$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa3f88f0-eccf-3972-a348-63c51ac35414.roa File: fa3f88f0-eccf-3972-a348-63c51ac35414.roa (raw, json) Hash identifier: vb7GrecB86wLkGclT4K6ci03y9kwXzqrprKwatw3Ofk= Subject key identifier: 5C:70:F9:9F:AD:78:EF:49:B7:62:9E:AF:B0:AD:0D:EA:05:98:61:16 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79E9A2D6D8E2A492F70BFE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa3f88f0-eccf-3972-a348-63c51ac35414.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 142.250.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:9a:2d:6d:8e:2a:49:2f:70:bf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d505f66a-7e58-405a-b736-1f27b5870cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8d:88:ba:68:3a:37:8b:a3:f8:be:e6:26:e8: 84:6d:e4:84:fc:77:06:8e:3d:21:cc:e6:b3:5a:b8: 60:6a:c4:2b:cd:61:c8:af:22:3c:e1:06:b3:33:0d: 96:c8:34:68:1a:c0:0e:34:45:29:e5:4f:16:6d:17: 22:cc:c9:57:f8:42:50:ba:fe:79:bd:de:88:83:f1: 4f:b3:e5:d4:e4:d6:f9:35:ab:a4:aa:1a:62:4d:33: 97:bb:7a:d8:cc:0d:7e:15:f5:fc:44:99:9a:68:cd: 22:83:c5:f9:30:c6:77:be:2d:24:3e:ee:ee:4d:d3: ab:58:29:15:29:6c:78:58:64:a9:b5:58:50:80:ed: 19:e4:24:c4:da:8d:98:a5:96:c9:f3:71:44:7f:11: 4e:78:3b:22:dd:3e:68:be:29:dc:cd:7d:0f:e0:30: 91:11:b9:ba:3d:6d:f2:0f:1d:44:c7:0e:99:7a:fd: 1c:88:31:7d:24:41:35:e7:84:9c:c0:2e:c8:c7:6e: 21:26:25:db:5d:a4:65:4e:6a:d0:9e:ec:b2:01:c7: dd:cf:ff:64:54:98:2d:25:f7:f4:6a:c0:f0:96:ac: 9e:e2:c7:dd:81:96:af:14:47:fe:2e:5d:44:23:ea: 98:61:df:2a:e2:83:8a:ee:a6:a9:d0:78:ef:1f:71: a1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:70:F9:9F:AD:78:EF:49:B7:62:9E:AF:B0:AD:0D:EA:05:98:61:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa3f88f0-eccf-3972-a348-63c51ac35414.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b5:86:40:b3:23:5d:33:81:16:b8:7a:5a:17:1b:b7:14:4b: 69:5e:b8:e8:24:16:ec:19:74:bb:d8:b7:4f:3c:d9:49:08:ee: ca:6d:80:24:5e:0d:c2:eb:4c:c6:3b:7a:44:85:7d:65:c1:39: b5:b1:f1:ea:26:47:67:6e:9c:8f:1e:d8:53:78:eb:ec:c4:a2: 82:7c:aa:94:e2:4f:f8:8f:a7:51:fe:47:a4:e2:a1:4d:60:e8: b3:fb:99:3f:53:37:77:30:40:97:a1:90:b7:c0:54:6e:9d:ac: e1:ce:c4:36:f2:78:5e:96:ab:a1:79:c2:91:f6:ad:3e:53:fb: 08:bc:e7:fc:63:0e:1b:5f:82:9a:8d:e8:af:5d:67:94:02:9d: 07:19:d5:34:b0:1c:34:b7:4e:0e:61:d8:b1:a5:0d:18:14:f2: 52:36:9e:8c:0f:65:9b:55:72:5d:c2:c7:77:c8:21:86:a3:05: 64:eb:74:c2:4e:c6:6d:88:6d:65:b5:71:67:e9:91:3b:37:47: 1f:b4:79:1f:35:9e:b1:1e:6a:d4:1b:e7:57:db:e5:c8:47:89: 6f:f5:91:93:eb:7c:ef:d5:78:75:61:7d:98:c2:2c:e3:a0:23: 64:49:72:17:a3:ef:66:3c:0b:b3:68:7a:9e:74:96:bb:77:33: 26:c4:4d:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnpotbY4qSS9wv+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDUwNWY2NmEtN2U1OC00MDVhLWI3MzYtMWYyN2I1ODcwY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY2Iumg6N4uj+L7mJuiEbeSE/HcGjj0hzOaz WrhgasQrzWHIryI84QazMw2WyDRoGsAONEUp5U8WbRcizMlX+EJQuv55vd6Ig/FP s+XU5Nb5NaukqhpiTTOXu3rYzA1+FfX8RJmaaM0ig8X5MMZ3vi0kPu7uTdOrWCkV KWx4WGSptVhQgO0Z5CTE2o2YpZbJ83FEfxFOeDsi3T5ovinczX0P4DCREbm6PW3y Dx1Exw6Zev0ciDF9JEE154ScwC7Ix24hJiXbXaRlTmrQnuyyAcfdz/9kVJgtJff0 asDwlqye4sfdgZavFEf+Ll1EI+qYYd8q4oOK7qap0HjvH3GhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxw+Z+teO9Jt2Ker7CtDeoFmGEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmEzZjg4ZjAtZWNjZi0z OTcyLWEzNDgtNjNjNTFhYzM1NDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa1hkCzI10zgRa4eloXG7cUS2leuOgkFuwZdLvYt0882UkI7sptgCRe DcLrTMY7ekSFfWXBObWx8eomR2dunI8e2FN46+zEooJ8qpTiT/iPp1H+R6TioU1g 6LP7mT9TN3cwQJehkLfAVG6drOHOxDbyeF6Wq6F5wpH2rT5T+wi85/xjDhtfgpqN 6K9dZ5QCnQcZ1TSwHDS3Tg5h2LGlDRgU8lI2nowPZZtVcl3Cx3fIIYajBWTrdMJO xm2IbWW1cWfpkTs3Rx+0eR81nrEeatQb51fb5chHiW/1kZPrfO/VeHVhfZjCLOOg I2RJchej72Y8C7Noep50lrt3MybETc8= -----END CERTIFICATE-----Generated at Wed Jul 29 04:09:11 2026 by rpki-client