$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa File: f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa (raw, json) Hash identifier: tFuciZi1NFOm3zfHMjOoLCgekT+B4F7Q/mtZn416S4o= Subject key identifier: DE:FF:25:C0:B9:FB:6E:EB:69:97:0C:F3:76:40:73:F4:EE:48:30:EC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0309E156468FB72061780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.250.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:30:9e:15:64:68:fb:72:06:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2f33001f-c587-47f8-8806-80de7c90f499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:8f:fd:77:f8:0a:44:e0:13:2e:26:c4:15: 03:55:8e:2d:2a:2e:6f:e6:a8:d0:9c:4e:ae:26:0b: 6c:85:48:97:26:b8:b5:ba:ef:93:21:17:c9:e2:8a: a1:e7:7b:a3:9c:2e:36:a2:eb:ac:a1:dd:1a:52:e0: 96:65:f3:3c:ae:77:a5:55:5d:81:b1:2d:08:5d:ee: 71:d6:4d:59:a2:93:59:bd:8e:af:88:ef:eb:cf:72: 03:39:08:19:ca:b5:fd:bd:78:b2:20:6e:37:2e:c3: 15:5b:25:1b:50:f9:15:67:3c:f9:69:f8:93:73:bb: ee:4a:d1:27:14:37:e0:51:c4:d0:17:a1:f5:95:23: 28:2e:d7:6b:1d:cf:dd:39:89:ca:85:ff:dd:db:8c: 46:59:97:68:c0:05:4d:1f:f1:00:f5:33:92:3f:6b: cc:86:f5:74:79:e0:87:01:eb:00:23:03:74:6c:b9: f4:40:4d:87:9d:e6:a4:b7:b6:ae:35:2d:cf:2d:29: 7e:8d:11:47:b5:a3:de:08:9f:55:55:81:56:83:53: b0:9e:ae:c2:e9:3f:79:81:16:16:b7:7a:9a:b4:22: cc:f8:9c:7d:ea:f4:17:f0:4f:c6:7b:bc:f0:01:c5: 57:f0:7c:47:49:01:a1:61:d3:ee:f4:3d:b8:c3:d5: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FF:25:C0:B9:FB:6E:EB:69:97:0C:F3:76:40:73:F4:EE:48:30:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f403dee2-70ae-3cfc-8b39-7ede59f447d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:17:76:9d:64:ec:de:04:4d:de:af:1a:a9:aa:60:e0:c7:ec: 52:1b:fc:79:7a:78:7b:3e:16:c1:28:f3:36:00:10:dc:e7:ff: e0:84:13:47:25:1b:ad:c3:8d:98:53:7b:9a:37:34:55:9a:14: 42:b2:5e:49:59:1f:cf:65:29:b7:52:59:34:e3:a5:79:57:4a: f5:74:13:30:4c:a6:df:02:5a:98:28:0d:ad:ec:99:31:c4:7f: c8:03:48:6c:f3:1f:c3:9f:c7:db:83:41:f5:e5:e9:66:22:a2: 17:02:52:c8:81:83:7c:8d:b6:ae:4b:68:c4:3a:b5:e5:36:ae: 5c:62:bc:57:ec:d5:1d:f8:20:d1:a5:7d:aa:6c:bb:ca:46:92: 9a:ce:9b:05:64:43:33:69:45:af:73:d5:14:5c:be:2d:3e:1d: 7a:f7:33:be:b2:f0:9e:05:ea:dd:6a:d6:eb:02:dd:54:5f:62: d9:33:66:b0:cb:aa:39:01:ec:35:04:de:4a:c8:43:e9:24:03: 7a:95:bd:ee:10:30:2a:e1:d3:12:46:89:64:93:a6:81:4b:53: fa:e6:e3:34:7c:76:c9:5f:f6:1f:e4:fc:c6:6f:04:d0:63:8e: 19:b9:f2:1f:ab:ef:32:44:c2:a9:66:1c:fa:cf:4a:8a:b3:c8: 85:9c:4f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4DCeFWRo+3IGF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmYzMzAwMWYtYzU4Ny00N2Y4LTg4MDYtODBkZTdjOTBmNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxOP/Xf4CkTgEy4mxBUDVY4tKi5v5qjQnE6u JgtshUiXJri1uu+TIRfJ4oqh53ujnC42ouusod0aUuCWZfM8rnelVV2BsS0IXe5x 1k1ZopNZvY6viO/rz3IDOQgZyrX9vXiyIG43LsMVWyUbUPkVZzz5afiTc7vuStEn FDfgUcTQF6H1lSMoLtdrHc/dOYnKhf/d24xGWZdowAVNH/EA9TOSP2vMhvV0eeCH AesAIwN0bLn0QE2Hneakt7auNS3PLSl+jRFHtaPeCJ9VVYFWg1Ownq7C6T95gRYW t3qatCLM+Jx96vQX8E/Ge7zwAcVX8HxHSQGhYdPu9D24w9UEtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7/JcC5+27raZcM83ZAc/TuSDDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjQwM2RlZTItNzBhZS0z Y2ZjLThiMzktN2VkZTU5ZjQ0N2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEXdp1k7N4ETd6vGqmqYODH7FIb/Hl6eHs+FsEo8zYAENzn/+CEE0cl G63DjZhTe5o3NFWaFEKyXklZH89lKbdSWTTjpXlXSvV0EzBMpt8CWpgoDa3smTHE f8gDSGzzH8Ofx9uDQfXl6WYiohcCUsiBg3yNtq5LaMQ6teU2rlxivFfs1R34INGl fapsu8pGkprOmwVkQzNpRa9z1RRcvi0+HXr3M76y8J4F6t1q1usC3VRfYtkzZrDL qjkB7DUE3krIQ+kkA3qVve4QMCrh0xJGiWSTpoFLU/rm4zR8dslf9h/k/MZvBNBj jhm58h+r7zJEwqlmHPrPSoqzyIWcT0Q= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:29 2026 by rpki-client