$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa File: ccdc89e1-94e2-3966-988e-15606f6e1e06.roa (raw, json) Hash identifier: F2XObyyEqqeyyDgnYD9TzUGxeBQaAUVjYqXkjCZWyhw= Subject key identifier: FB:A9:9A:17:D5:82:6E:00:12:BF:3F:81:A9:BA:FD:47:E9:AB:A7:1B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0FB992D2AE85D250D7000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:fb:99:2d:2a:e8:5d:25:0d:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f4ae2b62-af26-4c57-94d5-936b884beb9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:e9:81:68:6a:8b:7c:54:51:d1:dc:bd:53: e7:74:9c:3a:da:8d:6e:d6:f7:f4:a9:4a:56:da:d6: d2:f8:0c:61:d4:f5:46:0b:2e:ae:52:1d:e6:70:8c: e7:9c:9d:64:52:3d:25:de:1b:3c:89:8e:62:50:61: 98:7f:03:1b:33:bf:9d:1d:bf:03:ce:08:ef:a2:15: ba:75:c9:8a:bc:78:b9:d4:ac:49:08:b5:f5:55:08: 6c:80:d4:45:7d:67:c4:85:4e:9e:c9:bf:2b:37:0c: 4e:eb:00:0f:68:0c:4f:78:cf:44:c7:46:9c:cf:75: 6a:37:d1:99:d6:ab:2b:ab:33:ba:84:bd:77:1c:6e: e7:06:f5:84:5c:f7:08:cf:d1:7e:b2:a0:a3:f5:66: 0c:80:8a:6c:e0:7d:be:b8:1f:86:43:e5:64:c4:ed: a9:3b:6f:b6:41:7c:11:b7:39:30:55:94:cc:a3:e5: 92:65:33:67:8c:52:ad:2c:d5:6a:02:12:de:a1:c3: 20:3d:40:6c:91:ea:6e:62:be:0d:fb:16:3e:4c:07: d4:a6:ae:eb:1e:f0:89:16:e7:63:44:01:64:d4:e3: 39:de:2d:b5:b9:35:ef:a0:37:40:78:b8:13:c1:f0: f1:1c:cd:f0:c9:96:f0:80:ec:51:61:a5:7a:68:8b: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A9:9A:17:D5:82:6E:00:12:BF:3F:81:A9:BA:FD:47:E9:AB:A7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ccdc89e1-94e2-3966-988e-15606f6e1e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:6a:0a:82:14:22:a7:ef:c5:99:fc:9b:bb:61:28:da:a4:de: aa:84:22:02:bf:e1:12:c6:bb:a7:bf:90:3b:c9:94:45:c6:e4: 70:df:41:f2:f8:25:84:d9:aa:5f:a0:de:fd:ee:c3:c4:03:c2: 09:19:8a:a2:6e:72:94:34:2d:16:2d:17:52:93:d8:c0:8d:b0: 07:7e:f1:f7:c7:2a:2c:af:a8:5a:44:87:b9:79:30:a9:7b:62: 08:4c:bd:51:d9:ca:5f:33:29:1d:e2:8d:30:79:23:13:89:d7: 95:62:66:91:57:1b:e9:fb:35:03:01:43:76:28:7d:23:0f:fb: f3:58:17:2e:3b:45:a1:1d:53:4f:2a:69:a4:a1:d6:6d:75:7d: 77:d7:84:4c:b1:a8:67:03:a5:62:7f:80:12:ac:89:c4:e0:77: d5:21:d4:cc:5c:bd:a3:ff:bc:02:08:a3:c7:5d:58:1e:39:6f: 39:19:c1:42:7a:94:38:77:5e:2f:4d:5e:27:42:bf:e4:6a:1e: 98:fb:52:8d:fc:07:b5:60:70:94:bc:69:53:f3:56:ca:dc:b5: 94:63:16:6b:d9:7c:37:ca:f7:9a:c0:d9:f7:27:3b:4b:06:65: 71:78:21:44:8b:91:0c:03:4b:fc:c8:60:f8:fd:8f:14:ad:9f: 7b:2a:ba:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PuZLSroXSUNcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjRhZTJiNjItYWYyNi00YzU3LTk0ZDUtOTM2Yjg4NGJlYjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TLpgWhqi3xUUdHcvVPndJw62o1u1vf0qUpW 2tbS+Axh1PVGCy6uUh3mcIznnJ1kUj0l3hs8iY5iUGGYfwMbM7+dHb8DzgjvohW6 dcmKvHi51KxJCLX1VQhsgNRFfWfEhU6eyb8rNwxO6wAPaAxPeM9Ex0acz3VqN9GZ 1qsrqzO6hL13HG7nBvWEXPcIz9F+sqCj9WYMgIps4H2+uB+GQ+VkxO2pO2+2QXwR tzkwVZTMo+WSZTNnjFKtLNVqAhLeocMgPUBskepuYr4N+xY+TAfUpq7rHvCJFudj RAFk1OM53i21uTXvoDdAeLgTwfDxHM3wyZbwgOxRYaV6aItAgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPupmhfVgm4AEr8/gam6/Ufpq6cbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2NkYzg5ZTEtOTRlMi0z OTY2LTk4OGUtMTU2MDZmNmUxZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJqCoIUIqfvxZn8m7thKNqk3qqEIgK/4RLGu6e/kDvJlEXG5HDfQfL4 JYTZql+g3v3uw8QDwgkZiqJucpQ0LRYtF1KT2MCNsAd+8ffHKiyvqFpEh7l5MKl7 YghMvVHZyl8zKR3ijTB5IxOJ15ViZpFXG+n7NQMBQ3YofSMP+/NYFy47RaEdU08q aaSh1m11fXfXhEyxqGcDpWJ/gBKsicTgd9Uh1MxcvaP/vAIIo8ddWB45bzkZwUJ6 lDh3Xi9NXidCv+RqHpj7Uo38B7VgcJS8aVPzVsrctZRjFmvZfDfK95rA2fcnO0sG ZXF4IUSLkQwDS/zIYPj9jxStn3squq8= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:54 2026 by rpki-client