$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa File: 7cf2fd49-6469-31b7-b902-e90312ec317d.roa (raw, json) Hash identifier: 8ys4szMA1TOoI67/Yembi6pauHMmhL1+iC8xfSRBBz8= Subject key identifier: 69:11:93:C0:12:EA:E6:94:16:BE:37:58:C0:D1:4E:D5:E6:50:95:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0EEEC2D0910A2C2B7FC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ee:ec:2d:09:10:a2:c2:b7:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2f4aa7cd-52b0-43b4-9950-2ac54240441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:bd:ca:13:6e:cd:25:b6:88:44:68:d7:4f: 5f:fa:3f:9e:bc:53:9f:41:d5:ec:65:44:54:4e:71: cc:ef:1b:d5:2d:33:2f:8d:91:81:78:2e:af:03:ca: 9d:6a:51:51:62:a7:23:cc:ff:ba:f7:6b:02:6d:79: 77:2e:30:75:2c:d4:e1:1e:60:97:41:7f:e4:91:9a: 50:a4:88:63:f3:d5:06:6b:9f:2e:1d:10:b6:1d:a7: 8e:94:52:b2:4b:2e:a3:2a:30:30:0b:e8:69:e7:8b: 59:4a:f2:0a:a4:64:98:93:2c:7e:8f:f0:0c:7c:c8: fb:8f:3e:7b:5c:5c:fb:8f:fb:94:99:d1:26:d5:01: 4e:41:37:3a:f2:41:bb:2f:84:a7:af:17:99:0b:d5: 42:94:22:9f:df:c0:e7:e9:55:e1:86:bd:f9:da:25: e6:de:08:a8:c4:e9:17:49:b9:d4:05:9f:5c:02:3a: f2:9f:b1:3b:51:b0:b2:78:1f:47:de:5f:de:38:3c: cd:f2:b8:a4:2e:2d:f2:34:7c:bd:42:bc:a4:5a:db: 3a:ea:54:d7:c5:d9:8c:15:2e:48:a7:a2:ed:e5:77: 98:67:94:a3:ca:73:51:47:7f:80:de:c1:d8:a0:0e: 57:d7:33:39:14:82:ab:26:f3:51:bd:8f:67:f0:ea: 12:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:11:93:C0:12:EA:E6:94:16:BE:37:58:C0:D1:4E:D5:E6:50:95:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:31:50:bc:a3:e7:35:f6:63:48:b8:ee:44:14:59:84:9a:00: da:85:56:66:c3:3f:50:dd:f5:76:cb:5f:0f:d1:6a:fc:69:6e: d5:95:93:15:f9:92:60:a0:f5:ee:3b:ee:55:b6:f9:17:4b:06: 68:d8:3f:26:dd:83:f7:cf:f8:ad:7e:03:91:f8:30:05:1f:7d: 97:ee:3a:dd:7a:63:cc:57:10:27:b0:a4:d7:5e:32:6d:59:4b: 18:4c:32:96:32:e3:c1:8a:3f:de:30:48:7d:5e:94:91:77:1a: e2:2e:54:ef:4c:8d:c3:bc:0c:82:f7:18:88:6b:52:90:47:ea: 0c:c3:70:f7:8f:fe:aa:5e:e7:46:08:e2:5b:3d:f8:4d:94:14: 76:75:4d:30:05:56:ad:4e:c4:8e:e5:fc:d4:0a:20:c7:4e:33: ee:07:53:ab:dd:14:34:93:33:b1:8d:52:3f:a2:9a:1f:9a:ae: 90:a6:a8:6f:ef:72:13:40:ce:ee:4e:0d:a1:39:57:89:14:0b: 52:98:5c:9e:ce:e3:49:72:42:40:bb:b0:1d:8d:43:88:57:71: 8f:f7:82:cf:0d:ce:fc:ae:05:9e:25:86:e1:d6:fc:29:68:12: 70:6d:d4:a7:27:52:e4:11:0d:83:d0:94:0e:da:cb:1b:33:4b: 42:f2:90:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O7sLQkQosK3/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmY0YWE3Y2QtNTJiMC00M2I0LTk5NTAtMmFjNTQyNDA0NDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFa9yhNuzSW2iERo109f+j+evFOfQdXsZURU TnHM7xvVLTMvjZGBeC6vA8qdalFRYqcjzP+692sCbXl3LjB1LNThHmCXQX/kkZpQ pIhj89UGa58uHRC2HaeOlFKySy6jKjAwC+hp54tZSvIKpGSYkyx+j/AMfMj7jz57 XFz7j/uUmdEm1QFOQTc68kG7L4SnrxeZC9VClCKf38Dn6VXhhr352iXm3gioxOkX SbnUBZ9cAjryn7E7UbCyeB9H3l/eODzN8rikLi3yNHy9QrykWts66lTXxdmMFS5I p6Lt5XeYZ5SjynNRR3+A3sHYoA5X1zM5FIKrJvNRvY9n8OoSXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkRk8AS6uaUFr43WMDRTtXmUJU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2NmMmZkNDktNjQ2OS0z MWI3LWI5MDItZTkwMzEyZWMzMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIxULyj5zX2Y0i47kQUWYSaANqFVmbDP1Dd9XbLXw/RavxpbtWVkxX5 kmCg9e477lW2+RdLBmjYPybdg/fP+K1+A5H4MAUffZfuOt16Y8xXECewpNdeMm1Z SxhMMpYy48GKP94wSH1elJF3GuIuVO9MjcO8DIL3GIhrUpBH6gzDcPeP/qpe50YI 4ls9+E2UFHZ1TTAFVq1OxI7l/NQKIMdOM+4HU6vdFDSTM7GNUj+imh+arpCmqG/v chNAzu5ODaE5V4kUC1KYXJ7O40lyQkC7sB2NQ4hXcY/3gs8NzvyuBZ4lhuHW/Clo EnBt1KcnUuQRDYPQlA7ayxszS0LykMw= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:07 2026 by rpki-client