$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f626ac6-7d5d-360d-93e4-c07a0cb5dcd1.roa File: 5f626ac6-7d5d-360d-93e4-c07a0cb5dcd1.roa (raw, json) Hash identifier: +AfnIC+CEzPISlL3JPXp7VCeeh/yb1A/14IojCAGFhY= Subject key identifier: 55:E7:BD:AB:AE:F6:44:57:0C:D1:6A:44:10:60:77:F9:00:95:89:33 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984ED2582B041C6BDC93F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f626ac6-7d5d-360d-93e4-c07a0cb5dcd1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.250.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:ed:25:82:b0:41:c6:bd:c9:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0fdc7a44-9782-43c2-8862-49890eac81ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:84:8e:17:55:c0:39:8b:f3:cb:10:04:0a:c2: 3f:67:36:c2:e3:55:ba:9f:35:f7:ec:c2:11:eb:b2: b0:6c:a1:e6:fa:cf:6c:c2:b6:3a:97:99:32:50:37: 24:1e:71:54:07:9d:9a:92:52:7d:da:98:2a:58:9a: cc:02:1b:93:bd:77:70:b4:ec:09:10:67:88:2a:cc: d4:51:8e:c4:79:70:62:1a:f9:62:61:3e:c2:4e:28: 80:fe:e7:ca:9e:ce:67:9d:04:f7:37:1e:69:9b:35: bf:00:cc:d2:50:26:84:03:ce:28:e1:cd:11:35:26: 7e:75:4f:c2:b7:5a:33:33:40:ae:bf:ed:4a:48:ad: 5a:db:cf:4b:87:87:79:0a:90:23:2b:8d:86:5c:7a: 1c:4f:ce:c8:53:20:22:9c:7d:97:96:f5:7c:bc:23: 13:24:b5:00:f8:8c:ac:b0:a2:da:a5:3f:08:4c:08: 9b:c0:e5:97:4d:6c:e9:75:89:89:96:5e:c7:70:23: d0:eb:d1:3b:e8:eb:45:27:c3:bd:a4:90:45:94:9a: 9c:7c:50:25:ee:a3:c0:be:9f:0c:85:f7:95:95:bd: 04:4a:a2:2f:98:75:59:98:d2:6b:14:dd:02:2f:91: 57:74:4b:80:d2:56:7f:80:03:6a:4d:1f:4e:a1:3b: 30:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E7:BD:AB:AE:F6:44:57:0C:D1:6A:44:10:60:77:F9:00:95:89:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5f626ac6-7d5d-360d-93e4-c07a0cb5dcd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:53:1a:f8:81:89:7d:bf:4f:cf:0c:22:80:8a:c1:33:c8:6c: bc:a1:04:a8:3a:bb:da:7a:56:4b:0c:45:0c:1b:af:29:ac:00: c8:0b:b2:39:a6:d7:ad:bf:be:f8:f4:8d:5e:8e:fb:3e:0a:33: 83:5d:92:d4:db:7d:64:5b:13:9d:0e:34:2d:6b:9d:3a:dc:7e: ee:ec:6f:88:9b:4e:0a:83:46:bb:76:b2:e2:15:e6:35:40:74: 3e:24:89:72:6b:11:cc:35:8f:f1:cf:56:b9:f6:6b:ae:b2:d1: 6a:d5:32:f0:c4:20:24:86:bb:60:4b:50:8c:27:be:ac:cd:72: ca:6d:0d:05:a2:be:fb:5d:51:07:17:33:d2:47:af:45:e5:d5: 9b:10:6c:94:e1:d0:31:42:c7:3d:c1:54:24:f0:69:fd:73:15: 9a:a3:d1:74:c0:4e:dc:e0:e4:76:0a:be:75:a0:a3:87:03:53: bd:62:d8:c0:57:7f:9d:7e:32:4f:f5:40:64:f3:f4:b7:9c:a7: 6c:94:27:49:e7:c6:f9:98:06:db:4a:7d:00:d8:59:72:ac:83: fc:86:a5:60:98:d5:d0:88:5a:ca:fa:6c:37:64:57:d8:25:6f: e5:ed:1c:2f:8c:98:bf:a1:23:fa:6e:f4:42:a0:2a:eb:1c:4b: c7:c8:94:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhO0lgrBBxr3JP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGZkYzdhNDQtOTc4Mi00M2MyLTg4NjItNDk4OTBlYWM4MWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjISOF1XAOYvzyxAECsI/ZzbC41W6nzX37MIR 67KwbKHm+s9swrY6l5kyUDckHnFUB52aklJ92pgqWJrMAhuTvXdwtOwJEGeIKszU UY7EeXBiGvliYT7CTiiA/ufKns5nnQT3Nx5pmzW/AMzSUCaEA84o4c0RNSZ+dU/C t1ozM0Cuv+1KSK1a289Lh4d5CpAjK42GXHocT87IUyAinH2XlvV8vCMTJLUA+Iys sKLapT8ITAibwOWXTWzpdYmJll7HcCPQ69E76OtFJ8O9pJBFlJqcfFAl7qPAvp8M hfeVlb0ESqIvmHVZmNJrFN0CL5FXdEuA0lZ/gANqTR9OoTswfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXnvauu9kRXDNFqRBBgd/kAlYkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWY2MjZhYzYtN2Q1ZC0z NjBkLTkzZTQtYzA3YTBjYjVkY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5TGviBiX2/T88MIoCKwTPIbLyhBKg6u9p6VksMRQwbrymsAMgLsjmm 162/vvj0jV6O+z4KM4NdktTbfWRbE50ONC1rnTrcfu7sb4ibTgqDRrt2suIV5jVA dD4kiXJrEcw1j/HPVrn2a66y0WrVMvDEICSGu2BLUIwnvqzNcsptDQWivvtdUQcX M9JHr0Xl1ZsQbJTh0DFCxz3BVCTwaf1zFZqj0XTATtzg5HYKvnWgo4cDU71i2MBX f51+Mk/1QGTz9Lecp2yUJ0nnxvmYBttKfQDYWXKsg/yGpWCY1dCIWsr6bDdkV9gl b+XtHC+MmL+hI/pu9EKgKuscS8fIlKg= -----END CERTIFICATE-----Generated at Fri Sep 25 19:39:14 2026 by rpki-client