$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa File: ccdc89e1-94e2-3966-988e-15606f6e1e06.roa (raw, json) Hash identifier: YqrVszqiiVDvl81PzNVT7PtXqEyBQc9GEHOZQ7nYitg= Subject key identifier: BA:23:C5:98:16:09:6E:2C:37:8F:73:00:2B:0A:28:DA:62:29:E8:34 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C4CE967B38958F612D900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.250.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:4c:e9:67:b3:89:58:f6:12:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=8c99b696-c13b-46c1-9900-9a762221853d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:29:cf:6f:7f:61:e3:ff:69:eb:d5:48:a2:65: 99:4b:36:f0:46:b7:f8:73:3f:df:32:7d:f2:bc:32: ce:1e:52:75:2f:f7:0f:57:48:40:af:02:34:73:6d: 80:3f:f5:53:60:84:a0:97:aa:e4:1f:72:06:bd:ce: f7:4f:ad:19:59:41:b7:e1:92:7e:e3:77:12:7e:60: c3:27:b8:d7:46:b5:35:a7:d3:58:71:1a:42:d2:48: 3b:9b:a0:89:0b:cf:8c:09:a4:e3:64:49:09:4a:df: f7:0b:a3:59:43:d4:e7:ae:88:b9:d0:71:e4:b9:8b: b1:14:93:13:9c:fb:dc:a0:8d:ee:78:57:63:d7:8d: 88:cd:1f:86:b2:79:ee:cf:20:d9:20:72:5c:ea:8b: 11:06:17:c1:47:67:d8:6d:5e:e4:0c:7e:a9:01:0d: cc:0e:b5:d9:bf:20:42:1d:7f:da:c0:49:12:55:75: fc:bd:ea:64:81:4a:32:5f:4f:3e:04:eb:4a:84:0e: 37:93:8e:e2:3b:8e:0b:f0:e7:24:2a:f3:86:e4:80: 9a:4b:29:d2:f3:4e:5f:17:15:c3:01:74:d9:1e:e0: 52:1a:3f:a6:78:15:84:2b:97:ef:e6:7b:46:b2:f4: 6a:16:00:e1:f3:7c:25:ff:04:dc:c2:ec:ad:56:97: 59:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:23:C5:98:16:09:6E:2C:37:8F:73:00:2B:0A:28:DA:62:29:E8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:79:8e:90:1f:9b:4c:72:34:bc:fb:e1:15:3d:13:37:fe:23: d4:9a:dc:aa:6f:d1:8e:fd:e8:c1:52:12:9e:2f:ce:b1:11:7f: 89:26:59:7a:5e:1c:96:8e:cf:b8:4f:34:76:bd:85:fa:39:42: 9b:7d:b9:01:f6:67:40:13:ef:34:9d:51:fd:98:14:54:81:7f: 44:5a:51:55:4f:0f:a8:40:96:c7:ae:34:14:61:7b:e9:f6:c5: 5b:86:c4:64:0c:a9:99:eb:c6:10:f5:e6:0b:c5:f1:44:7f:9c: 84:96:dc:87:7c:25:36:da:64:f7:bd:18:ec:b2:f8:9a:34:b5: 84:da:ed:52:cc:90:72:fc:4e:ff:80:7c:00:3c:18:11:07:c0: b4:c4:e1:0b:4f:34:80:3a:4b:06:72:24:3b:58:02:a1:83:e4: 25:9c:58:fb:a9:40:c6:82:93:d1:42:80:8a:4c:61:02:25:bf: 1c:0d:33:f6:e9:fd:25:4c:67:65:65:8c:cd:37:7e:dc:58:bd: c1:e5:a1:bb:64:38:27:6a:d8:63:5a:9b:07:6a:a6:19:0e:f6: 43:ca:dc:5b:52:f2:10:7b:ec:b2:38:73:45:33:c6:a8:ef:43: ca:61:7f:eb:ee:a2:be:fb:69:98:15:4c:75:d8:cf:34:99:a8: 61:97:51:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEzpZ7OJWPYS2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk OGM5OWI2OTYtYzEzYi00NmMxLTk5MDAtOWE3NjIyMjE4NTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSnPb39h4/9p69VIomWZSzbwRrf4cz/fMn3y vDLOHlJ1L/cPV0hArwI0c22AP/VTYISgl6rkH3IGvc73T60ZWUG34ZJ+43cSfmDD J7jXRrU1p9NYcRpC0kg7m6CJC8+MCaTjZEkJSt/3C6NZQ9Tnroi50HHkuYuxFJMT nPvcoI3ueFdj142IzR+GsnnuzyDZIHJc6osRBhfBR2fYbV7kDH6pAQ3MDrXZvyBC HX/awEkSVXX8vepkgUoyX08+BOtKhA43k47iO44L8OckKvOG5ICaSynS805fFxXD AXTZHuBSGj+meBWEK5fv5ntGsvRqFgDh83wl/wTcwuytVpdZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLojxZgWCW4sN49zACsKKNpiKeg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2NkYzg5ZTEtOTRlMi0z OTY2LTk4OGUtMTU2MDZmNmUxZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd5jpAfm0xyNLz74RU9Ezf+I9Sa3Kpv0Y796MFSEp4vzrERf4kmWXpe HJaOz7hPNHa9hfo5Qpt9uQH2Z0AT7zSdUf2YFFSBf0RaUVVPD6hAlseuNBRhe+n2 xVuGxGQMqZnrxhD15gvF8UR/nISW3Id8JTbaZPe9GOyy+Jo0tYTa7VLMkHL8Tv+A fAA8GBEHwLTE4QtPNIA6SwZyJDtYAqGD5CWcWPupQMaCk9FCgIpMYQIlvxwNM/bp /SVMZ2VljM03ftxYvcHlobtkOCdq2GNamwdqphkO9kPK3FtS8hB77LI4c0Uzxqjv Q8phf+vuor77aZgVTHXYzzSZqGGXUVc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:22:48 2026 by rpki-client