$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa File: 21c30bc2-e254-3dfc-8044-27631c929828.roa (raw, json) Hash identifier: nEieupsZsRzEt4Iyk1YrrpelBlDwQnE5q6l2itbSC/M= Subject key identifier: C0:F9:A2:EB:D9:FB:C8:BD:4F:80:60:23:D7:10:26:DA:CD:36:0B:C4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0FD9BA4B259BA1B982080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:fd:9b:a4:b2:59:ba:1b:98:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b44ad549-ce7b-463d-84cf-8639e667da1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:a1:43:d9:03:44:cb:5c:c8:88:3e:c9:1f: 20:a2:bb:db:a0:c3:99:da:22:45:69:15:f9:9c:59: d5:35:f5:ab:8d:f5:57:d5:96:18:f4:90:3e:3c:97: 22:c0:bc:d7:4c:02:f8:02:1c:50:e1:d6:92:26:34: 9b:ce:11:1c:6b:01:e7:f4:c8:05:76:22:3c:b2:68: 5b:bf:c0:8b:d8:19:13:d0:94:c9:63:61:a5:a7:25: 35:8d:d3:ea:19:ef:d9:e2:80:2c:fc:5a:3a:08:51: 45:a5:41:00:bd:9f:2e:4d:aa:ab:ed:29:45:52:b6: e2:1d:45:b2:58:71:0d:7c:ab:32:2b:6a:2e:51:75: 0f:e7:11:b9:6b:12:74:97:20:e0:d2:97:71:21:40: 6b:7f:ce:d2:b1:6c:49:49:2a:a6:92:ac:06:71:1f: 20:a4:96:27:f2:ba:fc:cc:74:fc:e5:b0:85:10:97: 2a:ea:45:c5:ed:37:84:f3:68:9f:ae:b0:96:cc:c8: e6:09:fd:cf:3a:09:c2:79:59:9c:9f:e9:09:9f:5b: 0b:be:f0:f7:ca:ac:4c:9d:8c:cf:eb:55:a0:06:fd: 7e:8f:f3:7c:02:aa:65:70:83:88:91:26:de:47:07: 21:01:b0:54:b8:c8:b0:85:77:16:86:38:31:1d:50: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F9:A2:EB:D9:FB:C8:BD:4F:80:60:23:D7:10:26:DA:CD:36:0B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/21c30bc2-e254-3dfc-8044-27631c929828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:aa:32:0c:44:d2:92:c3:2b:4a:5a:36:e1:8b:36:c3:0c:78: 31:83:b0:f9:ff:ff:08:c4:18:fa:2c:73:db:c4:9e:a3:7d:74: c5:91:ad:9e:b7:bf:f4:2f:ae:e6:ff:e0:bc:73:2d:ce:7f:1c: f2:94:fb:f2:7c:02:1d:7b:75:90:a8:d4:a6:c2:51:89:9a:61: de:e0:d6:68:18:2a:1b:bc:17:20:e3:a3:e3:ca:e2:73:78:89: ef:20:9a:cd:73:f9:ad:2a:43:82:03:0d:d1:f9:50:12:4b:44: 65:c1:4f:a6:ea:fe:59:d6:0f:03:00:99:e3:f7:c4:b0:55:dd: af:35:d0:84:18:7a:4e:04:5e:90:e9:08:be:fd:1b:bd:6b:6e: 92:c5:f8:19:ce:5c:96:c1:4c:21:68:24:a1:4f:ce:0e:19:4e: b5:e8:ee:2d:b7:b6:98:3e:8a:af:f6:27:36:2f:70:32:c3:3c: b5:6f:31:79:50:27:c9:36:c5:73:94:ba:22:4f:17:78:79:72: 47:04:e1:de:15:a2:d8:9f:28:84:e8:85:0d:a9:57:5a:d0:fe: 4d:67:5c:ac:21:00:5c:e1:9b:d1:0c:bd:b8:98:42:b1:cc:f9: be:1f:17:32:6d:00:d6:69:22:c9:7e:74:96:a5:b5:62:fa:e3: b6:51:76:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4P2bpLJZuhuYIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjQ0YWQ1NDktY2U3Yi00NjNkLTg0Y2YtODYzOWU2NjdkYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsShQ9kDRMtcyIg+yR8gorvboMOZ2iJFaRX5 nFnVNfWrjfVX1ZYY9JA+PJciwLzXTAL4AhxQ4daSJjSbzhEcawHn9MgFdiI8smhb v8CL2BkT0JTJY2GlpyU1jdPqGe/Z4oAs/Fo6CFFFpUEAvZ8uTaqr7SlFUrbiHUWy WHENfKsyK2ouUXUP5xG5axJ0lyDg0pdxIUBrf87SsWxJSSqmkqwGcR8gpJYn8rr8 zHT85bCFEJcq6kXF7TeE82ifrrCWzMjmCf3POgnCeVmcn+kJn1sLvvD3yqxMnYzP 61WgBv1+j/N8AqplcIOIkSbeRwchAbBUuMiwhXcWhjgxHVAjEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD5ouvZ+8i9T4BgI9cQJtrNNgvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjFjMzBiYzItZTI1NC0z ZGZjLTgwNDQtMjc2MzFjOTI5ODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuqMgxE0pLDK0paNuGLNsMMeDGDsPn//wjEGPosc9vEnqN9dMWRrZ63 v/Qvrub/4LxzLc5/HPKU+/J8Ah17dZCo1KbCUYmaYd7g1mgYKhu8FyDjo+PK4nN4 ie8gms1z+a0qQ4IDDdH5UBJLRGXBT6bq/lnWDwMAmeP3xLBV3a810IQYek4EXpDp CL79G71rbpLF+BnOXJbBTCFoJKFPzg4ZTrXo7i23tpg+iq/2JzYvcDLDPLVvMXlQ J8k2xXOUuiJPF3h5ckcE4d4VotifKITohQ2pV1rQ/k1nXKwhAFzhm9EMvbiYQrHM +b4fFzJtANZpIsl+dJaltWL647ZRdok= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:38 2026 by rpki-client