$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fa8e365-47c8-3ddb-8d37-54b9d5aeba25.roa File: 7fa8e365-47c8-3ddb-8d37-54b9d5aeba25.roa (raw, json) Hash identifier: D2XtrnKC7rcTIQldP8FnlSewX1h9doJxBUc7jIBry2Q= Subject key identifier: DB:37:54:25:96:2F:40:52:A3:B9:2A:F0:5A:CF:69:48:03:08:59:F9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03E883C0D70AFE59C3F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fa8e365-47c8-3ddb-8d37-54b9d5aeba25.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:3e:88:3c:0d:70:af:e5:9c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5bf0f3c3-8a7a-4bc5-b69a-a484a8c31f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:68:90:3c:1f:3d:92:23:08:4e:1e:92:f8: bd:fe:f1:97:a1:24:69:3a:b3:31:94:be:4c:dd:85: 36:2c:c0:75:69:58:0a:12:84:33:57:3e:5f:36:01: a7:20:69:e3:0b:58:66:5a:0e:4b:53:00:92:03:81: 49:f2:0c:5a:a5:72:5f:df:9c:09:9a:cf:a4:71:45: 32:c6:8a:74:5a:39:99:34:43:e1:f9:18:a2:b3:c6: b1:da:74:73:71:66:a0:d9:c1:1c:b5:90:f6:13:8a: 52:82:d5:10:f9:da:3b:c6:46:b5:33:9b:bd:48:49: d3:70:c9:1a:2c:12:ce:e7:51:47:ef:e0:d9:dc:3b: 32:ab:32:c4:71:c3:18:f0:07:41:19:50:08:a4:5a: 73:94:ed:87:df:6f:df:89:a5:9e:d1:b1:46:3f:86: db:12:e5:a8:f0:b1:26:4b:e3:f7:c4:f0:06:8d:df: 1c:bb:37:be:01:46:8b:1f:09:09:f7:be:e0:ae:69: 2c:29:14:b3:ef:9f:7d:34:3f:a8:52:e0:67:53:c9: 3d:ae:65:f5:06:bb:77:3f:15:28:b5:f6:d6:75:24: 70:55:bd:c0:5d:e2:8e:44:30:37:e9:d0:84:5c:6a: d0:20:e0:bb:37:cd:3d:3a:3d:0a:c2:23:e4:bb:31: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:37:54:25:96:2F:40:52:A3:B9:2A:F0:5A:CF:69:48:03:08:59:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7fa8e365-47c8-3ddb-8d37-54b9d5aeba25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:58:e9:00:c1:b1:71:13:f7:e4:c0:46:05:b5:65:78:d0:86: 2c:c4:4c:28:18:da:4d:24:3c:07:47:88:d4:ee:61:63:25:31: e1:9f:24:98:59:e7:e8:6a:a1:c2:8d:b3:b1:41:e0:88:bc:a6: 10:ef:77:01:0c:6a:b2:07:0f:05:69:db:11:76:42:dd:68:30: ce:28:e6:41:2b:f4:6b:38:5d:1f:5e:f7:3f:77:04:a7:4b:e0: 68:4d:22:54:ec:c5:4c:10:03:f6:3e:ff:57:de:03:5c:d7:f9: 13:f4:a2:0e:ff:f9:32:f8:f7:95:de:52:49:55:13:dd:4c:ff: bb:97:36:85:40:06:4d:52:8f:80:c5:ed:2e:6a:bb:51:4f:45: 19:17:08:dd:0d:65:f2:f0:21:23:dc:98:a7:14:d4:87:f1:f1: 39:e2:e8:cf:eb:b0:5a:15:2c:e1:34:c1:73:86:c8:a3:23:b4: 48:05:2f:69:c8:a3:32:d3:d0:29:4d:b2:79:cc:71:2e:9c:c8: ed:aa:09:d2:3d:ce:90:65:16:6f:51:6c:2c:a3:eb:1e:8e:1f: a6:82:74:ac:ca:be:e9:61:d6:1e:7e:65:8e:6b:22:8e:23:96: 91:89:0e:9d:a6:43:2b:20:09:7b:74:a8:a4:9e:09:c6:0d:d5: 66:51:2f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4D6IPA1wr+WcPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWJmMGYzYzMtOGE3YS00YmM1LWI2OWEtYTQ4NGE4YzMxZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfJokDwfPZIjCE4ekvi9/vGXoSRpOrMxlL5M 3YU2LMB1aVgKEoQzVz5fNgGnIGnjC1hmWg5LUwCSA4FJ8gxapXJf35wJms+kcUUy xop0WjmZNEPh+Riis8ax2nRzcWag2cEctZD2E4pSgtUQ+do7xka1M5u9SEnTcMka LBLO51FH7+DZ3DsyqzLEccMY8AdBGVAIpFpzlO2H32/fiaWe0bFGP4bbEuWo8LEm S+P3xPAGjd8cuze+AUaLHwkJ977grmksKRSz7599ND+oUuBnU8k9rmX1Brt3PxUo tfbWdSRwVb3AXeKORDA36dCEXGrQIOC7N809Oj0KwiPkuzEyhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs3VCWWL0BSo7kq8FrPaUgDCFn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2ZhOGUzNjUtNDdjOC0z ZGRiLThkMzctNTRiOWQ1YWViYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlY6QDBsXET9+TARgW1ZXjQhizETCgY2k0kPAdHiNTuYWMlMeGfJJhZ 5+hqocKNs7FB4Ii8phDvdwEMarIHDwVp2xF2Qt1oMM4o5kEr9Gs4XR9e9z93BKdL 4GhNIlTsxUwQA/Y+/1feA1zX+RP0og7/+TL495XeUklVE91M/7uXNoVABk1Sj4DF 7S5qu1FPRRkXCN0NZfLwISPcmKcU1Ifx8Tni6M/rsFoVLOE0wXOGyKMjtEgFL2nI ozLT0ClNsnnMcS6cyO2qCdI9zpBlFm9RbCyj6x6OH6aCdKzKvulh1h5+ZY5rIo4j lpGJDp2mQysgCXt0qKSeCcYN1WZRL/k= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:55 2026 by rpki-client