$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ece85742-0ed4-3250-bc23-bd37778ba20c.roa File: ece85742-0ed4-3250-bc23-bd37778ba20c.roa (raw, json) Hash identifier: EZdX8wbLO3ch7e8IK9C0kKNc+I3TjYUy0AHlJhLRAQ0= Subject key identifier: FA:C8:36:0A:0B:25:C5:FB:5B:09:E8:4B:5F:47:D1:AB:39:4B:BE:DA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04005E2E0C8C6F7046200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ece85742-0ed4-3250-bc23-bd37778ba20c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:40:05:e2:e0:c8:c6:f7:04:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3d00a351-9637-4ed5-aa9d-eca71cacb939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:02:20:1c:1b:1e:e1:0d:4f:67:09:b2:76: 75:34:0a:bb:aa:81:d6:4e:5f:45:c7:be:e2:fe:a5: 67:31:61:68:1f:85:43:9e:85:18:df:aa:05:36:25: 49:68:03:77:6c:09:1b:a5:a5:18:de:c6:2f:77:fd: 66:13:49:95:be:8e:18:e8:f9:3d:0e:c1:6f:71:91: d0:12:48:8f:d9:19:45:73:4f:31:cb:91:21:ad:fc: a7:cc:fb:4e:e4:ed:4c:08:f0:e7:16:40:8b:01:1d: d4:9b:b7:65:86:25:c7:33:6b:29:8e:a1:cc:2c:4c: 69:19:cc:b0:c9:fe:37:d5:4a:cc:81:2f:50:8f:ae: 74:aa:7a:d2:06:dd:ac:76:9c:07:04:52:c5:1e:0e: 96:7d:f2:d6:27:39:0c:38:e9:48:e1:c6:1d:03:e6: d3:00:1a:00:8d:93:1d:82:6a:4c:95:b4:a4:51:9e: a4:64:b9:46:f4:4d:2e:57:ee:a0:ba:3e:70:1a:72: 82:5b:ab:0d:c1:94:a4:35:ea:1b:5b:d3:a0:7e:db: 1f:99:8c:53:85:61:e4:16:fb:cf:7f:f7:9f:d1:a1: 3f:5b:3f:3d:5f:40:05:49:87:e3:40:8e:d5:fa:93: ae:0c:30:67:2b:28:77:19:c2:e0:ac:a5:ed:4f:8f: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C8:36:0A:0B:25:C5:FB:5B:09:E8:4B:5F:47:D1:AB:39:4B:BE:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ece85742-0ed4-3250-bc23-bd37778ba20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bc:91:30:dc:78:74:10:04:0c:3a:16:aa:7c:b9:26:ac:73: 71:60:d5:f2:b3:ba:c4:f6:1a:44:2f:11:2a:87:55:ac:71:90: 9a:eb:da:7f:6c:c4:0d:0d:2a:e5:a4:bc:80:b4:1f:d9:b1:b7: 0b:95:94:57:4d:c2:66:7b:4f:df:d8:2a:36:1b:31:d7:43:fe: 78:8b:82:a2:5a:65:1b:e2:fc:2d:b5:bb:10:8b:2e:68:da:96: 72:24:24:75:c0:08:7b:1c:c9:ec:f0:bb:0a:39:3f:72:af:e0: c6:99:00:47:06:77:2b:17:ee:ba:a9:22:39:dc:05:45:df:e0: c6:31:76:8d:1f:cf:a4:bf:fb:b5:52:2a:32:4c:cd:99:19:70: 61:a3:d9:87:34:04:3f:b3:01:82:6f:03:52:3b:87:79:c1:27: 05:02:07:d8:40:d0:a4:8e:b3:3f:17:6c:af:18:a9:44:2e:46: 8a:d5:a8:39:3b:c0:0f:c9:6a:a3:ba:48:1a:78:a3:35:22:ec: fc:2b:67:49:43:e6:dc:a1:bc:e1:8d:64:d8:fc:07:a0:70:5b: ac:5e:7f:d7:36:21:e9:42:8f:b0:d6:c1:2e:a1:14:6d:32:53: 78:09:03:0a:22:2b:68:ad:a8:bb:4f:00:fa:0c:8f:d1:4c:56: b2:eb:d8:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EAF4uDIxvcEYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2QwMGEzNTEtOTYzNy00ZWQ1LWFhOWQtZWNhNzFjYWNiOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDsCIBwbHuENT2cJsnZ1NAq7qoHWTl9Fx77i /qVnMWFoH4VDnoUY36oFNiVJaAN3bAkbpaUY3sYvd/1mE0mVvo4Y6Pk9DsFvcZHQ EkiP2RlFc08xy5EhrfynzPtO5O1MCPDnFkCLAR3Um7dlhiXHM2spjqHMLExpGcyw yf431UrMgS9Qj650qnrSBt2sdpwHBFLFHg6WffLWJzkMOOlI4cYdA+bTABoAjZMd gmpMlbSkUZ6kZLlG9E0uV+6guj5wGnKCW6sNwZSkNeobW9OgftsfmYxThWHkFvvP f/ef0aE/Wz89X0AFSYfjQI7V+pOuDDBnKyh3GcLgrKXtT4+meQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrINgoLJcX7WwnoS19H0as5S77aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWNlODU3NDItMGVkNC0z MjUwLWJjMjMtYmQzNzc3OGJhMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy8kTDceHQQBAw6Fqp8uSasc3Fg1fKzusT2GkQvESqHVaxxkJrr2n9s xA0NKuWkvIC0H9mxtwuVlFdNwmZ7T9/YKjYbMddD/niLgqJaZRvi/C21uxCLLmja lnIkJHXACHscyezwuwo5P3Kv4MaZAEcGdysX7rqpIjncBUXf4MYxdo0fz6S/+7VS KjJMzZkZcGGj2Yc0BD+zAYJvA1I7h3nBJwUCB9hA0KSOsz8XbK8YqUQuRorVqDk7 wA/JaqO6SBp4ozUi7PwrZ0lD5tyhvOGNZNj8B6BwW6xef9c2IelCj7DWwS6hFG0y U3gJAwoiK2itqLtPAPoMj9FMVrLr2NE= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:14 2026 by rpki-client