$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa File: 8e3f565f-19fb-3655-be31-21a3ad990702.roa (raw, json) Hash identifier: /Gc0slHYyUeBWWP5TzprtAnTZSu8EK+hETwKB4oagN4= Subject key identifier: 64:B1:96:C4:AE:E9:09:45:04:44:02:30:B8:E5:CE:16:6A:51:97:49 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984FAA456E02ADDA2C05F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.250.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:fa:a4:56:e0:2a:dd:a2:c0:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ceb39ba-5077-4e4e-ba8a-2c2d36afddcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:78:41:51:f0:7b:20:79:51:98:05:66:02: 0e:59:00:5a:b7:a0:4e:61:27:1d:07:a6:b5:18:7b: 91:ad:6a:35:42:c5:8b:fb:73:4e:bf:b4:64:a1:fa: 54:03:9f:ae:6e:8a:1a:d6:16:09:3d:bc:67:a8:2e: 55:53:8d:93:61:60:da:d3:bc:27:5e:3a:16:b7:12: 71:04:00:41:13:07:3f:27:b3:8a:ee:2d:aa:ca:08: 6e:91:89:8f:6d:35:0f:34:53:f4:ba:77:ab:46:94: 12:92:3b:af:f1:05:c5:ec:7d:8a:39:a1:8b:08:87: 80:0f:0a:17:2f:34:1e:67:4e:2c:b3:be:ef:94:ee: 39:bb:34:7c:6a:6f:50:10:f7:91:91:5c:78:6d:ac: 7f:b1:13:51:a8:4c:13:eb:0d:1a:b8:b4:e5:80:33: d9:60:20:05:e5:a1:3a:02:5f:87:71:27:3a:09:00: 14:8e:75:64:5c:61:a4:c5:89:63:bd:29:c3:33:ce: 52:fa:c4:c9:aa:9d:95:a7:99:c8:7d:2e:cf:ea:28: 17:86:04:5b:70:0b:fc:40:7f:d7:6d:a0:c6:0c:62: dc:85:91:b8:bd:81:66:c8:eb:73:f7:be:4d:38:00: 39:0d:ce:f0:aa:ca:a9:25:3a:c7:67:02:af:ff:d3: a3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:96:C4:AE:E9:09:45:04:44:02:30:B8:E5:CE:16:6A:51:97:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e3f565f-19fb-3655-be31-21a3ad990702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:f2:c9:e6:02:b9:fd:7c:68:82:f5:54:25:c0:b3:80:e5:16: 0a:f4:b4:be:08:70:66:89:bb:11:ad:3d:34:41:58:c2:57:07: a6:79:d7:39:08:dd:d0:50:07:fc:95:e3:c9:cc:b7:2e:f5:6a: c5:47:6c:bd:1f:73:d0:b7:f5:cf:69:45:66:99:cf:38:47:54: 46:0d:9f:ab:86:88:9c:77:c1:a4:7a:01:92:1e:7e:3e:fb:a5: 69:18:d0:0c:61:cb:9d:e9:92:a6:47:44:a8:20:bd:5a:45:85: 7b:3f:e4:5f:f8:96:09:3b:0b:ab:2b:9f:5a:ef:ca:06:6c:7d: b4:b3:9b:25:2f:d0:5f:e7:fe:ea:40:39:74:95:94:e1:38:b9: 99:65:c2:33:e8:8b:30:bb:b3:ba:d8:34:2e:a5:70:52:85:8d: 3a:01:af:b9:f3:2f:e4:60:6e:9c:d8:8b:3c:8b:a9:2f:1f:68: 25:f8:0d:42:40:d5:35:98:32:dd:89:54:87:b6:80:04:34:78: 60:88:27:2a:4e:69:3f:ee:2f:27:21:f6:55:08:e8:b5:0c:1b: 28:1d:75:ca:a2:0e:42:18:f6:f4:8c:30:41:2f:0f:c8:99:c0: 0f:9e:75:8f:3a:59:7f:3b:7c:c2:fe:67:a0:ee:81:c8:5f:16: 9a:cc:f2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPqkVuAq3aLAX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmNlYjM5YmEtNTA3Ny00ZTRlLWJhOGEtMmMyZDM2YWZkZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxV4QVHweyB5UZgFZgIOWQBat6BOYScdB6a1 GHuRrWo1QsWL+3NOv7RkofpUA5+ubooa1hYJPbxnqC5VU42TYWDa07wnXjoWtxJx BABBEwc/J7OK7i2qyghukYmPbTUPNFP0unerRpQSkjuv8QXF7H2KOaGLCIeADwoX LzQeZ04ss77vlO45uzR8am9QEPeRkVx4bax/sRNRqEwT6w0auLTlgDPZYCAF5aE6 Al+HcSc6CQAUjnVkXGGkxYljvSnDM85S+sTJqp2Vp5nIfS7P6igXhgRbcAv8QH/X baDGDGLchZG4vYFmyOtz975NOAA5Dc7wqsqpJTrHZwKv/9OjNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSxlsSu6QlFBEQCMLjlzhZqUZdJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGUzZjU2NWYtMTlmYi0z NjU1LWJlMzEtMjFhM2FkOTkwNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHyyeYCuf18aIL1VCXAs4DlFgr0tL4IcGaJuxGtPTRBWMJXB6Z51zkI 3dBQB/yV48nMty71asVHbL0fc9C39c9pRWaZzzhHVEYNn6uGiJx3waR6AZIefj77 pWkY0Axhy53pkqZHRKggvVpFhXs/5F/4lgk7C6srn1rvygZsfbSzmyUv0F/n/upA OXSVlOE4uZllwjPoizC7s7rYNC6lcFKFjToBr7nzL+RgbpzYizyLqS8faCX4DUJA 1TWYMt2JVIe2gAQ0eGCIJypOaT/uLych9lUI6LUMGygddcqiDkIY9vSMMEEvD8iZ wA+edY86WX87fML+Z6DugchfFprM8i4= -----END CERTIFICATE-----Generated at Fri Sep 25 22:37:24 2026 by rpki-client