$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24197f5d-ffa1-3bdf-9a18-1904424469a4.roa File: 24197f5d-ffa1-3bdf-9a18-1904424469a4.roa (raw, json) Hash identifier: H9Y2W5s+p7yXsMNocjvT2uXBUVos0Hui+0xsZGVKj0g= Subject key identifier: BA:85:E2:EC:F4:CB:11:21:DF:46:5F:A4:14:60:1C:60:D4:DF:20:76 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F19B8ED41F5F58996580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24197f5d-ffa1-3bdf-9a18-1904424469a4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f1:9b:8e:d4:1f:5f:58:99:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5426a7d2-8f9c-4a6b-af64-af63a2b04fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4f:2d:d9:33:c2:6b:12:1d:df:90:e2:73:3f: 5b:cd:9c:3e:5c:c9:bc:c3:cf:eb:93:56:65:4c:2c: 93:6d:0e:0f:8e:07:40:66:1a:c8:01:7d:19:21:5a: 87:92:f3:ea:9c:a9:72:0d:a4:31:86:68:a3:e5:4a: 09:3b:43:3e:f3:9e:41:6a:ad:d4:d7:be:37:13:bb: 5c:97:3f:c6:3b:2f:db:70:1c:09:38:2d:33:79:b6: c8:db:c4:c2:e3:bb:47:36:7e:15:0e:82:17:e6:fd: 9e:39:e9:06:dd:3d:2d:06:a3:2a:4c:fe:45:1e:53: 7f:28:ec:80:d7:74:5c:5a:28:c1:ed:ce:6b:3a:5c: 73:62:5c:af:db:c0:85:c8:13:a0:53:2d:75:ef:6c: a0:04:bf:e1:f1:06:8c:07:0b:e1:f1:06:0a:3c:30: b6:2b:b6:e3:15:b9:5d:0d:d0:8e:76:8b:89:e6:a9: df:b9:9f:e3:c8:17:c1:e5:e6:76:a9:35:3f:c1:84: 04:6a:a1:56:e1:ce:0a:1a:f4:56:8e:62:fd:eb:f0: 01:13:c2:06:2f:d8:70:09:6f:94:cc:16:45:00:e5: 8d:aa:5c:0f:0a:76:df:0a:17:11:6a:ab:5a:61:69: 28:ff:4f:07:af:c1:85:d3:87:8c:25:c7:8e:7b:7a: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:85:E2:EC:F4:CB:11:21:DF:46:5F:A4:14:60:1C:60:D4:DF:20:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/24197f5d-ffa1-3bdf-9a18-1904424469a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:91:7f:c5:e3:22:62:dc:21:3a:0c:b1:a7:d7:90:2d:f3:39: c9:3c:8a:fa:fc:e0:cb:24:a2:cd:97:73:a3:94:87:e0:8e:1a: 3e:e0:fe:5d:ac:4e:f4:b4:44:53:4b:dd:a0:ee:db:5b:f1:82: 42:4f:53:51:ab:c9:86:fa:82:56:af:6e:8a:8b:54:8f:34:74: fd:be:7d:8a:17:5e:e0:1b:94:a1:40:9e:b3:e3:fb:a6:71:9f: 83:cd:dd:fb:b9:8f:6a:28:c0:e6:9f:20:6b:6e:06:26:e4:f3: bf:c8:f5:b3:52:f3:6e:3f:a8:a8:ff:42:b4:0a:7c:32:72:40: 70:d1:20:76:6e:2c:54:19:b9:d4:ba:2a:d1:97:94:4f:6d:4b: 16:1a:25:1d:d7:9c:99:c5:0d:c8:b0:f5:ba:0d:dc:68:ae:4b: 67:72:11:53:2e:5b:92:28:04:f7:00:2b:67:ff:27:11:7f:cf: 4e:f1:e1:9c:e7:f3:3c:71:b4:39:b2:9e:6f:2b:97:5f:a5:ef: 47:c4:a1:bf:3f:88:f2:78:db:98:a6:d0:8f:70:f3:94:0e:03: e3:c9:12:47:2c:a6:ad:ad:71:aa:77:34:0e:58:03:77:f3:b7: a4:e0:71:dd:61:cc:69:82:e7:57:d7:1a:58:1b:a9:36:f6:7d: ee:09:80:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PGbjtQfX1iZZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTQyNmE3ZDItOGY5Yy00YTZiLWFmNjQtYWY2M2EyYjA0ZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk8t2TPCaxId35Dicz9bzZw+XMm8w8/rk1Zl TCyTbQ4PjgdAZhrIAX0ZIVqHkvPqnKlyDaQxhmij5UoJO0M+855Baq3U1743E7tc lz/GOy/bcBwJOC0zebbI28TC47tHNn4VDoIX5v2eOekG3T0tBqMqTP5FHlN/KOyA 13RcWijB7c5rOlxzYlyv28CFyBOgUy1172ygBL/h8QaMBwvh8QYKPDC2K7bjFbld DdCOdouJ5qnfuZ/jyBfB5eZ2qTU/wYQEaqFW4c4KGvRWjmL96/ABE8IGL9hwCW+U zBZFAOWNqlwPCnbfChcRaqtaYWko/08Hr8GF04eMJceOe3qUaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqF4uz0yxEh30ZfpBRgHGDU3yB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjQxOTdmNWQtZmZhMS0z YmRmLTlhMTgtMTkwNDQyNDQ2OWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKRf8XjImLcIToMsafXkC3zOck8ivr84Mskos2Xc6OUh+COGj7g/l2s TvS0RFNL3aDu21vxgkJPU1GryYb6glavboqLVI80dP2+fYoXXuAblKFAnrPj+6Zx n4PN3fu5j2oowOafIGtuBibk87/I9bNS824/qKj/QrQKfDJyQHDRIHZuLFQZudS6 KtGXlE9tSxYaJR3XnJnFDciw9boN3GiuS2dyEVMuW5IoBPcAK2f/JxF/z07x4Zzn 8zxxtDmynm8rl1+l70fEob8/iPJ425im0I9w85QOA+PJEkcspq2tcap3NA5YA3fz t6Tgcd1hzGmC51fXGlgbqTb2fe4JgFs= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:48 2026 by rpki-client