$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa File: 5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa (raw, json) Hash identifier: 5pqxkWwvhIOKYeHqmoh6DI2JJ7aWrY5/f9pIou/BYh8= Subject key identifier: 4A:50:BF:E2:64:61:2C:A4:05:18:39:48:95:03:D2:17:A3:2B:F5:80 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03FE895B4F3B2721D8E40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:3f:e8:95:b4:f3:b2:72:1d:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ed55b78c-1b26-4714-b4fa-8faf943af940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:f9:6c:1a:b2:93:27:f3:6b:90:1e:3c:28: 5b:90:42:5d:6e:c4:a6:58:00:c6:16:dd:ea:03:57: d5:02:fb:34:1c:4a:a7:e0:b8:43:4e:d2:f1:33:3c: 63:e5:c1:f2:7b:ef:d9:75:91:cd:09:66:17:d5:f3: 0e:2f:2c:4e:f6:b6:99:b2:4e:04:a4:63:14:3e:6a: 6a:96:66:8a:7f:3a:b6:05:9b:4a:fb:77:f1:a5:55: a1:c0:7e:66:2a:26:9f:d3:5f:da:e1:96:a5:15:a5: f3:a7:e6:7d:41:cd:0a:99:a8:1e:a2:c8:cb:d1:fb: 10:96:a6:52:bb:84:72:0a:60:e6:80:ea:19:69:0f: 63:4d:49:ca:9f:bf:13:b1:e7:d7:44:c7:38:0d:df: 6f:53:67:e5:6b:0b:e2:9d:55:21:d8:70:93:b8:3b: 6b:a6:54:22:dd:97:66:85:5f:c4:b6:ee:6b:d4:36: 2a:43:ae:b8:a0:5d:95:97:b2:1a:2f:4b:99:40:f6: 9f:a5:cf:be:18:ed:98:d3:f3:c3:74:b8:c3:da:65: f4:68:76:02:8f:c1:2e:16:c1:ff:4a:83:0b:1a:35: 3a:d9:8a:68:e7:6f:53:fe:7d:f0:c8:16:f1:f1:50: 39:7b:e2:5c:bf:dc:c6:37:8b:f0:f9:12:6b:d1:d8: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:50:BF:E2:64:61:2C:A4:05:18:39:48:95:03:D2:17:A3:2B:F5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d029f09-e3e1-33cc-aa0e-079bf3d39b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f6:01:a1:ee:d2:63:c0:02:21:94:8f:f7:8e:64:91:51:c2: 6c:5c:76:e6:e6:03:c5:c8:c0:a5:4a:d7:b2:c3:3f:17:0f:b7: 26:1a:59:53:dc:29:13:a7:0f:5e:8c:c1:79:91:5a:a6:0d:04: d4:3b:10:e1:3e:ec:52:70:08:bb:88:b9:e5:10:0a:20:7e:f0: 8e:a6:24:0a:08:a4:25:89:c5:3b:67:d7:bb:9a:fe:15:9e:50: 31:6b:9e:6e:e5:5e:3b:ac:b8:15:73:79:77:31:1d:c6:3f:39: a0:84:79:b2:7e:30:52:fe:b3:b0:a7:06:17:58:6b:a3:af:1d: 54:6d:4f:86:cc:41:94:06:82:97:23:66:de:8f:73:84:c9:a2: 7e:d9:f8:78:e1:ee:cc:de:40:a2:66:aa:02:0b:cc:37:56:a7: 77:9a:76:6f:2b:39:e0:7f:d6:7a:ff:9d:c0:d1:a0:3d:6f:8c: 27:0d:c7:f9:1d:71:cd:f0:bc:fa:65:0b:3d:06:7e:77:f6:f9: 7b:23:cc:c7:8b:64:72:12:27:4c:0f:7d:b6:d6:86:7d:f1:8c: 22:ab:d9:f9:f6:b7:66:b8:d3:5e:40:92:07:53:89:19:80:23: 4d:16:41:4d:34:9b:18:38:29:d8:5c:93:d8:ea:ed:73:2e:f7: a3:4a:5e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4D/olbTzsnIdjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWQ1NWI3OGMtMWIyNi00NzE0LWI0ZmEtOGZhZjk0M2FmOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm/5bBqykyfza5AePChbkEJdbsSmWADGFt3q A1fVAvs0HEqn4LhDTtLxMzxj5cHye+/ZdZHNCWYX1fMOLyxO9raZsk4EpGMUPmpq lmaKfzq2BZtK+3fxpVWhwH5mKiaf01/a4ZalFaXzp+Z9Qc0KmageosjL0fsQlqZS u4RyCmDmgOoZaQ9jTUnKn78TsefXRMc4Dd9vU2flawvinVUh2HCTuDtrplQi3Zdm hV/Etu5r1DYqQ664oF2Vl7IaL0uZQPafpc++GO2Y0/PDdLjD2mX0aHYCj8EuFsH/ SoMLGjU62Ypo529T/n3wyBbx8VA5e+Jcv9zGN4vw+RJr0dgsyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpQv+JkYSykBRg5SJUD0hejK/WAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWQwMjlmMDktZTNlMS0z M2NjLWFhMGUtMDc5YmYzZDM5YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID2AaHu0mPAAiGUj/eOZJFRwmxcdubmA8XIwKVK17LDPxcPtyYaWVPc KROnD16MwXmRWqYNBNQ7EOE+7FJwCLuIueUQCiB+8I6mJAoIpCWJxTtn17ua/hWe UDFrnm7lXjusuBVzeXcxHcY/OaCEebJ+MFL+s7CnBhdYa6OvHVRtT4bMQZQGgpcj Zt6Pc4TJon7Z+Hjh7szeQKJmqgILzDdWp3eadm8rOeB/1nr/ncDRoD1vjCcNx/kd cc3wvPplCz0Gfnf2+XsjzMeLZHISJ0wPfbbWhn3xjCKr2fn2t2a4015AkgdTiRmA I00WQU00mxg4Kdhck9jq7XMu96NKXhM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:30 2026 by rpki-client