$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa File: 289e72dc-240a-3333-b80e-6a466f6a78a6.roa (raw, json) Hash identifier: QCoRGe2aL+Hkpi7V1MNtFALk4DLAc2sPUFs1ulzHdYQ= Subject key identifier: B7:9B:EE:DC:F4:3B:03:9C:78:45:92:7E:25:84:1C:95:87:8C:F9:EE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00074D1173601DCB140100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:07:4d:11:73:60:1d:cb:14:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=c53d7f9f-127a-4d69-941b-9d06ce7c6ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e4:3b:39:16:9b:6f:4e:5a:5f:c6:96:bb:32: 40:cb:66:cb:70:0b:71:ff:2a:7f:b7:98:49:8f:e1: 5a:c8:51:6b:5e:e2:7c:1b:50:33:76:39:2f:aa:8b: 80:ab:99:08:e3:67:c0:e5:27:4e:65:82:32:55:e6: 17:9e:b4:09:f1:2d:39:bf:1a:0f:6e:6a:b0:91:2e: ca:cd:bd:b3:1f:66:19:25:60:30:61:29:15:58:05: 15:5b:97:49:ad:cf:3a:ad:30:81:8b:e4:36:d2:77: 58:71:25:7b:25:34:f8:08:9f:7b:85:28:e2:be:7f: 1a:eb:98:7b:44:f3:70:d8:87:67:ac:59:c7:b2:c5: 3b:4e:90:6d:57:b5:4e:22:73:61:ca:41:21:25:2f: 3e:82:4c:02:4b:cd:1a:31:0a:b5:3f:3e:3f:cb:c4: 46:79:ad:44:c7:3b:5f:08:49:02:a1:be:50:27:e5: e5:18:88:88:b6:ef:fb:94:71:9e:c8:63:0b:34:70: a4:4f:7a:02:80:59:33:19:42:56:9a:1c:3c:f0:a1: a1:7b:4d:06:10:1e:d8:57:66:16:a1:32:37:cc:b0: 62:25:8a:02:8b:40:80:84:b5:c7:4f:b0:8f:f7:a8: 0e:6c:ac:90:ef:80:e7:dc:57:cf:d5:32:d6:9c:8e: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9B:EE:DC:F4:3B:03:9C:78:45:92:7E:25:84:1C:95:87:8C:F9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/289e72dc-240a-3333-b80e-6a466f6a78a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:22:36:fd:6b:ed:18:fa:29:11:29:48:3d:5a:d0:96:7d:49: 1f:b2:ae:d1:4d:22:87:43:f5:5d:55:ba:74:15:7c:fd:00:3f: b2:b0:bf:12:80:c5:d2:2b:11:69:7b:8b:de:9a:ac:81:6f:a6: 5e:90:23:b8:5a:3a:af:9f:26:42:d0:e7:51:8c:81:0a:27:02: 55:ce:b5:b9:24:73:12:0e:6f:fc:67:65:07:8e:3f:bb:bf:3e: 49:17:8e:aa:6f:e9:03:07:f5:4c:5f:cc:56:51:2d:dc:f5:1b: 09:0f:09:cf:e6:af:64:bf:af:aa:6a:8f:d5:91:4e:1d:20:5c: 57:d0:71:18:41:78:12:97:ad:9d:56:f9:57:2f:a5:d3:ce:a4: d0:db:20:e4:99:aa:31:e5:06:d6:e4:c9:ea:db:26:a1:6e:e0: ac:98:78:e3:4e:1a:1d:c8:b4:5e:d0:8e:8f:01:24:e0:3d:52: 5c:95:fd:f1:c9:04:ba:73:6b:1c:c0:b4:71:d0:1b:85:97:f0: 2a:3a:d5:2e:77:b4:a3:d8:56:86:71:5c:0f:d6:ad:3e:64:92: f5:2b:c7:e0:59:02:ac:ff:6b:70:1a:a5:14:0c:e6:65:b7:07: eb:d9:3e:8c:05:9f:fc:a8:2b:82:d1:e8:3f:61:89:ae:79:19: 99:30:bb:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAdNEXNgHcsUAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YzUzZDdmOWYtMTI3YS00ZDY5LTk0MWItOWQwNmNlN2M2YWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+Q7ORabb05aX8aWuzJAy2bLcAtx/yp/t5hJ j+FayFFrXuJ8G1AzdjkvqouAq5kI42fA5SdOZYIyVeYXnrQJ8S05vxoPbmqwkS7K zb2zH2YZJWAwYSkVWAUVW5dJrc86rTCBi+Q20ndYcSV7JTT4CJ97hSjivn8a65h7 RPNw2IdnrFnHssU7TpBtV7VOInNhykEhJS8+gkwCS80aMQq1Pz4/y8RGea1Exztf CEkCob5QJ+XlGIiItu/7lHGeyGMLNHCkT3oCgFkzGUJWmhw88KGhe00GEB7YV2YW oTI3zLBiJYoCi0CAhLXHT7CP96gObKyQ74Dn3FfP1TLWnI76lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeb7tz0OwOceEWSfiWEHJWHjPnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjg5ZTcyZGMtMjQwYS0z MzMzLWI4MGUtNmE0NjZmNmE3OGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkiNv1r7Rj6KREpSD1a0JZ9SR+yrtFNIodD9V1VunQVfP0AP7KwvxKA xdIrEWl7i96arIFvpl6QI7haOq+fJkLQ51GMgQonAlXOtbkkcxIOb/xnZQeOP7u/ PkkXjqpv6QMH9UxfzFZRLdz1GwkPCc/mr2S/r6pqj9WRTh0gXFfQcRhBeBKXrZ1W +VcvpdPOpNDbIOSZqjHlBtbkyerbJqFu4KyYeONOGh3ItF7Qjo8BJOA9UlyV/fHJ BLpzaxzAtHHQG4WX8Co61S53tKPYVoZxXA/WrT5kkvUrx+BZAqz/a3AapRQM5mW3 B+vZPowFn/yoK4LR6D9hia55GZkwu6I= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:41 2026 by rpki-client