$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b683899f-3ece-31d6-b4b9-d5498bed4222.roa File: b683899f-3ece-31d6-b4b9-d5498bed4222.roa (raw, json) Hash identifier: J3M/ZkfSJ7MACfAH99LHuZ0N77EoW4zoIWZXr7AVG14= Subject key identifier: BA:79:EC:41:81:33:DB:2D:13:14:6E:4F:E5:23:97:4A:03:47:78:FF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E0A700BC15A6050B8385F3F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b683899f-3ece-31d6-b4b9-d5498bed4222.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 15169 IP address blocks: 142.250.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:0b:c1:5a:60:50:b8:38:5f:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=ae81fd8a-5b60-494e-9401-cd0d27bb40a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:43:36:59:50:ec:f5:7d:06:9f:ac:9b:d2: 30:f2:7d:27:71:00:85:cb:1b:4a:5a:09:37:d5:11: f2:03:0c:63:15:e7:d3:f1:0c:e7:47:5e:8d:87:85: 36:0f:e4:ae:04:ae:c6:3a:09:7a:6a:f7:5a:ad:78: 28:05:18:af:66:39:3d:c7:b4:83:f2:52:ba:c3:7c: bd:95:ce:7e:52:56:ad:04:76:e9:aa:98:4e:b9:ac: 8a:db:55:67:67:84:ea:f7:9a:d8:94:32:f9:e0:12: 28:03:25:20:80:98:01:4a:1c:32:67:5b:85:e1:a6: 91:03:d6:8e:a0:5b:2c:5f:b5:da:99:62:b9:38:76: 38:92:5f:7b:95:4d:0f:3c:ba:67:ee:95:e2:c7:19: c0:3d:d4:d5:4b:19:ea:07:5b:28:ab:52:17:24:b9: 3d:dc:f1:b2:77:f4:4b:2e:73:1a:95:b3:ba:53:fb: 27:59:86:1b:fe:1c:4c:43:6e:08:9a:5b:1f:64:cd: 5f:37:01:b9:70:18:65:a8:07:35:2f:78:e6:27:ae: a2:04:7c:34:07:2e:f6:52:18:d9:25:92:82:7d:af: 69:7a:9c:cf:9c:15:59:41:5b:c0:23:cd:23:4c:97: e6:b4:a9:aa:46:43:93:21:05:76:f0:8a:56:64:bd: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:79:EC:41:81:33:DB:2D:13:14:6E:4F:E5:23:97:4A:03:47:78:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b683899f-3ece-31d6-b4b9-d5498bed4222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:58:71:4a:d9:ae:d3:fa:76:e1:f2:38:19:07:93:66:25:07: f7:5c:5b:90:d1:3f:17:dd:f5:6a:2c:07:74:8a:87:24:73:5e: 34:fb:e2:a4:be:0d:df:0c:b9:9c:72:e2:61:af:ce:22:52:9b: 91:94:3e:f6:dd:82:90:a9:2f:d6:d9:3d:6d:6b:7e:35:5f:44: 0a:19:9d:65:f6:05:95:cf:18:dd:0f:1c:b6:97:1d:34:86:81: 7e:2e:01:71:bf:f0:3c:0a:b0:15:5d:d0:d5:b6:5c:26:c6:2b: 70:fd:83:9d:3e:be:e7:48:12:2c:a5:85:69:16:40:d8:7e:fe: be:5f:2b:51:fb:7f:62:a0:b5:21:16:36:28:17:0a:ad:bb:fe: 1b:c9:aa:8b:5c:8f:72:dc:ae:36:65:0c:40:bf:ba:33:89:48: 32:33:bf:b9:d3:9b:42:fd:d1:42:4e:0a:03:12:d9:30:8a:18: 65:05:17:7f:d3:3b:8e:8c:a2:38:d1:89:7d:fd:ce:fe:28:38: 46:c0:86:08:0b:19:18:e5:eb:63:dd:9f:f9:f8:8a:42:41:a4: b4:a8:36:77:a2:8a:d5:e0:8b:18:fa:31:d6:d3:f6:3a:47:f3: d3:6d:c9:76:a1:63:f2:08:e4:df:1b:8f:85:7f:e8:b1:35:62: fa:67:08:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAvBWmBQuDhfP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk YWU4MWZkOGEtNWI2MC00OTRlLTk0MDEtY2QwZDI3YmI0MGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnxDNllQ7PV9Bp+sm9Iw8n0ncQCFyxtKWgk3 1RHyAwxjFefT8QznR16Nh4U2D+SuBK7GOgl6avdarXgoBRivZjk9x7SD8lK6w3y9 lc5+UlatBHbpqphOuayK21VnZ4Tq95rYlDL54BIoAyUggJgBShwyZ1uF4aaRA9aO oFssX7XamWK5OHY4kl97lU0PPLpn7pXixxnAPdTVSxnqB1soq1IXJLk93PGyd/RL LnMalbO6U/snWYYb/hxMQ24ImlsfZM1fNwG5cBhlqAc1L3jmJ66iBHw0By72UhjZ JZKCfa9pepzPnBVZQVvAI80jTJfmtKmqRkOTIQV28IpWZL2soQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp57EGBM9stExRuT+Ujl0oDR3j/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjY4Mzg5OWYtM2VjZS0z MWQ2LWI0YjktZDU0OThiZWQ0MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNYcUrZrtP6duHyOBkHk2YlB/dcW5DRPxfd9WosB3SKhyRzXjT74qS+ Dd8MuZxy4mGvziJSm5GUPvbdgpCpL9bZPW1rfjVfRAoZnWX2BZXPGN0PHLaXHTSG gX4uAXG/8DwKsBVd0NW2XCbGK3D9g50+vudIEiylhWkWQNh+/r5fK1H7f2KgtSEW NigXCq27/hvJqotcj3LcrjZlDEC/ujOJSDIzv7nTm0L90UJOCgMS2TCKGGUFF3/T O46MojjRiX39zv4oOEbAhggLGRjl62Pdn/n4ikJBpLSoNneiitXgixj6MdbT9jpH 89NtyXahY/II5N8bj4V/6LE1YvpnCN8= -----END CERTIFICATE-----Generated at Sat Jun 13 13:12:58 2026 by rpki-client