$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/861c0b28-3dfb-3e02-b33c-c7fb5e02a9fe.roa File: 861c0b28-3dfb-3e02-b33c-c7fb5e02a9fe.roa (raw, json) Hash identifier: oV6N6ZzbgaI5+K/fAF5hs+kOfa4NYF3qO89G2Gbo9v8= Subject key identifier: FD:4F:0D:8A:FC:36:46:7C:05:C7:50:90:26:20:A3:5B:90:C8:B9:1F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EDA36ED669C3577DB750 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/861c0b28-3dfb-3e02-b33c-c7fb5e02a9fe.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ed:a3:6e:d6:69:c3:57:7d:b7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=eb8d3d1f-3c2b-4b12-869c-5876fba4f2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:ed:0b:53:5a:31:ba:a2:88:02:5e:a9:9c: 4e:de:1d:82:00:b2:0b:1d:ca:d0:9d:0b:7c:6b:ee: 89:09:bc:a8:8b:ba:b0:74:2d:2c:f3:e1:b2:c6:40: 1f:33:35:a9:2a:0d:ae:94:26:bc:62:64:7c:af:2c: c5:d4:9d:45:37:e6:d8:84:ec:cb:71:a1:da:1d:61: 59:68:d8:96:30:8f:51:ba:1d:66:14:56:29:8a:86: bc:7c:fe:8c:4d:26:94:6c:12:ab:cc:58:f1:a9:00: a3:31:5f:96:49:97:14:b6:be:03:6f:03:e9:d4:d4: cf:e4:c3:73:94:1e:fd:75:b6:c5:6a:e1:ee:3d:4d: 00:2c:06:2a:7d:30:c7:47:37:88:f8:ae:e2:ce:d2: b2:df:a3:78:2c:9b:81:13:78:7a:a1:20:5f:b7:4a: 30:50:86:f5:f6:c3:1d:28:f3:ae:10:ed:f0:09:f9: d8:bb:e2:a5:2a:cc:3b:7c:f8:a8:d3:9c:72:72:52: 40:ef:17:12:27:ac:01:e1:fe:81:12:f3:b0:45:74: 0b:fa:bc:56:cd:13:fd:21:f2:0e:1b:cf:64:2f:3b: 5e:b7:bf:03:eb:6c:16:e9:b5:e8:46:d9:9a:64:3c: c3:b3:96:06:66:c0:87:6b:55:ff:7d:e7:cc:1e:67: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4F:0D:8A:FC:36:46:7C:05:C7:50:90:26:20:A3:5B:90:C8:B9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/861c0b28-3dfb-3e02-b33c-c7fb5e02a9fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:36:96:56:57:73:da:24:a0:cc:f0:17:12:e3:c9:a5:f0:3b: a2:33:e0:a0:b3:23:5b:fb:54:ec:0f:13:c5:f7:eb:94:b7:a3: 41:ba:1b:12:f0:ea:d2:f9:8e:eb:08:90:2b:75:cb:cf:db:4b: 9c:09:50:7f:02:a6:f4:9a:5f:08:d6:3a:65:12:87:85:50:0d: 9c:2f:f2:e2:59:b3:68:d0:7a:4d:29:36:8c:37:13:0c:54:d6: 9a:6a:ef:2d:39:cd:75:97:2b:15:14:62:fd:9e:65:f4:aa:d6: e2:45:6d:ef:49:a2:89:93:24:93:ba:31:a6:32:a2:5b:e6:3d: 66:21:23:53:0a:92:66:ec:b7:56:09:83:93:1e:76:d9:b8:53: 5a:bf:d1:7d:42:f7:4e:aa:7d:95:ed:41:ff:03:02:9e:af:fb: 95:f3:22:b3:26:8b:4c:8b:19:3c:08:d7:71:06:b4:53:9e:99: bc:49:20:e6:94:ac:62:de:e2:c4:8e:7c:eb:ff:fc:67:4a:3b: 16:58:b6:8a:bd:eb:59:62:5a:5c:7d:c2:67:37:8d:4b:97:a4: dc:9f:19:91:3b:5c:96:df:de:8a:e4:7b:e2:2e:e3:85:89:fe: 6e:d7:67:e4:73:d0:27:24:a0:ce:14:a3:41:b9:40:6c:9e:46: 7f:1b:76:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iku2jbtZpw1d9t1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWI4ZDNkMWYtM2MyYi00YjEyLTg2OWMtNTg3NmZiYTRmMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpDtC1NaMbqiiAJeqZxO3h2CALILHcrQnQt8 a+6JCbyoi7qwdC0s8+GyxkAfMzWpKg2ulCa8YmR8ryzF1J1FN+bYhOzLcaHaHWFZ aNiWMI9Ruh1mFFYpioa8fP6MTSaUbBKrzFjxqQCjMV+WSZcUtr4DbwPp1NTP5MNz lB79dbbFauHuPU0ALAYqfTDHRzeI+K7iztKy36N4LJuBE3h6oSBft0owUIb19sMd KPOuEO3wCfnYu+KlKsw7fPio05xyclJA7xcSJ6wB4f6BEvOwRXQL+rxWzRP9IfIO G89kLztet78D62wW6bXoRtmaZDzDs5YGZsCHa1X/fefMHmcvMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1PDYr8NkZ8BcdQkCYgo1uQyLkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODYxYzBiMjgtM2RmYi0z ZTAyLWIzM2MtYzdmYjVlMDJhOWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw2llZXc9okoMzwFxLjyaXwO6Iz4KCzI1v7VOwPE8X365S3o0G6GxLw 6tL5jusIkCt1y8/bS5wJUH8CpvSaXwjWOmUSh4VQDZwv8uJZs2jQek0pNow3EwxU 1ppq7y05zXWXKxUUYv2eZfSq1uJFbe9JoomTJJO6MaYyolvmPWYhI1MKkmbst1YJ g5Medtm4U1q/0X1C906qfZXtQf8DAp6v+5XzIrMmi0yLGTwI13EGtFOembxJIOaU rGLe4sSOfOv//GdKOxZYtoq961liWlx9wmc3jUuXpNyfGZE7XJbf3orke+Iu44WJ /m7XZ+Rz0CckoM4Uo0G5QGyeRn8bdiI= -----END CERTIFICATE-----Generated at Tue Nov 10 22:53:16 2026 by rpki-client