8b: 99:77:7e:98:5e:c3:41:f7:24:ed:09:82:25:68:25:1a:95:ab: 70:99:9f:c5:c2:32:5c:e5:4c:82:5e:05:63:10:e1:d7:db:e0: d4:77:0a:10:1b:cf:be:6e:32:60:ba:f9:04:45:8b:8f:71:88: c1:79:46:c1:69:31:88:4b:8b:45:d8:0a:eb:d6:ae:b6:9f:69: d9:db:af:ea:d1:8c:d2:98:9f:39:20:24:d8:c5:ec:90:b3:cb: e8:a4:ec:92:c7:2c:02:89:7b:ec:62:6d:18:8b:8f:20:f1:52: bd:36:e3:40:f8:26:24:0e:59:59:b4:b8:b3:f1:89:7f:12:41: 46:7c:7c:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRI4AWD97g9gFYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk MzliNWRmMmItN2FkOS00MzI0LTg5ZDItYWYyMWViNGIzYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hfEvaxAWt/0FNCkcrzcLfdQFPr6B8GsiQ5g HsutkSFYQ/kU+4Q8hf0cS4C1QEg07vnGXgAG/VvYi0GnU0ewrWVnNXXQIiNoFwH2 MLTe5cgh+he8DGc2cKswAYugaOtttoPeJsRl3H+9WKh+jCLzKra2zXwKn96Q58g5 OTwmOhXyHb3yVOrAbOOuPZsr/DZxU0RgWTtElLnuo/k1EbvvYNzvgF6UCWFfEb8K Q7tilGH/fdo53+0sEgdQ5RqE1nQq2h10vCZAXYUYn4DZV2Y2SL728T2Co5Kky6Le UxD3NFjA+HXgY4Av8hLSq5GgJuIwcv1+OrmpfYgEfIiY8ye2wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBprgFyjfs2TZyAsa3Ryi/xTGhjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFmYWYxMjAtNmIwMS0z Y2EwLTk4NmUtZDY4MDRlNTQyOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGcTuhzcZsKBB6wVWWfVaGanf4pcqjgA+ARYC16wi1xJAtobtJlx5z+ 7lTwvA7ycvphvfP14QoFNTCbUaEjaTNNea73kdb2B1VhueWR3pnAr/X2iLYxmTQi eFrtLpnp4bFEX0z2VuO5FF1kcwTpiThh5Jr6qps20gASyDyMi5l3fphew0H3JO0J giVoJRqVq3CZn8XCMlzlTIJeBWMQ4dfb4NR3ChAbz75uMmC6+QRFi49xiMF5RsFp MYhLi0XYCuvWrrafadnbr+rRjNKYnzkgJNjF7JCzy+ik7JLHLAKJe+xibRiLjyDx Ur0240D4JiQOWVm0uLPxiX8SQUZ8fHk= -----END CERTIFICATE-----Generated at Sat Jun 13 13:25:21 2026 by rpki-client