$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c03e9d6-9445-376a-a25c-f66167f373e1.roa File: 5c03e9d6-9445-376a-a25c-f66167f373e1.roa (raw, json) Hash identifier: cENELForrZvBLY3HSf9JxZaqqk9zZYtv9pi80I6MCbM= Subject key identifier: F8:67:CB:9C:B3:D2:86:56:FA:05:F9:60:D6:14:D5:24:53:E9:1E:09 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4985421B2B4747CE5EC5B500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c03e9d6-9445-376a-a25c-f66167f373e1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.250.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:42:1b:2b:47:47:ce:5e:c5:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fdf1bbd6-e085-4497-b238-fc21aec346e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ef:d2:38:0b:7a:00:71:fa:2a:b5:61:4b:74: 26:57:48:d5:f0:b3:5e:f2:30:28:5e:34:c2:23:a8: 2e:67:b1:0e:c9:b0:91:7a:1d:e9:7b:d0:2b:aa:3b: b4:8b:c6:14:48:d0:2d:1b:97:92:ed:01:94:15:1e: a2:36:03:ca:09:6a:9f:e8:88:1d:90:8a:02:8f:f5: eb:e3:f5:d8:96:db:b3:f5:57:a9:b1:f0:e6:d8:44: 47:73:32:f8:5d:2f:ec:1c:de:71:4d:c2:69:59:bd: 82:5f:41:79:06:c9:e4:f5:41:f6:3f:ba:7a:08:db: 1b:32:33:ae:55:97:3d:4f:90:12:40:e8:77:85:63: 61:ea:43:1e:69:ef:fc:1e:31:7b:aa:f6:8d:1e:b5: 64:34:14:39:e1:22:6b:21:2a:f5:b9:4f:b9:f4:b4: 3d:0d:d3:ac:bd:a3:d0:7c:74:61:4a:ff:46:92:3d: f4:aa:2e:fe:6f:fb:90:dd:70:9d:f2:72:46:f5:dc: 93:f0:36:28:9a:7c:84:d7:0d:bd:3b:ad:02:9e:2a: f1:36:ea:06:77:47:07:26:ae:69:3c:f6:8d:62:cf: d5:d4:0e:3c:e7:ca:19:37:5a:ad:06:b9:28:e6:bb: a3:a0:60:a6:97:4b:e1:73:25:47:d8:79:9e:82:10: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:67:CB:9C:B3:D2:86:56:FA:05:F9:60:D6:14:D5:24:53:E9:1E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c03e9d6-9445-376a-a25c-f66167f373e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fb:f5:d4:8c:ae:7d:f4:26:08:60:b3:6b:3a:86:50:41:e4: a7:07:ac:5e:a4:71:13:38:a4:92:1f:28:b0:7d:cb:3a:fd:e8: 08:b3:cf:da:a4:64:e3:21:22:f2:78:c3:af:ec:03:2c:da:9d: 34:d3:77:53:e8:2f:12:22:73:aa:f9:93:79:9d:6e:88:06:c3: cf:34:1d:4c:15:72:f3:6e:cb:ad:14:c4:bb:a3:cd:6d:66:44: 60:29:91:82:71:7a:89:a7:80:59:d1:4d:a4:b3:9a:5c:0e:7a: ba:6b:91:e8:8f:1a:08:2b:5c:00:58:05:12:c6:71:e7:dd:7f: 59:07:b3:ac:89:7e:17:52:40:e5:9f:fe:80:d7:28:c3:a8:c8: b6:2f:3e:b1:f9:2f:cc:e5:1c:72:f3:fd:b7:a1:32:d0:bf:0d: c7:28:e3:db:28:35:9c:e1:7c:53:50:5c:27:5f:85:6e:68:a1: 6d:ed:98:20:21:65:db:67:78:ce:46:eb:49:5c:ae:7f:dc:b1: 76:d7:a8:32:f1:8d:ab:7e:f6:f4:9d:8c:c6:78:71:8f:6e:2f: 75:9e:9a:ca:0e:8c:2e:c8:12:27:20:1d:c0:d5:fc:3a:26:f5: 54:9a:1a:90:64:db:d3:92:69:8b:00:aa:8a:8f:a7:b6:3c:a3: 5b:d3:4b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhUIbK0dHzl7FtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmRmMWJiZDYtZTA4NS00NDk3LWIyMzgtZmMyMWFlYzM0NmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu/SOAt6AHH6KrVhS3QmV0jV8LNe8jAoXjTC I6guZ7EOybCReh3pe9Arqju0i8YUSNAtG5eS7QGUFR6iNgPKCWqf6IgdkIoCj/Xr 4/XYltuz9VepsfDm2ERHczL4XS/sHN5xTcJpWb2CX0F5Bsnk9UH2P7p6CNsbMjOu VZc9T5ASQOh3hWNh6kMeae/8HjF7qvaNHrVkNBQ54SJrISr1uU+59LQ9DdOsvaPQ fHRhSv9Gkj30qi7+b/uQ3XCd8nJG9dyT8DYomnyE1w29O60CnirxNuoGd0cHJq5p PPaNYs/V1A4858oZN1qtBrko5rujoGCml0vhcyVH2HmeghCWRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhny5yz0oZW+gX5YNYU1SRT6R4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWMwM2U5ZDYtOTQ0NS0z NzZhLWEyNWMtZjY2MTY3ZjM3M2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr79dSMrn30Jghgs2s6hlBB5KcHrF6kcRM4pJIfKLB9yzr96Aizz9qk ZOMhIvJ4w6/sAyzanTTTd1PoLxIic6r5k3mdbogGw880HUwVcvNuy60UxLujzW1m RGApkYJxeomngFnRTaSzmlwOerprkeiPGggrXABYBRLGcefdf1kHs6yJfhdSQOWf /oDXKMOoyLYvPrH5L8zlHHLz/behMtC/Dcco49soNZzhfFNQXCdfhW5ooW3tmCAh ZdtneM5G60lcrn/csXbXqDLxjat+9vSdjMZ4cY9uL3WemsoOjC7IEicgHcDV/Dom 9VSaGpBk29OSaYsAqoqPp7Y8o1vTS68= -----END CERTIFICATE-----Generated at Sat Sep 26 06:22:43 2026 by rpki-client