$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1137ac0-f60c-390f-a788-13187a9aecb6.roa File: c1137ac0-f60c-390f-a788-13187a9aecb6.roa (raw, json) Hash identifier: gYDrB+2nfDUdPFO2jdxGoG5/SFEYkRX84RKjnmGDq7E= Subject key identifier: 45:35:A2:00:B4:BC:6D:9B:E0:BF:DD:27:4D:7E:52:A9:04:7C:94:E4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F8483C4B8585D9EC2C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1137ac0-f60c-390f-a788-13187a9aecb6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f8:48:3c:4b:85:85:d9:ec:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7013cbae-6eac-4c06-95fe-8e0b2cdd2251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d7:88:35:36:59:b8:6c:34:b1:b4:6d:67:8e: 2c:a2:21:86:76:50:e5:dd:10:49:f4:cd:e0:00:a8: 44:f6:35:60:d6:14:dc:e3:46:7c:32:11:64:37:77: 2c:2f:6e:1f:8e:86:69:72:bb:7c:36:0b:d6:8b:c1: 70:35:4f:67:5f:49:29:4a:bc:67:c1:43:0c:6c:c8: 49:24:3c:f0:cd:40:cf:d8:82:5f:9b:48:01:5e:7f: 8c:8b:df:95:b4:07:44:17:7c:f8:99:a3:ac:1e:c5: 35:21:a1:35:37:04:8d:b1:58:4f:9e:8f:62:25:c3: 93:3b:38:fb:a0:a1:50:cd:24:99:0e:c1:1d:56:ed: 0b:99:fc:03:8c:bd:99:40:12:d6:e5:00:8e:9f:65: ce:70:4e:1c:82:02:eb:80:b8:30:a2:5e:40:40:55: bd:35:b0:4b:3e:67:c8:c2:95:ee:1d:38:6e:47:82: d2:74:2c:3e:90:fd:ec:6d:66:79:86:05:de:51:b1: bf:04:b6:81:27:fb:a1:03:79:67:a0:41:6b:b8:73: ed:85:e0:b9:0b:4a:7a:a4:11:a6:0e:25:3d:1f:fb: cf:aa:eb:99:0c:62:78:b1:31:96:f7:5a:56:2b:cd: 27:68:3a:6b:2e:f1:af:b5:81:49:f0:87:8b:6d:c9: 13:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:35:A2:00:B4:BC:6D:9B:E0:BF:DD:27:4D:7E:52:A9:04:7C:94:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1137ac0-f60c-390f-a788-13187a9aecb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3e:e4:2b:3c:74:22:44:72:eb:dd:1e:9f:72:f4:76:30:46: b0:c2:f1:71:d7:8d:90:73:b3:36:be:2d:6e:15:76:64:c8:a5: fe:2b:4c:71:e8:3b:ae:ca:16:a4:22:e8:07:cf:07:2c:0c:13: 30:df:55:8b:67:8b:9b:50:51:51:61:41:a1:20:73:88:68:c2: 5e:b3:99:d8:d2:90:f1:2c:1b:92:1c:6f:08:a3:66:4f:da:84: 57:7b:eb:b8:72:77:7d:11:2c:4e:a7:be:f8:0c:3f:ab:16:15: 01:7a:96:43:75:6b:79:39:5b:cf:17:ed:fb:a9:9b:d7:66:38: 45:a8:1f:41:60:5a:3e:84:4d:f2:b5:60:6d:e6:f9:22:9e:1e: 87:b6:8c:88:d1:7b:84:c9:7d:52:5e:e9:83:c4:e0:7f:b7:71: 97:7e:5d:ad:48:02:6e:11:cf:08:95:86:39:ba:29:52:6d:7e: 26:1e:d4:1f:ce:d8:2b:81:96:0f:f0:53:c4:4f:e6:30:62:99: 25:66:73:d2:09:40:12:52:5a:ae:de:d1:ae:22:d4:ab:63:74: 54:10:6f:eb:e7:b9:92:b1:c8:cc:e7:41:10:67:a2:44:f5:d0: 81:d7:a3:34:82:02:48:d8:e5:2e:9f:02:6e:41:44:63:c5:56: 54:34:b8:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PhIPEuFhdnsLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzAxM2NiYWUtNmVhYy00YzA2LTk1ZmUtOGUwYjJjZGQyMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhteINTZZuGw0sbRtZ44soiGGdlDl3RBJ9M3g AKhE9jVg1hTc40Z8MhFkN3csL24fjoZpcrt8NgvWi8FwNU9nX0kpSrxnwUMMbMhJ JDzwzUDP2IJfm0gBXn+Mi9+VtAdEF3z4maOsHsU1IaE1NwSNsVhPno9iJcOTOzj7 oKFQzSSZDsEdVu0LmfwDjL2ZQBLW5QCOn2XOcE4cggLrgLgwol5AQFW9NbBLPmfI wpXuHThuR4LSdCw+kP3sbWZ5hgXeUbG/BLaBJ/uhA3lnoEFruHPtheC5C0p6pBGm DiU9H/vPquuZDGJ4sTGW91pWK80naDprLvGvtYFJ8IeLbckTkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEU1ogC0vG2b4L/dJ01+UqkEfJTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzExMzdhYzAtZjYwYy0z OTBmLWE3ODgtMTMxODdhOWFlY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM+5Cs8dCJEcuvdHp9y9HYwRrDC8XHXjZBzsza+LW4VdmTIpf4rTHHo O67KFqQi6AfPBywMEzDfVYtni5tQUVFhQaEgc4howl6zmdjSkPEsG5IcbwijZk/a hFd767hyd30RLE6nvvgMP6sWFQF6lkN1a3k5W88X7fupm9dmOEWoH0FgWj6ETfK1 YG3m+SKeHoe2jIjRe4TJfVJe6YPE4H+3cZd+Xa1IAm4RzwiVhjm6KVJtfiYe1B/O 2CuBlg/wU8RP5jBimSVmc9IJQBJSWq7e0a4i1KtjdFQQb+vnuZKxyMznQRBnokT1 0IHXozSCAkjY5S6fAm5BRGPFVlQ0uIA= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:29 2026 by rpki-client