$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa File: 586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa (raw, json) Hash identifier: GE+MDZ4cZHtfHB6N2hD90sKSZMSDToY9nxVVAYgIUZw= Subject key identifier: 64:C3:0B:63:0E:56:D4:B3:41:93:35:55:4D:A2:CD:F5:ED:72:00:7A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E38BFB64C159BA566240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e3:8b:fb:64:c1:59:ba:56:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d5316c7b-e210-407f-9103-4441c274c912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:89:e6:30:60:ca:7d:16:ab:2b:06:ca:8d: c9:c2:d1:85:63:aa:05:38:cd:dc:0d:46:40:f6:92: 7a:78:d4:61:ac:2c:64:92:30:1d:e4:b2:57:8e:a1: 2b:b8:df:32:f2:86:76:79:c6:ae:75:17:bd:26:c1: 1f:d2:68:56:29:1d:0d:c5:83:65:9b:16:4c:a8:dc: fa:7d:e5:ef:df:78:88:fa:24:ea:0f:f4:77:12:f9: 62:91:78:37:f9:87:16:50:98:30:ea:4e:af:0d:1c: c9:e2:97:4c:26:e8:ef:e4:b5:c2:bd:a6:c6:04:af: 16:c0:d0:68:be:b1:c7:de:f7:83:96:b9:b7:a1:6b: a0:8c:aa:ae:86:0b:1b:53:99:75:3c:37:5b:b6:0e: 3c:b9:43:5d:0c:38:ec:07:fc:c8:45:2d:06:07:4c: 30:0d:a7:a3:6a:29:27:df:69:32:3d:a5:26:15:ba: e9:b0:ee:c8:8b:78:9d:52:cc:bc:b5:fc:8b:e0:18: 77:da:90:fc:80:7d:f3:40:13:44:f4:59:3d:7f:6e: 81:e1:36:d5:07:50:a0:57:ea:67:82:80:a5:ce:c6: 8d:59:19:f3:fa:cd:5c:8c:88:38:47:ed:cb:4d:90: 01:a4:eb:66:5c:85:21:8e:e2:bc:1c:0f:be:80:6c: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C3:0B:63:0E:56:D4:B3:41:93:35:55:4D:A2:CD:F5:ED:72:00:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f0:69:01:78:00:3a:fa:a3:62:b1:6f:17:c6:2e:4a:2d:af: 7b:89:6f:bb:d2:9f:c5:a7:ee:ed:c9:cb:67:3b:85:7e:db:79: 79:be:9e:95:50:7b:55:78:19:45:b8:eb:9d:78:59:76:8e:f5: 00:6c:82:20:49:d0:3e:99:20:3e:6a:b9:c5:04:70:0b:c3:41: 15:75:62:87:10:09:e7:98:ca:34:9d:10:61:e9:19:e2:90:c6: ab:31:5e:2f:08:83:59:80:85:c1:b8:e4:01:c3:b6:2f:e5:c6: 49:7d:2d:f8:24:79:18:35:fb:6c:e0:bf:d5:cb:1d:73:a4:28: d3:b9:8c:e9:cc:14:81:42:0a:19:f9:a8:ba:ff:9d:b2:38:e4: ce:a6:1f:3e:8e:c7:13:43:41:b4:10:05:ab:ee:fb:62:c4:51: cb:53:a7:50:96:ef:20:74:0a:98:a5:90:e8:8b:e5:cc:fa:2b: 18:24:1b:e9:75:07:13:8c:81:02:d6:08:56:8e:43:5b:2d:01: 33:97:bf:53:10:be:bb:cf:16:fe:76:71:96:4a:89:7d:96:97: 3a:f8:81:72:fa:96:65:d2:97:c3:8a:cd:53:1f:56:cb:a3:6d: b8:e2:9a:14:1f:47:d3:16:6e:88:8f:ca:90:ce:78:ba:a0:19: 31:aa:24:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OOL+2TBWbpWYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDUzMTZjN2ItZTIxMC00MDdmLTkxMDMtNDQ0MWMyNzRjOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvamJ5jBgyn0WqysGyo3JwtGFY6oFOM3cDUZA 9pJ6eNRhrCxkkjAd5LJXjqEruN8y8oZ2ecaudRe9JsEf0mhWKR0NxYNlmxZMqNz6 feXv33iI+iTqD/R3EvlikXg3+YcWUJgw6k6vDRzJ4pdMJujv5LXCvabGBK8WwNBo vrHH3veDlrm3oWugjKquhgsbU5l1PDdbtg48uUNdDDjsB/zIRS0GB0wwDaejaikn 32kyPaUmFbrpsO7Ii3idUsy8tfyL4Bh32pD8gH3zQBNE9Fk9f26B4TbVB1CgV+pn goClzsaNWRnz+s1cjIg4R+3LTZABpOtmXIUhjuK8HA++gGwW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTDC2MOVtSzQZM1VU2izfXtcgB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg2ZjEyYzktNDhlMS0z ZGM4LWJlN2MtODhlMGFkZmMyZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArwaQF4ADr6o2KxbxfGLkotr3uJb7vSn8Wn7u3Jy2c7hX7beXm+npVQ e1V4GUW46514WXaO9QBsgiBJ0D6ZID5qucUEcAvDQRV1YocQCeeYyjSdEGHpGeKQ xqsxXi8Ig1mAhcG45AHDti/lxkl9LfgkeRg1+2zgv9XLHXOkKNO5jOnMFIFCChn5 qLr/nbI45M6mHz6OxxNDQbQQBavu+2LEUctTp1CW7yB0CpilkOiL5cz6KxgkG+l1 BxOMgQLWCFaOQ1stATOXv1MQvrvPFv52cZZKiX2Wlzr4gXL6lmXSl8OKzVMfVsuj bbjimhQfR9MWboiPypDOeLqgGTGqJKQ= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:08 2026 by rpki-client