$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/632e83d4-db17-3c73-85ee-63d0467d6c6e.roa File: 632e83d4-db17-3c73-85ee-63d0467d6c6e.roa (raw, json) Hash identifier: DzFhS5J5T8wzPmqTKKXGWIRRyKNATfI4e84X6tGkwfU= Subject key identifier: E7:C1:3C:00:75:5F:A9:C3:4E:0F:1A:9C:06:44:E3:90:DB:4C:94:82 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984F31E3AD60024473276D0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/632e83d4-db17-3c73-85ee-63d0467d6c6e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.250.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f3:1e:3a:d6:00:24:47:32:76:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3c7f014e-fc7a-402e-921b-b62a8896c0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:d5:1e:57:11:47:11:fc:b4:47:27:1e:1e: cc:f8:e7:ad:0d:12:36:9c:b3:df:17:ea:9c:2d:e6: 19:3e:75:f6:70:24:95:e3:40:85:0d:0a:1e:e8:57: a6:a4:bb:fe:2d:77:59:84:a9:3c:f9:18:b0:17:01: 76:50:99:74:c4:ed:c6:73:37:2a:68:24:c7:b1:33: 24:4f:f4:da:6b:09:ff:af:ed:cf:49:ad:eb:0f:7e: 4d:4b:73:fb:bb:ab:29:74:a7:d3:a6:dc:12:53:26: 42:3a:8a:94:75:0c:36:3a:ef:e7:97:a1:2c:20:52: 21:fd:80:5f:37:2a:52:69:50:04:08:9a:cb:ca:cf: 6c:fb:c3:e9:34:8f:db:8d:40:86:41:31:62:dd:db: 7b:4d:ad:4d:22:40:f0:90:62:fd:45:d6:55:bb:52: 05:c4:1e:a0:f9:e1:9a:5a:8c:9b:c1:a2:89:a3:0d: d7:bc:5c:20:0b:c7:0b:f1:00:cc:e5:b7:59:50:0a: d5:dc:fd:22:2e:ac:f5:0b:71:69:41:d6:9d:fa:9a: ff:fb:ee:99:83:2f:df:a4:f1:e0:79:81:a6:df:22: c5:8f:91:d3:99:a9:b0:66:64:c1:10:1a:95:d9:66: 08:65:d0:1d:85:c9:48:47:7e:e9:ad:b9:f6:3f:f8: b3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:3C:00:75:5F:A9:C3:4E:0F:1A:9C:06:44:E3:90:DB:4C:94:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/632e83d4-db17-3c73-85ee-63d0467d6c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7b:b5:fb:71:a8:cf:44:ab:b1:81:e0:98:04:d7:e3:46:be: af:ab:a8:67:cb:6a:36:b3:3c:2e:00:11:ad:12:8a:1f:3d:87: e8:7b:2f:c5:7d:2c:de:84:d3:f2:37:7f:56:e9:a9:10:d2:8e: 96:b0:b3:01:eb:5a:d4:fe:37:a9:ae:50:a3:cb:9b:2c:c6:28: 7c:27:f1:07:ed:70:5e:68:03:d4:02:88:4c:b6:8a:cb:08:61: 71:f8:83:74:88:69:4e:0d:96:cb:d2:84:24:29:70:57:d6:8a: 9d:92:f6:83:62:bb:b7:b8:26:31:f8:9b:b3:b5:ac:4e:4e:37: ea:d6:52:69:9c:7a:37:3e:55:fa:2c:bd:37:38:4c:bf:11:6e: 6b:ff:cf:f3:a2:6a:9d:96:14:4d:53:a2:ce:4d:06:28:4d:38: bc:2d:57:68:da:0e:62:7c:40:d4:c1:f3:72:7f:ad:5b:31:9f: 98:77:4b:a5:50:62:9d:98:77:36:b0:e8:b2:76:fa:86:1c:5e: 4a:85:4f:84:47:ec:b3:87:f8:ff:10:52:89:88:23:ff:10:e7: 5c:c9:ca:4a:d6:f8:7d:a7:ff:eb:59:54:3e:1f:06:a5:e7:e1: bf:7f:a1:71:7f:de:d2:3f:d6:d1:c9:ac:2c:1f:a6:ed:f0:e8: 6c:e0:24:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPMeOtYAJEcydtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2M3ZjAxNGUtZmM3YS00MDJlLTkyMWItYjYyYTg4OTZjMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lPVHlcRRxH8tEcnHh7M+OetDRI2nLPfF+qc LeYZPnX2cCSV40CFDQoe6FempLv+LXdZhKk8+RiwFwF2UJl0xO3GczcqaCTHsTMk T/Taawn/r+3PSa3rD35NS3P7u6spdKfTptwSUyZCOoqUdQw2Ou/nl6EsIFIh/YBf NypSaVAECJrLys9s+8PpNI/bjUCGQTFi3dt7Ta1NIkDwkGL9RdZVu1IFxB6g+eGa WoybwaKJow3XvFwgC8cL8QDM5bdZUArV3P0iLqz1C3FpQdad+pr/++6Zgy/fpPHg eYGm3yLFj5HTmamwZmTBEBqV2WYIZdAdhclIR37prbn2P/iz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfBPAB1X6nDTg8anAZE45DbTJSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjMyZTgzZDQtZGIxNy0z YzczLTg1ZWUtNjNkMDQ2N2Q2YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN7tftxqM9Eq7GB4JgE1+NGvq+rqGfLajazPC4AEa0Sih89h+h7L8V9 LN6E0/I3f1bpqRDSjpawswHrWtT+N6muUKPLmyzGKHwn8QftcF5oA9QCiEy2issI YXH4g3SIaU4NlsvShCQpcFfWip2S9oNiu7e4JjH4m7O1rE5ON+rWUmmcejc+Vfos vTc4TL8Rbmv/z/Oiap2WFE1Tos5NBihNOLwtV2jaDmJ8QNTB83J/rVsxn5h3S6VQ Yp2Ydzaw6LJ2+oYcXkqFT4RH7LOH+P8QUomII/8Q51zJykrW+H2n/+tZVD4fBqXn 4b9/oXF/3tI/1tHJrCwfpu3w6GzgJP4= -----END CERTIFICATE-----Generated at Sat Sep 26 17:26:29 2026 by rpki-client