$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba9acb1a-560e-3048-a0bf-ef017c6d645b.roa File: ba9acb1a-560e-3048-a0bf-ef017c6d645b.roa (raw, json) Hash identifier: 3bhgfPwV+LHz2auPuyfLMQtAFDCF+r7UqCZQr6GAsNk= Subject key identifier: AD:BF:3E:9E:28:DA:2A:F7:D7:7D:43:A1:74:1F:43:AB:64:99:A5:9E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E041BE9076C7E09F3FEC38 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba9acb1a-560e-3048-a0bf-ef017c6d645b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:41:be:90:76:c7:e0:9f:3f:ec:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e891195c-90cf-47ca-aea2-8c2e0bd476bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:cd:c1:d2:e3:6c:f2:89:b9:8c:1d:34:31: e6:61:f5:28:73:6f:3a:8d:3a:26:5c:95:b9:7f:7e: b6:a8:e1:46:40:f7:d4:6e:cd:e9:e9:38:be:a0:7d: 82:da:51:9c:14:e0:3c:e3:a1:c3:6f:4f:10:21:fb: ba:99:a3:15:50:cb:0c:79:61:83:77:87:ad:fc:eb: c1:7d:b8:29:c8:20:2e:9a:ba:e2:5d:df:70:dd:f3: d5:1c:33:77:9c:3d:9a:84:30:61:7b:a7:63:11:f7: 0b:a6:0c:9c:b8:c3:de:e7:07:6e:ce:07:68:91:fb: a9:93:85:a7:4c:f7:ea:79:a9:b8:00:b1:00:05:64: 5f:c4:48:46:55:c5:20:0f:27:da:a1:fe:0e:c7:6a: 05:9b:6e:0f:d8:98:71:a0:45:61:23:b0:69:3c:81: ce:eb:cc:b5:9c:cf:38:2a:ef:8c:bb:7e:b6:67:87: 1f:88:56:b1:05:c1:66:04:4b:e2:a0:fa:de:ef:b9: 2d:88:ed:36:22:34:93:a0:ff:d7:f3:35:5b:8d:1d: 90:13:e9:0f:ec:4a:fd:df:0e:5c:16:6a:5e:88:49: a0:90:c3:53:ea:49:0c:2a:bb:d9:b5:7c:19:6f:31: a9:84:fb:56:3a:7d:3e:6d:e0:02:c1:ab:0c:24:1c: 49:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BF:3E:9E:28:DA:2A:F7:D7:7D:43:A1:74:1F:43:AB:64:99:A5:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba9acb1a-560e-3048-a0bf-ef017c6d645b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7e:e5:7c:14:8b:27:c8:51:77:91:da:77:84:e7:31:ea:24: 20:4e:e4:f6:29:d8:36:2a:68:74:a2:bd:c9:0b:28:91:6c:56: 41:d7:5a:4b:1b:97:f5:c3:43:48:fb:37:f9:6e:7d:50:de:c7: e7:99:2b:72:9d:78:e0:84:6e:8d:a1:bd:8a:1e:3f:9c:31:e7: 67:f6:2d:09:3d:27:b4:b9:a0:4c:90:4a:36:1d:d6:c5:7e:eb: 00:5c:91:00:ce:a3:29:0d:0f:ad:08:05:55:f6:8a:7d:67:ef: c3:73:30:74:3d:70:bb:77:48:fa:56:40:3c:fc:e1:76:7b:dd: 0a:cd:b4:b8:fe:5d:19:06:70:3b:36:cc:f7:3b:07:9f:4c:f2: d2:9e:72:10:f8:b2:5d:3d:f1:f3:96:18:8f:be:4a:dc:d2:db: cd:b8:36:fa:61:11:00:8f:b8:71:26:7d:ec:96:12:31:e5:04: 01:b9:04:de:09:c7:a5:cc:91:11:0a:75:d2:3b:0c:50:a8:24: 51:20:ce:b4:86:11:37:77:04:29:dd:43:13:4e:d8:8a:3c:2f: a9:b4:b7:d8:d0:05:78:1d:df:6b:ac:a1:ce:12:18:da:07:fb: d8:a2:be:6f:06:d9:1c:f1:d3:46:b0:57:59:1f:91:11:1d:06: 61:9f:37:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EG+kHbH4J8/7DgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTg5MTE5NWMtOTBjZi00N2NhLWFlYTItOGMyZTBiZDQ3NmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX3NwdLjbPKJuYwdNDHmYfUoc286jTomXJW5 f362qOFGQPfUbs3p6Ti+oH2C2lGcFOA846HDb08QIfu6maMVUMsMeWGDd4et/OvB fbgpyCAumrriXd9w3fPVHDN3nD2ahDBhe6djEfcLpgycuMPe5wduzgdokfupk4Wn TPfqeam4ALEABWRfxEhGVcUgDyfaof4Ox2oFm24P2JhxoEVhI7BpPIHO68y1nM84 Ku+Mu362Z4cfiFaxBcFmBEvioPre77ktiO02IjSToP/X8zVbjR2QE+kP7Er93w5c FmpeiEmgkMNT6kkMKrvZtXwZbzGphPtWOn0+beACwasMJBxJuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2/Pp4o2ir3131DoXQfQ6tkmaWeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmE5YWNiMWEtNTYwZS0z MDQ4LWEwYmYtZWYwMTdjNmQ2NDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh+5XwUiyfIUXeR2neE5zHqJCBO5PYp2DYqaHSivckLKJFsVkHXWksb l/XDQ0j7N/lufVDex+eZK3KdeOCEbo2hvYoeP5wx52f2LQk9J7S5oEyQSjYd1sV+ 6wBckQDOoykND60IBVX2in1n78NzMHQ9cLt3SPpWQDz84XZ73QrNtLj+XRkGcDs2 zPc7B59M8tKechD4sl098fOWGI++StzS2824NvphEQCPuHEmfeyWEjHlBAG5BN4J x6XMkREKddI7DFCoJFEgzrSGETd3BCndQxNO2Io8L6m0t9jQBXgd32usoc4SGNoH +9iivm8G2Rzx00awV1kfkREdBmGfNzc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:50 2026 by rpki-client