$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa File: 586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa (raw, json) Hash identifier: 7vhczyH5gIPYj5UWaMNRj/w1HOzQr0tECVQrnO1R/D8= Subject key identifier: 2F:05:3B:A0:1F:BE:50:5B:A7:8B:D4:72:30:98:1B:6F:0E:F4:77:39 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984F32CE33B340221A70F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.250.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f3:2c:e3:3b:34:02:21:a7:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=566e5b92-2c33-430f-8b3d-1fccbc129ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d6:93:80:99:94:51:70:c7:54:de:a1:06:83: 9e:f1:50:dc:da:fd:89:0f:ae:31:20:79:72:54:e9: 05:ea:d7:02:11:83:20:79:b0:22:28:09:0b:ab:32: 0e:60:5b:81:35:57:a1:e9:6c:9d:cc:2a:92:2d:da: b1:5e:9a:6e:6e:81:2c:34:4c:c3:91:74:a1:f9:46: 2b:5c:38:76:28:04:d5:ff:22:8c:da:d1:1f:45:12: c1:70:f6:89:ed:0e:39:c7:8d:42:a6:a6:f7:8a:89: 9c:bb:cb:b8:cf:a7:e2:4c:b9:9e:a0:f0:54:92:a9: 71:fc:c8:16:44:28:83:5f:1d:44:f2:af:76:f4:59: 04:2e:dd:76:ac:67:5a:e3:2b:93:0c:8f:bb:40:db: ac:58:b3:6b:ba:ee:58:9e:a0:db:78:17:bb:33:2d: 36:67:df:92:db:72:6c:03:29:6c:c7:57:17:0d:87: 0a:68:49:50:9e:2e:df:bf:f7:9e:d4:95:58:36:39: e4:d9:72:f5:a9:ac:fb:86:10:54:7c:73:83:74:a7: 48:b6:4e:f6:8d:a2:7d:45:d7:d3:fd:06:0d:d6:93: c9:d2:2b:0a:a5:6f:c8:e4:3e:b0:32:d8:4f:41:74: 84:32:2d:f8:40:d5:db:dd:2a:98:f3:fd:3d:ee:e1: e2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:3B:A0:1F:BE:50:5B:A7:8B:D4:72:30:98:1B:6F:0E:F4:77:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/586f12c9-48e1-3dc8-be7c-88e0adfc2fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1e:5f:68:b1:de:1b:de:c4:0f:1c:83:54:5f:dd:e2:f8:f2: ef:43:90:71:ca:67:22:e8:d7:2d:72:a7:f2:ba:8c:e5:49:94: 52:ac:2f:29:22:af:89:6b:3f:e2:23:fe:73:67:c4:c7:9a:8c: a3:64:eb:b3:b6:07:15:8c:13:1c:18:6b:54:52:63:c6:6b:16: 86:7d:2a:d0:45:0b:f7:5a:0f:05:af:0b:2f:70:bb:fd:14:83: df:31:10:02:b0:b4:5e:87:c4:dc:80:b3:e9:1e:79:4f:f2:5d: 69:9f:9c:4b:13:2d:d5:f8:46:86:2d:15:77:be:16:fa:c9:91: e9:b6:96:e9:86:b6:e4:48:e7:fc:f5:6b:9b:2d:b0:d1:6e:d5: ec:f1:44:9f:3e:8c:bb:2b:44:1e:d2:35:18:d3:95:c7:d1:90: d3:ae:6b:cf:b7:dd:20:15:9d:d4:bc:f0:16:8d:ec:68:e6:7e: 84:4a:22:ac:c2:a8:f4:91:c4:f9:20:52:58:c1:21:81:6d:f3: 3b:f6:d7:bc:98:dc:40:0a:24:63:62:7a:e5:0d:4e:5a:4f:65: 67:ab:09:89:9f:ad:7c:39:64:2f:1e:36:9d:39:db:7f:2e:96: 4f:0e:15:be:c7:68:89:7e:36:62:22:66:85:bf:4c:ab:1b:c6: 76:4b:e7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPMs4zs0AiGnD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTY2ZTViOTItMmMzMy00MzBmLThiM2QtMWZjY2JjMTI5YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNaTgJmUUXDHVN6hBoOe8VDc2v2JD64xIHly VOkF6tcCEYMgebAiKAkLqzIOYFuBNVeh6WydzCqSLdqxXppuboEsNEzDkXSh+UYr XDh2KATV/yKM2tEfRRLBcPaJ7Q45x41Cpqb3iomcu8u4z6fiTLmeoPBUkqlx/MgW RCiDXx1E8q929FkELt12rGda4yuTDI+7QNusWLNruu5YnqDbeBe7My02Z9+S23Js Aylsx1cXDYcKaElQni7fv/ee1JVYNjnk2XL1qaz7hhBUfHODdKdItk72jaJ9RdfT /QYN1pPJ0isKpW/I5D6wMthPQXSEMi34QNXb3SqY8/097uHipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8FO6AfvlBbp4vUcjCYG28O9Hc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTg2ZjEyYzktNDhlMS0z ZGM4LWJlN2MtODhlMGFkZmMyZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAeX2ix3hvexA8cg1Rf3eL48u9DkHHKZyLo1y1yp/K6jOVJlFKsLyki r4lrP+Ij/nNnxMeajKNk67O2BxWMExwYa1RSY8ZrFoZ9KtBFC/daDwWvCy9wu/0U g98xEAKwtF6HxNyAs+keeU/yXWmfnEsTLdX4RoYtFXe+FvrJkem2lumGtuRI5/z1 a5stsNFu1ezxRJ8+jLsrRB7SNRjTlcfRkNOua8+33SAVndS88BaN7GjmfoRKIqzC qPSRxPkgUljBIYFt8zv217yY3EAKJGNieuUNTlpPZWerCYmfrXw5ZC8eNp05238u lk8OFb7HaIl+NmIiZoW/TKsbxnZL50E= -----END CERTIFICATE-----Generated at Fri Sep 25 20:59:22 2026 by rpki-client