$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/97e26245-26c5-3b0a-a76e-56972ecc72ba.roa File: 97e26245-26c5-3b0a-a76e-56972ecc72ba.roa (raw, json) Hash identifier: wSQJ7Uf7gAjFJjEEvgZcLDUQHkJeKFhKJK4GtBfzQbc= Subject key identifier: 2D:52:ED:0D:88:8B:C5:95:66:4E:BE:45:C0:B2:30:1F:21:BB:46:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E03BDCA4635B779CE9AC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/97e26245-26c5-3b0a-a76e-56972ecc72ba.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:3b:dc:a4:63:5b:77:9c:e9:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a8ae203b-b409-4e1e-974a-8bcf124eadcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b6:05:4d:11:51:60:f0:a5:42:67:80:6d:52: c2:fe:a0:65:1a:c9:bc:0c:55:e0:57:0b:05:fd:21: 4b:ae:58:44:0e:bf:4e:fc:7e:c9:35:e9:a2:ed:a9: c8:bf:e1:5a:d0:37:ea:31:8c:b8:83:20:36:c3:7f: b4:a6:ce:c3:be:03:b5:aa:13:92:c3:7f:c3:14:03: 08:a4:1a:d0:21:14:d9:48:bc:5f:09:0a:95:d6:2a: 51:19:e8:9f:44:32:1c:21:04:81:da:4a:3b:c7:d6: 92:b4:8c:62:bc:68:ef:4f:f0:05:4d:01:2c:e2:6e: 99:2c:5c:4b:e2:19:25:e4:27:c5:74:61:8a:83:b0: cd:98:1b:de:b2:d7:3b:eb:09:8b:11:75:d0:f2:9b: a5:48:d8:85:38:07:03:26:12:6e:c3:3d:c2:10:54: ea:c0:45:dd:50:98:fc:89:ea:fe:7b:99:81:29:eb: 8e:93:5e:0a:55:06:f3:9f:28:a0:ce:2c:7c:b4:f6: 5c:e1:dc:e3:fb:f2:87:18:d1:ac:b4:fb:8b:49:f3: 74:e0:1e:0f:a7:2b:ec:75:af:06:8f:26:2b:16:15: d6:23:5c:79:24:b2:5a:1a:20:ae:a7:92:ed:70:d7: 71:4f:4b:cf:3d:a4:81:16:a7:32:0f:91:ce:2b:7c: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:52:ED:0D:88:8B:C5:95:66:4E:BE:45:C0:B2:30:1F:21:BB:46:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/97e26245-26c5-3b0a-a76e-56972ecc72ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:96:ca:53:3e:3c:78:e3:2d:b1:41:63:94:af:5a:34:6c:61: 78:91:55:a8:e5:4d:17:ec:82:8d:e1:75:fc:65:4b:f6:41:68: e8:51:01:7b:9b:41:95:3f:ce:36:83:ec:c6:7d:e6:24:c9:61: e9:f1:e9:db:89:40:b1:18:d4:aa:67:32:c1:80:a2:d2:22:7e: de:33:5d:fb:ea:9c:eb:59:c0:69:7c:6b:f3:c1:38:2d:cc:f0: b1:59:40:18:da:10:16:72:2a:49:ab:c5:0e:42:35:0f:0d:f8: 49:6d:43:5e:b2:44:97:6b:dd:55:16:d1:21:ae:00:90:54:cf: 80:f2:76:d1:61:95:57:3c:65:75:d1:a2:92:c1:1b:d9:5b:3f: 6c:47:a6:e0:3c:f0:c2:42:d9:19:76:5a:cf:17:a2:e7:94:bc: bb:8c:40:f7:fe:cd:a1:42:18:be:43:ca:f3:4d:c4:53:98:cd: c9:b6:fc:b9:63:39:9c:4a:43:7b:d5:71:28:c0:04:db:c1:49: 00:01:14:66:d0:d2:8e:54:4f:11:1c:53:16:5f:bf:a6:c1:26: 19:d9:07:56:af:b8:bc:70:a6:bb:52:d0:44:b5:b1:69:44:c0: 12:86:27:11:a5:79:b4:e0:ed:9e:bf:6b:e7:a3:e4:7d:e5:f9: e8:ff:34:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DvcpGNbd5zprIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YThhZTIwM2ItYjQwOS00ZTFlLTk3NGEtOGJjZjEyNGVhZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLYFTRFRYPClQmeAbVLC/qBlGsm8DFXgVwsF /SFLrlhEDr9O/H7JNemi7anIv+Fa0DfqMYy4gyA2w3+0ps7DvgO1qhOSw3/DFAMI pBrQIRTZSLxfCQqV1ipRGeifRDIcIQSB2ko7x9aStIxivGjvT/AFTQEs4m6ZLFxL 4hkl5CfFdGGKg7DNmBvestc76wmLEXXQ8pulSNiFOAcDJhJuwz3CEFTqwEXdUJj8 ier+e5mBKeuOk14KVQbznyigzix8tPZc4dzj+/KHGNGstPuLSfN04B4Ppyvsda8G jyYrFhXWI1x5JLJaGiCup5LtcNdxT0vPPaSBFqcyD5HOK3wh6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1S7Q2Ii8WVZk6+RcCyMB8hu0YXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTdlMjYyNDUtMjZjNS0z YjBhLWE3NmUtNTY5NzJlY2M3MmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqWylM+PHjjLbFBY5SvWjRsYXiRVajlTRfsgo3hdfxlS/ZBaOhRAXub QZU/zjaD7MZ95iTJYenx6duJQLEY1KpnMsGAotIift4zXfvqnOtZwGl8a/PBOC3M 8LFZQBjaEBZyKkmrxQ5CNQ8N+EltQ16yRJdr3VUW0SGuAJBUz4DydtFhlVc8ZXXR opLBG9lbP2xHpuA88MJC2Rl2Ws8XoueUvLuMQPf+zaFCGL5DyvNNxFOYzcm2/Llj OZxKQ3vVcSjABNvBSQABFGbQ0o5UTxEcUxZfv6bBJhnZB1avuLxwprtS0ES1sWlE wBKGJxGlebTg7Z6/a+ej5H3l+ej/NEY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:48 2026 by rpki-client