$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7eea8cd1-10bb-31bc-83dd-3d913942dbc5.roa File: 7eea8cd1-10bb-31bc-83dd-3d913942dbc5.roa (raw, json) Hash identifier: 4ps+/5ymsN0U1QTWrFZZcM7K0BoCsjKAVAkxQc4nF2g= Subject key identifier: EC:C0:B8:71:A5:4C:14:09:2E:29:25:62:67:05:E0:38:EC:1F:0C:D3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E49ED9F3416DC149A200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7eea8cd1-10bb-31bc-83dd-3d913942dbc5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e4:9e:d9:f3:41:6d:c1:49:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1451dc29-da69-498a-be03-42c74bd31ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:27:ba:82:aa:8d:f4:33:2e:b5:21:19:d0:13: 3c:cf:b2:dc:1f:72:14:ee:6e:c3:10:87:74:8a:d5: 8f:fb:d6:3a:35:c1:af:05:16:a3:5d:aa:7b:23:22: ce:a9:57:b9:6d:1b:29:97:12:72:99:35:1a:cd:c7: a2:22:21:ba:a2:0c:c0:58:c9:8c:57:df:b0:f6:91: d8:1c:38:2e:a5:97:67:b7:08:46:cf:7c:ad:c6:8f: 86:dc:38:ab:0a:36:88:da:6e:e9:fe:6d:14:7e:f0: d5:f8:a7:d1:02:a3:12:5e:67:f1:cb:85:14:b6:cb: 1b:db:f6:2e:d9:20:fd:12:98:0c:19:7e:a6:52:7d: e9:07:6a:12:d4:40:e4:07:1d:5e:be:22:c2:4c:5d: c3:69:10:ca:7e:a6:f9:59:b4:f9:19:da:91:db:a0: e1:e7:94:98:97:f8:5f:9d:8f:e1:fc:89:a9:73:57: ac:40:de:b9:ae:c9:a2:7a:06:7e:a4:47:16:b5:9f: 6c:86:c8:e1:1b:0f:62:2b:77:26:f8:af:60:77:30: 5d:17:c7:08:62:bc:09:4e:05:1c:49:47:6b:d2:17: 86:d6:5a:9c:e5:67:6d:0e:5b:96:9f:56:2f:31:d2: 6a:4f:5b:ef:ac:be:08:50:62:ec:06:9c:ae:e9:06: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C0:B8:71:A5:4C:14:09:2E:29:25:62:67:05:E0:38:EC:1F:0C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7eea8cd1-10bb-31bc-83dd-3d913942dbc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:83:34:9d:70:93:f2:32:2f:0b:e8:14:59:50:c6:c6:87:86: 68:f8:c5:c2:3f:fc:77:bf:a9:a4:81:a0:09:03:17:58:ca:e0: 53:88:79:14:41:72:f4:85:7d:e3:32:47:56:90:65:08:ea:0b: 5a:51:73:d7:ac:76:ab:ed:c5:15:32:e6:39:e2:be:47:5e:79: d5:39:a1:28:01:7e:81:a7:98:44:28:d9:6b:38:65:73:40:f4: 03:5f:f2:80:ce:58:c9:49:cc:bb:45:5c:cb:2c:77:cd:77:ed: c8:2f:56:9d:a1:8e:38:a5:ab:5f:28:c9:d1:c8:8e:85:c8:84: e8:25:ff:af:db:17:fd:8d:83:cd:57:51:f4:31:b1:c6:f9:c7: c5:bb:9d:10:ba:9a:56:77:33:ab:4d:39:35:f5:24:46:6d:84: 0d:f3:5c:09:97:58:d2:ec:2b:96:b4:e4:38:07:2d:34:4d:64: a7:07:57:05:b4:1e:f7:c2:f7:ab:67:b3:8c:74:fe:b0:a8:97: 9a:c8:ad:ea:64:97:c7:72:8e:ba:0d:7d:be:de:57:39:83:f4: aa:a2:84:c9:4e:7c:a5:f5:6f:b3:2f:6d:17:c5:e6:ff:02:30: 40:30:97:cb:aa:68:3f:dd:1b:2d:e9:1a:41:6a:be:e2:3e:71: 12:da:a0:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OSe2fNBbcFJogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTQ1MWRjMjktZGE2OS00OThhLWJlMDMtNDJjNzRiZDMxZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjye6gqqN9DMutSEZ0BM8z7LcH3IU7m7DEId0 itWP+9Y6NcGvBRajXap7IyLOqVe5bRsplxJymTUazceiIiG6ogzAWMmMV9+w9pHY HDgupZdntwhGz3ytxo+G3DirCjaI2m7p/m0UfvDV+KfRAqMSXmfxy4UUtssb2/Yu 2SD9EpgMGX6mUn3pB2oS1EDkBx1eviLCTF3DaRDKfqb5WbT5GdqR26Dh55SYl/hf nY/h/Impc1esQN65rsmiegZ+pEcWtZ9shsjhGw9iK3cm+K9gdzBdF8cIYrwJTgUc SUdr0heG1lqc5WdtDluWn1YvMdJqT1vvrL4IUGLsBpyu6QaB1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzAuHGlTBQJLiklYmcF4DjsHwzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2VlYThjZDEtMTBiYi0z MWJjLTgzZGQtM2Q5MTM5NDJkYmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmDNJ1wk/IyLwvoFFlQxsaHhmj4xcI//He/qaSBoAkDF1jK4FOIeRRB cvSFfeMyR1aQZQjqC1pRc9esdqvtxRUy5jnivkdeedU5oSgBfoGnmEQo2Ws4ZXNA 9ANf8oDOWMlJzLtFXMssd8137cgvVp2hjjilq18oydHIjoXIhOgl/6/bF/2Ng81X UfQxscb5x8W7nRC6mlZ3M6tNOTX1JEZthA3zXAmXWNLsK5a05DgHLTRNZKcHVwW0 HvfC96tns4x0/rCol5rIrepkl8dyjroNfb7eVzmD9KqihMlOfKX1b7MvbRfF5v8C MEAwl8uqaD/dGy3pGkFqvuI+cRLaoMk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:11 2026 by rpki-client