$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa File: c5211ada-1406-3cf0-ace4-7211be6b6547.roa (raw, json) Hash identifier: VhVOue9xH1B/B1W+78G/P+FKCIWFm7REVPGh8vN2Ml8= Subject key identifier: 73:87:5B:5E:AC:04:33:86:A8:22:DE:00:BD:0A:91:28:DC:75:02:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E1E44698A719F1384FD692B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 15169 IP address blocks: 142.250.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:69:8a:71:9f:13:84:fd:69:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=4f2ce19f-b9de-44a9-8eed-e0411d4cdd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:d9:9d:58:27:ab:eb:a0:65:d9:92:b9:9f: 38:37:c9:1a:cf:64:64:a3:2b:d4:a1:6e:db:51:c2: 02:5a:e9:f2:46:65:53:64:50:e0:26:d9:e3:09:e5: 7f:6c:f6:ad:a1:16:d5:65:ea:3b:2a:1f:7f:c2:39: 96:c4:76:a1:f7:a0:06:23:88:33:70:bd:1e:1c:4e: 68:21:44:e1:09:f3:14:cb:40:d4:91:6e:65:5a:95: 15:82:d5:ae:45:7c:47:27:51:ac:e6:64:ed:91:28: bf:4b:76:71:7a:b3:8f:78:e5:c2:9b:70:a3:41:b9: f1:4e:ba:29:a8:14:f4:a7:27:99:c0:a8:41:ac:32: 79:10:da:a5:c7:54:22:d1:77:47:6d:77:38:ff:d2: 83:2e:7f:07:fc:4c:54:ba:86:c5:d7:01:87:da:e4: 87:45:0e:72:dd:94:a3:f8:c6:72:b5:94:27:ec:3f: 70:9b:46:d0:a3:52:e0:0a:9a:e3:fd:5b:85:ac:7e: d5:ed:ff:fd:2b:9e:64:75:29:60:47:22:19:eb:de: 77:3e:bb:d8:44:56:e0:b9:03:d9:7b:a2:db:51:06: a5:9e:65:a7:b2:14:58:7b:e7:92:b2:bb:c0:db:83: 1a:f2:ba:24:54:9a:3c:5c:52:b1:9d:8d:a0:d8:50: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:87:5B:5E:AC:04:33:86:A8:22:DE:00:BD:0A:91:28:DC:75:02:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:93:1f:39:4a:3f:1a:a4:0e:50:6e:a2:8f:66:04:89:e4:5d: ac:a6:ba:d9:a3:4e:8c:8f:9b:3e:95:74:f3:6e:99:22:85:19: 1a:4a:b5:56:ba:ed:71:fa:5d:e7:29:0e:fe:29:48:b7:87:43: 08:9c:7f:38:b1:db:cd:d5:56:aa:e5:54:f2:e7:de:72:2b:cc: eb:23:cd:ca:f7:ad:0a:ab:f8:1d:74:a8:1d:7d:12:eb:d3:ca: aa:14:ca:8a:e7:00:6e:e1:fa:85:f0:6e:9b:1c:12:df:2c:f4: c5:79:48:20:bf:d0:45:33:9a:dd:d0:97:19:8b:ee:cc:61:4f: b7:1c:d7:24:b5:de:0a:d1:ae:05:3e:0c:be:bb:8b:86:40:55: cc:ff:ee:73:89:f5:68:4d:89:c8:61:03:9e:cd:4d:c7:48:44: 0c:6f:6f:17:0d:ea:79:47:ae:a4:51:25:e5:39:4f:8a:e8:b3: 8e:d8:c4:d0:0b:3e:a1:65:7c:62:d3:44:9e:ab:6f:ed:a6:f5: e9:2d:1d:89:e4:92:32:90:7b:6c:b6:11:91:44:e0:d4:0b:6d: 58:06:1b:43:92:b7:e6:18:a6:cb:45:e8:f6:b9:05:df:83:1e: df:e8:56:14:1a:3c:a2:a6:3f:a6:e8:cd:05:80:5f:c9:a0:ed: 44:9a:67:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRGmKcZ8ThP1pK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk NGYyY2UxOWYtYjlkZS00NGE5LThlZWQtZTA0MTFkNGNkZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH3ZnVgnq+ugZdmSuZ84N8kaz2RkoyvUoW7b UcICWunyRmVTZFDgJtnjCeV/bPatoRbVZeo7Kh9/wjmWxHah96AGI4gzcL0eHE5o IUThCfMUy0DUkW5lWpUVgtWuRXxHJ1Gs5mTtkSi/S3ZxerOPeOXCm3CjQbnxTrop qBT0pyeZwKhBrDJ5ENqlx1Qi0XdHbXc4/9KDLn8H/ExUuobF1wGH2uSHRQ5y3ZSj +MZytZQn7D9wm0bQo1LgCprj/VuFrH7V7f/9K55kdSlgRyIZ6953PrvYRFbguQPZ e6LbUQalnmWnshRYe+eSsrvA24Ma8rokVJo8XFKxnY2g2FA06wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOHW16sBDOGqCLeAL0KkSjcdQKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzUyMTFhZGEtMTQwNi0z Y2YwLWFjZTQtNzIxMWJlNmI2NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSTHzlKPxqkDlBuoo9mBInkXaymutmjToyPmz6VdPNumSKFGRpKtVa6 7XH6XecpDv4pSLeHQwicfzix283VVqrlVPLn3nIrzOsjzcr3rQqr+B10qB19EuvT yqoUyornAG7h+oXwbpscEt8s9MV5SCC/0EUzmt3QlxmL7sxhT7cc1yS13grRrgU+ DL67i4ZAVcz/7nOJ9WhNichhA57NTcdIRAxvbxcN6nlHrqRRJeU5T4ros47YxNAL PqFlfGLTRJ6rb+2m9ektHYnkkjKQe2y2EZFE4NQLbVgGG0OSt+YYpstF6Pa5Bd+D Ht/oVhQaPKKmP6bozQWAX8mg7USaZ2Y= -----END CERTIFICATE-----Generated at Sat Jun 13 13:32:34 2026 by rpki-client