$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa File: 237250b7-86de-3771-94f1-0e5037bc3109.roa (raw, json) Hash identifier: +NCpG45kL3yLKru/v10pmkfXUORULWmkPc+8cUHs5nE= Subject key identifier: 1A:89:63:D5:25:D0:B5:2C:83:27:1D:13:B1:46:56:C6:5A:62:1D:37 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E2FB3D73932AEF38D980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e2:fb:3d:73:93:2a:ef:38:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=231a7682-0185-45ca-9742-18cceaecd02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:7f:cf:65:2a:28:20:fa:f3:8e:0d:a5:1b: 4e:35:18:2c:e8:53:cd:e5:64:5f:f7:2b:69:22:8a: d9:15:ef:3e:64:04:c9:a5:c9:cb:8c:ed:37:d9:a5: 8a:11:01:fd:5a:25:74:f8:48:37:ae:cb:71:7a:c7: 30:4f:32:a4:b5:0f:98:3d:c4:1a:95:c6:2d:bc:74: 04:b9:9f:fd:bb:e0:9d:1c:d2:39:64:c8:06:5b:f0: de:4c:93:e0:87:e8:b4:e6:b0:bf:6c:89:7f:12:b4: 36:3d:ba:3e:8f:42:3e:ea:06:b4:06:ce:9a:7d:a5: 83:e6:a1:5f:62:8e:f6:28:b2:35:56:49:8a:e9:20: a7:51:7a:82:cf:68:95:3c:e8:fd:a8:2f:ac:9f:03: bc:56:2a:61:0f:51:07:48:0b:4b:29:9b:d7:cf:4d: a3:5a:7f:14:56:ea:31:80:c1:8a:bd:8f:61:84:e6: 60:47:a7:a1:6f:dd:be:6b:8d:32:53:fa:91:c7:a4: 3b:3f:e2:4c:26:f0:0f:82:23:d5:20:63:ca:56:d6: 58:ac:bb:7a:73:d7:70:48:7a:e8:06:ce:6a:07:22: b0:49:f5:06:d6:a2:2e:f5:20:79:33:ed:9d:8a:8d: 51:9c:b0:cd:8b:19:8a:9f:39:c4:ae:8d:90:1e:4f: de:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:89:63:D5:25:D0:B5:2C:83:27:1D:13:B1:46:56:C6:5A:62:1D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237250b7-86de-3771-94f1-0e5037bc3109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6f:37:a8:6a:01:c6:a3:1d:a6:c9:b2:5f:9d:9e:71:86:2c: 60:9b:a2:ee:ee:98:4b:57:8f:5c:f3:f9:42:74:7b:99:f8:f9: f7:00:a2:7c:3c:da:f2:05:d7:bf:39:a0:1e:39:92:cd:d2:aa: c1:49:ec:d0:36:1a:83:fa:1f:be:6c:40:e8:0e:93:0b:01:ef: b5:d9:65:63:73:27:47:b7:35:11:1e:63:d7:02:ef:de:09:13: 0e:1a:68:32:bc:23:56:f6:b3:14:a3:4a:2d:f9:81:cd:0d:3d: 93:e2:1d:da:25:57:a7:fb:31:6c:8b:74:21:84:c6:36:5a:00: 4f:5c:b3:34:d1:ab:26:20:15:6e:ee:68:52:2f:49:f6:5e:76: 34:c3:a3:70:2e:4e:96:79:f7:4c:c7:e3:a3:56:5c:28:64:ce: a3:98:ce:87:08:d5:7c:40:df:1b:8c:5b:48:b9:42:f7:68:02: c8:4d:e8:62:3f:14:b6:a2:a7:87:19:66:94:1f:04:6a:7b:0d: 34:32:98:a0:df:27:34:d5:f1:8a:4c:1b:e1:5a:ee:a5:8b:32: 7c:6b:86:49:4d:8a:6b:1d:63:b3:74:86:53:dd:9d:00:41:f1: c6:82:82:a7:7d:f6:51:98:c1:82:08:0c:12:96:56:df:48:86: 0b:1b:57:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OL7PXOTKu842YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjMxYTc2ODItMDE4NS00NWNhLTk3NDItMThjY2VhZWNkMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij9/z2UqKCD6844NpRtONRgs6FPN5WRf9ytp IorZFe8+ZATJpcnLjO032aWKEQH9WiV0+Eg3rstxescwTzKktQ+YPcQalcYtvHQE uZ/9u+CdHNI5ZMgGW/DeTJPgh+i05rC/bIl/ErQ2Pbo+j0I+6ga0Bs6afaWD5qFf Yo72KLI1VkmK6SCnUXqCz2iVPOj9qC+snwO8ViphD1EHSAtLKZvXz02jWn8UVuox gMGKvY9hhOZgR6ehb92+a40yU/qRx6Q7P+JMJvAPgiPVIGPKVtZYrLt6c9dwSHro Bs5qByKwSfUG1qIu9SB5M+2dio1RnLDNixmKnznEro2QHk/eHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqJY9Ul0LUsgycdE7FGVsZaYh03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjM3MjUwYjctODZkZS0z NzcxLTk0ZjEtMGU1MDM3YmMzMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRvN6hqAcajHabJsl+dnnGGLGCbou7umEtXj1zz+UJ0e5n4+fcAonw8 2vIF1785oB45ks3SqsFJ7NA2GoP6H75sQOgOkwsB77XZZWNzJ0e3NREeY9cC794J Ew4aaDK8I1b2sxSjSi35gc0NPZPiHdolV6f7MWyLdCGExjZaAE9cszTRqyYgFW7u aFIvSfZedjTDo3AuTpZ590zH46NWXChkzqOYzocI1XxA3xuMW0i5QvdoAshN6GI/ FLaip4cZZpQfBGp7DTQymKDfJzTV8YpMG+Fa7qWLMnxrhklNimsdY7N0hlPdnQBB 8caCgqd99lGYwYIIDBKWVt9IhgsbVwE= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:56 2026 by rpki-client