$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa File: af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa (raw, json) Hash identifier: KK8VOISQKALITw57lRCkR+M201/U2SaEujrMvj5440s= Subject key identifier: 19:32:0E:C3:5A:11:1E:91:AF:5E:38:AC:3C:68:E5:F3:8A:A9:41:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02DA7B299C876121EC400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2d:a7:b2:99:c8:76:12:1e:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=203494fa-6eec-4cba-8146-ecd088207ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5c:00:08:2a:df:6a:77:21:3a:a3:8d:f0:7c: 3a:be:68:3b:72:38:2d:10:74:a7:ac:cb:99:a9:a1: 2a:ff:53:13:6a:d0:fa:97:ab:66:7b:fa:3d:43:b0: 77:fa:12:c6:be:5d:92:82:38:22:aa:56:d1:8b:e8: 34:b7:37:f5:8c:a7:1b:a9:ef:72:f5:31:9a:fa:f9: 10:74:20:d4:a3:7e:db:36:e4:dd:2f:b2:60:58:50: b3:2e:5d:d6:83:51:59:53:17:a3:7f:e2:b5:70:c9: 6e:91:fa:0c:27:49:27:e8:58:14:2f:84:b1:66:36: c6:0f:4c:24:27:56:36:0a:28:41:86:cf:05:3a:96: f4:ce:21:fd:3f:ec:81:60:59:bc:ef:14:89:2a:0f: 9a:06:d4:3f:78:6c:ad:47:e2:9a:71:6f:8d:24:65: 89:bc:2e:80:1f:60:b3:27:13:47:36:46:03:5c:df: 15:22:f2:1b:51:34:8d:54:a0:52:e4:12:f3:67:3f: 27:83:38:11:c2:a0:70:c9:84:66:98:3c:28:e6:07: eb:09:7e:b4:55:63:5f:3a:bd:96:02:52:0c:9c:c0: 54:3c:75:90:2b:b6:45:e7:73:3b:b0:10:1e:5f:a7: b0:bd:6b:39:dc:ac:5a:79:b2:04:55:93:36:ab:39: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:32:0E:C3:5A:11:1E:91:AF:5E:38:AC:3C:68:E5:F3:8A:A9:41:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af1664c1-ee76-33b7-9e27-7ef52b32d6ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b7:0c:34:4f:15:e5:15:de:1f:b9:f4:f7:51:01:21:b0:a4: 49:6e:9a:fc:5d:2b:b9:10:77:99:f3:d6:fd:03:5c:61:0e:02: d5:91:44:2d:0b:d6:55:56:5c:14:27:b3:40:64:e2:f1:7c:93: ee:f9:15:ea:d7:96:51:f7:bf:ba:7c:91:3f:e1:63:82:34:05: 4c:c4:8f:0e:9a:48:0a:81:40:2f:db:5a:32:c7:e9:95:15:ca: 10:99:e3:2c:bb:ee:f3:01:df:8c:50:0b:0a:f8:e0:29:fa:af: a9:56:25:59:c3:27:38:f4:1a:e6:b5:43:a1:34:55:10:fc:ae: 8d:40:7b:ef:9d:0b:48:b7:65:71:3d:c1:5c:c4:00:fa:ad:b0: 7a:91:ec:78:46:75:73:e8:c0:46:ee:49:1e:90:40:eb:4b:43: 1f:3e:17:84:82:2f:c4:cc:dc:c2:a3:94:f2:13:70:97:f4:d9: bd:d3:74:fb:28:b0:1e:f8:ff:bd:3d:a5:7f:e1:1b:e5:ea:23: 3a:e7:a0:70:0e:6c:78:76:37:03:0e:be:1b:bd:d1:7a:49:2a: 4e:69:3c:b0:7d:17:11:5c:79:b7:5b:2f:ef:ae:80:8c:f7:b4: af:fb:1b:e6:01:6c:a4:fa:c5:bf:e8:98:c6:b1:71:f6:6b:bd: 2e:26:f9:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4C2nspnIdhIexAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjAzNDk0ZmEtNmVlYy00Y2JhLTgxNDYtZWNkMDg4MjA3YmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41wACCrfanchOqON8Hw6vmg7cjgtEHSnrMuZ qaEq/1MTatD6l6tme/o9Q7B3+hLGvl2SgjgiqlbRi+g0tzf1jKcbqe9y9TGa+vkQ dCDUo37bNuTdL7JgWFCzLl3Wg1FZUxejf+K1cMlukfoMJ0kn6FgUL4SxZjbGD0wk J1Y2CihBhs8FOpb0ziH9P+yBYFm87xSJKg+aBtQ/eGytR+KacW+NJGWJvC6AH2Cz JxNHNkYDXN8VIvIbUTSNVKBS5BLzZz8ngzgRwqBwyYRmmDwo5gfrCX60VWNfOr2W AlIMnMBUPHWQK7ZF53M7sBAeX6ewvWs53KxaebIEVZM2qzlrIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkyDsNaER6Rr144rDxo5fOKqUENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWYxNjY0YzEtZWU3Ni0z M2I3LTllMjctN2VmNTJiMzJkNmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+3DDRPFeUV3h+59PdRASGwpElumvxdK7kQd5nz1v0DXGEOAtWRRC0L 1lVWXBQns0Bk4vF8k+75FerXllH3v7p8kT/hY4I0BUzEjw6aSAqBQC/bWjLH6ZUV yhCZ4yy77vMB34xQCwr44Cn6r6lWJVnDJzj0Gua1Q6E0VRD8ro1Ae++dC0i3ZXE9 wVzEAPqtsHqR7HhGdXPowEbuSR6QQOtLQx8+F4SCL8TM3MKjlPITcJf02b3TdPso sB74/709pX/hG+XqIzrnoHAObHh2NwMOvhu90XpJKk5pPLB9FxFcebdbL++ugIz3 tK/7G+YBbKT6xb/omMaxcfZrvS4m+cs= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:39 2026 by rpki-client