$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58609a39-5579-32dc-ac14-725f3e60ef9c.roa File: 58609a39-5579-32dc-ac14-725f3e60ef9c.roa (raw, json) Hash identifier: aiKDzNjwoieLpuQQqUo8u+YZo1Une42HmT60Fq1YEkI= Subject key identifier: C9:95:16:16:41:6D:76:DC:87:CF:20:E8:D4:4F:B5:58:5E:A9:FE:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292ED367F15A7D90C8982C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58609a39-5579-32dc-ac14-725f3e60ef9c.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ed:36:7f:15:a7:d9:0c:89:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=eb5f4545-8f04-4994-ab49-5f0c55c8e660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:8e:5b:e5:48:34:9c:b6:95:bd:53:01:f5: c8:95:11:95:27:5b:99:5c:2b:88:ce:4f:c0:2b:71: da:3e:cd:07:8f:2b:24:78:ae:3e:2b:60:31:c4:ff: e3:c3:ba:fa:a1:70:7e:e3:0c:26:87:88:52:9f:2f: f9:4d:c4:16:d7:19:6f:30:3e:3f:69:96:e3:17:e7: 82:09:21:a7:28:2a:49:76:f7:f6:a6:bc:54:fa:06: 8f:39:d0:68:c1:9c:84:ed:b0:21:1d:6e:8f:09:6f: f8:6a:b8:bf:d3:da:ff:cd:ec:14:bf:d6:79:ec:35: f2:bf:1d:e5:a6:41:62:eb:85:c5:59:31:0a:d8:59: 58:b4:89:71:8c:29:76:40:ce:16:fa:06:5b:6d:1e: 4a:bc:fa:be:ad:dc:f1:c0:6f:24:46:79:50:66:93: fd:51:81:4d:10:72:66:4e:a0:9c:41:0f:fa:60:34: d5:cb:c3:7c:50:06:f6:f6:ba:95:f1:b6:12:e0:57: d0:09:ea:01:48:f4:00:81:33:54:32:46:3a:0b:b5: c5:d7:07:1a:d7:d4:28:59:ab:79:77:14:4c:27:76: c1:3a:3d:ac:6c:20:e7:12:e6:27:7b:e1:07:af:34: 39:32:c5:9f:2d:5c:43:a4:02:a0:14:77:13:d8:25: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:95:16:16:41:6D:76:DC:87:CF:20:E8:D4:4F:B5:58:5E:A9:FE:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/58609a39-5579-32dc-ac14-725f3e60ef9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a1:d1:80:45:6e:3c:bf:7e:21:e1:65:50:0f:79:e2:2b:1e: 4d:1c:07:8a:5b:b9:2a:10:7f:40:bd:24:6f:0d:26:4d:19:ab: 0e:ef:db:a4:da:15:66:f2:f5:a6:f8:4c:fb:47:b6:7a:06:b0: 52:ca:a2:b0:70:47:56:f3:45:d4:f1:76:5b:02:55:fb:77:11: b6:ed:cd:95:92:ed:bf:4f:6c:a3:e7:2d:58:23:65:22:40:c7: cb:c8:c8:b1:e4:43:87:3a:ac:30:4c:15:90:94:ac:cf:fb:a3: 87:b0:c7:40:30:9e:b9:88:f7:6d:18:db:28:51:c7:c7:8f:8f: 19:06:8a:85:59:ab:4e:7b:7b:c2:79:c0:56:f6:fb:f1:95:32: 73:64:d8:a9:97:a5:ee:27:a8:3e:7e:a4:f2:b2:74:bc:a6:a9: a1:9b:36:9c:63:74:b4:ff:b1:34:99:83:ea:fb:51:e1:b6:4f: 7e:e4:9c:b8:55:8f:3d:52:24:c1:a5:ed:3f:0e:a7:c3:f6:4b: 20:f2:a2:aa:24:36:cd:de:32:b3:bd:85:93:05:9d:7a:79:33: d0:86:4e:64:71:22:9c:86:d1:0d:70:54:c1:18:7d:1b:7b:18: c7:0d:56:1b:24:8e:59:6a:e6:87:54:52:0c:81:d1:44:72:fd: cf:cb:8d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iku02fxWn2QyJgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWI1ZjQ1NDUtOGYwNC00OTk0LWFiNDktNWYwYzU1YzhlNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBqOW+VINJy2lb1TAfXIlRGVJ1uZXCuIzk/A K3HaPs0HjyskeK4+K2AxxP/jw7r6oXB+4wwmh4hSny/5TcQW1xlvMD4/aZbjF+eC CSGnKCpJdvf2prxU+gaPOdBowZyE7bAhHW6PCW/4ari/09r/zewUv9Z57DXyvx3l pkFi64XFWTEK2FlYtIlxjCl2QM4W+gZbbR5KvPq+rdzxwG8kRnlQZpP9UYFNEHJm TqCcQQ/6YDTVy8N8UAb29rqV8bYS4FfQCeoBSPQAgTNUMkY6C7XF1wca19QoWat5 dxRMJ3bBOj2sbCDnEuYne+EHrzQ5MsWfLVxDpAKgFHcT2CX7TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmVFhZBbXbch88g6NRPtVheqf6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg2MDlhMzktNTU3OS0z MmRjLWFjMTQtNzI1ZjNlNjBlZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvodMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6h0YBFbjy/fiHhZVAPeeIrHk0cB4pbuSoQf0C9JG8NJk0Zqw7v26Ta FWby9ab4TPtHtnoGsFLKorBwR1bzRdTxdlsCVft3EbbtzZWS7b9PbKPnLVgjZSJA x8vIyLHkQ4c6rDBMFZCUrM/7o4ewx0AwnrmI920Y2yhRx8ePjxkGioVZq057e8J5 wFb2+/GVMnNk2KmXpe4nqD5+pPKydLymqaGbNpxjdLT/sTSZg+r7UeG2T37knLhV jz1SJMGl7T8Op8P2SyDyoqokNs3eMrO9hZMFnXp5M9CGTmRxIpyG0Q1wVMEYfRt7 GMcNVhskjllq5odUUgyB0URy/c/LjU8= -----END CERTIFICATE-----Generated at Sun Nov 15 17:42:01 2026 by rpki-client