$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa File: 2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa (raw, json) Hash identifier: 9AB8rgI/4NVNnymkaR6aMCbU8Gsgku8zpGz8aEw6H68= Subject key identifier: 73:6A:34:A5:10:A6:B5:2D:E9:10:F9:DF:C0:6E:FC:95:02:7D:DD:AA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0466FE9A749889C81B400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:46:6f:e9:a7:49:88:9c:81:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=60ef6074-6e13-49a8-93e9-87f6a6af00a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d9:f9:9b:29:a6:d6:37:43:51:8f:b6:d1:bb: de:d5:fc:3d:56:aa:58:7d:8f:71:d3:04:33:cc:7a: 6a:08:d1:76:c3:c4:c6:05:3d:09:70:30:8c:fa:e7: d1:ce:4e:d7:f6:8b:29:4e:2f:f7:5b:c8:2a:92:9f: f0:da:be:3c:ce:a2:40:f8:84:00:c3:d8:aa:8f:99: e8:5a:4f:4a:1f:90:4c:75:aa:72:2d:73:24:a2:3e: 12:a8:9d:88:ac:48:73:f6:82:34:89:62:6a:ee:b2: fc:a0:fb:03:aa:4d:a1:78:30:1e:65:d4:c3:27:f9: f3:d0:9b:1a:31:62:ff:39:e1:28:98:26:72:1f:41: 8a:13:b0:15:52:67:2f:e5:ac:31:84:ee:44:12:c6: a4:10:d4:c5:4b:14:08:e7:8b:6a:d8:55:56:18:69: f0:53:1e:65:b4:f6:45:da:2c:5a:60:30:d7:69:b2: 7d:60:77:d5:8d:27:15:73:2d:59:82:6c:95:1e:3b: 91:5e:5a:c7:87:85:74:5e:8a:f7:9f:98:76:f5:6c: c9:a5:67:cb:fd:e5:e9:b9:62:7b:30:05:f1:fa:c0: a0:b1:77:59:11:a3:79:0f:1c:f3:7f:6d:31:e7:a8: 68:02:ac:46:16:15:b9:10:f8:90:67:45:32:80:87: c4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6A:34:A5:10:A6:B5:2D:E9:10:F9:DF:C0:6E:FC:95:02:7D:DD:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2889a3ef-281a-308e-a8b0-82d9b9b2a1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a6:58:a4:b0:8f:6b:96:4d:d5:ba:da:95:55:98:11:4f:5d: 43:86:70:c6:3d:a2:eb:1d:6e:45:de:4d:16:42:97:07:0c:12: ab:69:61:11:b3:ca:01:ea:a6:ba:8f:f0:72:86:b8:89:e8:a1: 2c:a4:8d:27:4f:86:54:fa:10:62:a1:83:f4:0c:58:d5:ca:5e: cf:02:fe:39:da:93:3d:cb:8b:2b:87:e2:51:13:29:77:a3:eb: 04:87:ac:22:12:49:a2:ff:ee:06:c0:21:f1:81:8f:06:9e:d0: d4:a5:fb:fd:14:ca:bd:49:08:f0:ef:ae:72:8b:3d:60:cc:8f: 4b:4d:0b:ee:83:35:79:52:e5:49:e3:cb:d2:06:03:f2:7d:75: b1:c3:71:67:4b:53:8f:77:4c:04:8a:bd:f6:83:7f:e6:16:50: 0a:e6:65:8f:13:41:5a:81:a1:87:12:82:76:34:73:21:3a:6a: ff:6a:a8:a9:7b:60:91:ca:4a:4a:2f:a9:4a:dc:5a:48:17:1c: 30:29:a3:a5:cf:e6:5f:9c:ad:9a:3b:e4:9d:bf:a9:04:b5:e3: f5:22:c3:49:84:1e:50:22:19:60:c9:f6:3e:b7:80:b5:44:80: 2a:b3:52:a1:31:9d:51:31:82:59:92:ef:82:98:47:36:46:bc: d2:f5:f2:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EZv6adJiJyBtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjBlZjYwNzQtNmUxMy00OWE4LTkzZTktODdmNmE2YWYwMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtn5mymm1jdDUY+20bve1fw9VqpYfY9x0wQz zHpqCNF2w8TGBT0JcDCM+ufRzk7X9ospTi/3W8gqkp/w2r48zqJA+IQAw9iqj5no Wk9KH5BMdapyLXMkoj4SqJ2IrEhz9oI0iWJq7rL8oPsDqk2heDAeZdTDJ/nz0Jsa MWL/OeEomCZyH0GKE7AVUmcv5awxhO5EEsakENTFSxQI54tq2FVWGGnwUx5ltPZF 2ixaYDDXabJ9YHfVjScVcy1ZgmyVHjuRXlrHh4V0Xor3n5h29WzJpWfL/eXpuWJ7 MAXx+sCgsXdZEaN5Dxzzf20x56hoAqxGFhW5EPiQZ0UygIfE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNqNKUQprUt6RD538Bu/JUCfd2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg4OWEzZWYtMjgxYS0z MDhlLWE4YjAtODJkOWI5YjJhMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKmWKSwj2uWTdW62pVVmBFPXUOGcMY9ousdbkXeTRZClwcMEqtpYRGz ygHqprqP8HKGuInooSykjSdPhlT6EGKhg/QMWNXKXs8C/jnakz3LiyuH4lETKXej 6wSHrCISSaL/7gbAIfGBjwae0NSl+/0Uyr1JCPDvrnKLPWDMj0tNC+6DNXlS5Unj y9IGA/J9dbHDcWdLU493TASKvfaDf+YWUArmZY8TQVqBoYcSgnY0cyE6av9qqKl7 YJHKSkovqUrcWkgXHDApo6XP5l+crZo75J2/qQS14/Uiw0mEHlAiGWDJ9j63gLVE gCqzUqExnVExglmS74KYRzZGvNL18nk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:29 2026 by rpki-client