$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa File: a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa (raw, json) Hash identifier: 6+NduMNw9xRjmEFkL4/w/kxjTXwdTSmQQQA2bJPvfKQ= Subject key identifier: 24:4D:16:6A:2E:86:76:B7:E4:02:5B:22:9B:CB:6C:C7:B5:B5:85:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F2E37EF72863FFADE6E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f2:e3:7e:f7:28:63:ff:ad:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ab537cdd-d92b-4836-ae89-6a02ea0c3347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:73:80:01:ea:96:93:51:79:99:ad:d6:c7: 7c:49:e2:2f:f7:44:f0:85:92:eb:6d:73:00:9c:41: 52:b4:41:2a:db:fd:24:75:59:f0:14:2f:10:43:93: 56:46:9a:fc:e7:9f:eb:49:a1:fe:f5:01:82:d2:8c: c8:05:b5:f1:27:da:3f:1e:56:9f:e3:38:55:74:f4: 3a:89:60:ae:57:d6:36:eb:28:e0:68:c1:0b:39:f2: 35:8e:55:15:be:62:a1:67:b0:99:89:fd:fe:2b:08: 7c:2f:24:4a:b6:eb:18:9e:8b:06:3c:ad:36:1d:34: 0e:6b:58:cd:89:4d:c8:ba:2b:45:e7:bd:bd:4a:66: c3:e1:c9:24:d2:42:ae:27:65:71:61:36:d8:02:c8: e9:48:62:7d:58:c9:9a:0a:c9:cf:79:ef:a2:82:18: 93:57:b2:77:7e:43:e7:21:d9:d7:da:77:4e:2e:5d: 92:b0:4d:31:21:e2:6a:d9:6d:f7:88:96:7c:dc:af: 1e:2e:40:5a:32:4c:74:b3:77:9f:a0:ed:c1:1e:e9: be:60:28:65:0d:37:0e:4a:3b:68:79:e3:69:5f:9b: aa:80:79:1c:ce:ac:71:b3:bd:9f:86:0b:e8:ab:07: a5:4f:87:b3:77:fe:c8:fd:f8:39:d8:6b:82:79:66: 38:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4D:16:6A:2E:86:76:B7:E4:02:5B:22:9B:CB:6C:C7:B5:B5:85:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1d4f84d-72f5-38c1-8e4d-9a453c823383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5c:80:be:71:2a:e1:28:32:f0:66:cd:15:93:81:b2:30:a6: c5:a1:54:4e:00:25:fb:dc:fa:f0:bd:48:26:a4:9e:56:da:e5: 40:4c:3d:df:63:e0:14:59:f8:1b:f7:78:42:78:1b:b2:00:ed: 4d:83:90:0f:09:11:ad:72:4b:43:33:fb:9b:74:f6:48:09:cc: 4a:af:46:33:cc:bb:78:42:31:28:2a:c6:fd:0f:4d:c9:49:8a: e6:2b:ef:df:7e:01:37:15:9c:7e:57:92:f9:97:a7:9a:4f:ad: fd:18:c3:7b:b1:09:47:0e:c1:32:fd:70:5b:2e:e4:31:a2:ab: 19:27:65:49:0d:68:17:58:f1:d3:d1:78:a2:db:b8:b2:ea:f5: 03:bd:0c:e3:5f:dd:3e:4b:b6:89:bf:28:7c:c1:a3:db:81:ba: c1:1b:24:b9:58:43:be:26:52:0b:a0:bf:3a:a2:14:90:e8:14: b2:c0:f5:fb:a3:f3:3f:2a:71:5b:d6:e4:2e:c4:e6:68:d7:67: 83:40:e1:35:5d:2f:c5:10:29:d4:04:fa:37:72:0f:ad:d1:f0: 25:b9:d2:29:92:bf:25:06:8f:77:3d:a9:9c:6c:4c:9f:b7:fe: 48:bc:31:2e:bf:74:64:84:b2:c9:93:fc:7c:4c:19:df:42:32: b7:95:d7:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PLjfvcoY/+t5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWI1MzdjZGQtZDkyYi00ODM2LWFlODktNmEwMmVhMGMzMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaZzgAHqlpNReZmt1sd8SeIv90TwhZLrbXMA nEFStEEq2/0kdVnwFC8QQ5NWRpr855/rSaH+9QGC0ozIBbXxJ9o/Hlaf4zhVdPQ6 iWCuV9Y26yjgaMELOfI1jlUVvmKhZ7CZif3+Kwh8LyRKtusYnosGPK02HTQOa1jN iU3IuitF5729SmbD4ckk0kKuJ2VxYTbYAsjpSGJ9WMmaCsnPee+ighiTV7J3fkPn IdnX2ndOLl2SsE0xIeJq2W33iJZ83K8eLkBaMkx0s3efoO3BHum+YChlDTcOSjto eeNpX5uqgHkczqxxs72fhgvoqwelT4ezd/7I/fg52GuCeWY48wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRNFmouhna35AJbIpvLbMe1tYVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTFkNGY4NGQtNzJmNS0z OGMxLThlNGQtOWE0NTNjODIzMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRcgL5xKuEoMvBmzRWTgbIwpsWhVE4AJfvc+vC9SCaknlba5UBMPd9j 4BRZ+Bv3eEJ4G7IA7U2DkA8JEa1yS0Mz+5t09kgJzEqvRjPMu3hCMSgqxv0PTclJ iuYr799+ATcVnH5XkvmXp5pPrf0Yw3uxCUcOwTL9cFsu5DGiqxknZUkNaBdY8dPR eKLbuLLq9QO9DONf3T5Ltom/KHzBo9uBusEbJLlYQ74mUgugvzqiFJDoFLLA9fuj 8z8qcVvW5C7E5mjXZ4NA4TVdL8UQKdQE+jdyD63R8CW50imSvyUGj3c9qZxsTJ+3 /ki8MS6/dGSEssmT/HxMGd9CMreV13o= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:38 2026 by rpki-client