$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa File: 8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa (raw, json) Hash identifier: a6bRT/0VpQF8HRpQnTqzP5O1GJhynomEWpO2LbmIUyY= Subject key identifier: DB:A5:57:3C:6D:6C:CB:60:00:9D:F0:DD:26:71:95:44:60:DF:D4:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03DEF5B4C6A3581838E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:3d:ef:5b:4c:6a:35:81:83:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=93d92aa5-2f29-4066-81f7-db18ca1f0480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:5e:32:08:da:ec:f5:d5:ed:4f:dd:cd:ba: 83:50:60:d2:cd:6b:f0:95:45:f4:f6:73:5f:b1:94: 2b:71:7d:ff:ce:a7:90:a9:7d:70:c7:3e:db:14:ab: b0:6a:6d:d2:17:72:bc:a2:39:0b:80:ce:bd:23:12: f0:e5:c5:41:13:84:6b:34:16:39:36:de:b2:94:b6: c5:8d:e5:06:eb:7c:97:20:f6:d9:59:3a:2c:b8:f8: 24:d6:19:75:80:b5:87:7f:85:9a:b4:74:af:ae:03: da:ca:e8:c2:a4:50:59:b7:0e:cd:5f:fe:57:c7:40: ab:df:e2:64:6e:c0:83:59:26:8a:9f:51:0d:ef:44: ac:ee:e6:44:12:07:90:a0:0e:e3:3a:b2:62:54:5d: 8a:5e:dd:d7:f1:12:ce:d9:b2:2f:23:06:94:cd:23: d1:73:35:e3:3d:56:a5:bf:8f:7a:64:3f:41:e7:76: 35:de:38:63:bf:03:ed:1a:58:96:25:eb:1d:4b:a8: 77:c3:87:5c:29:5b:2d:42:d0:aa:32:86:13:43:98: 69:78:0e:7d:61:2d:37:80:30:ed:4c:72:1c:f7:58: 88:58:50:bf:3a:19:97:0e:ab:a8:6f:fe:9e:43:de: a3:bb:88:6a:f0:e3:90:b0:73:3b:97:8b:d5:b4:e7: 20:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A5:57:3C:6D:6C:CB:60:00:9D:F0:DD:26:71:95:44:60:DF:D4:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8af4abf6-2bbc-3c16-a9c6-c8e238d06702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:db:f6:77:25:6f:37:e8:b0:2e:85:bf:63:d9:0d:44:45:34: f6:0b:7d:37:d4:63:f1:dc:30:72:52:9b:06:71:e3:8f:27:7d: ce:4f:ee:37:ba:9a:0c:17:01:da:22:51:9a:7f:fa:a0:bd:4b: ce:18:6f:83:17:ee:28:6d:24:fb:13:92:eb:1f:ad:2f:4b:d9: 27:0c:96:f4:3e:a6:ff:a1:5a:9e:b9:c8:2f:4e:5f:a2:91:87: cb:ed:67:69:6d:87:68:fe:68:61:91:56:f6:35:59:6a:3b:14: 03:82:c3:59:41:8a:9c:34:69:c3:e4:30:0f:b1:5a:dd:bd:43: bf:4e:d7:72:91:fd:37:4c:13:8b:34:77:3e:40:3f:6c:1a:16: 62:81:99:15:06:fe:0d:6e:23:4a:11:39:46:5d:55:5a:97:49: 6f:ca:cb:7d:3d:f2:8f:8f:b5:44:e4:b9:ec:e6:49:94:89:9b: f0:28:7c:37:81:cd:55:21:e4:e9:21:fb:72:19:73:30:c2:b7: 34:32:4c:df:dd:39:bb:66:e8:86:33:1e:63:b7:af:fb:d4:11: a8:fd:92:27:9d:49:33:a6:6d:a3:44:80:90:4e:62:2b:ef:9f: 15:0e:54:6b:60:1f:d7:0d:47:86:80:bc:d0:42:9a:06:d9:80: 56:f7:48:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4D3vW0xqNYGDjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTNkOTJhYTUtMmYyOS00MDY2LTgxZjctZGIxOGNhMWYwNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVReMgja7PXV7U/dzbqDUGDSzWvwlUX09nNf sZQrcX3/zqeQqX1wxz7bFKuwam3SF3K8ojkLgM69IxLw5cVBE4RrNBY5Nt6ylLbF jeUG63yXIPbZWTosuPgk1hl1gLWHf4WatHSvrgPayujCpFBZtw7NX/5Xx0Cr3+Jk bsCDWSaKn1EN70Ss7uZEEgeQoA7jOrJiVF2KXt3X8RLO2bIvIwaUzSPRczXjPVal v496ZD9B53Y13jhjvwPtGliWJesdS6h3w4dcKVstQtCqMoYTQ5hpeA59YS03gDDt THIc91iIWFC/OhmXDquob/6eQ96ju4hq8OOQsHM7l4vVtOcgwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNulVzxtbMtgAJ3w3SZxlURg39QMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGFmNGFiZjYtMmJiYy0z YzE2LWE5YzYtYzhlMjM4ZDA2NzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPb9nclbzfosC6Fv2PZDURFNPYLfTfUY/HcMHJSmwZx448nfc5P7je6 mgwXAdoiUZp/+qC9S84Yb4MX7ihtJPsTkusfrS9L2ScMlvQ+pv+hWp65yC9OX6KR h8vtZ2lth2j+aGGRVvY1WWo7FAOCw1lBipw0acPkMA+xWt29Q79O13KR/TdME4s0 dz5AP2waFmKBmRUG/g1uI0oROUZdVVqXSW/Ky3098o+PtUTkuezmSZSJm/AofDeB zVUh5Okh+3IZczDCtzQyTN/dObtm6IYzHmO3r/vUEaj9kiedSTOmbaNEgJBOYivv nxUOVGtgH9cNR4aAvNBCmgbZgFb3SMM= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:05 2026 by rpki-client