$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/49678650-e677-377c-88c4-a90a428afa95.roa File: 49678650-e677-377c-88c4-a90a428afa95.roa (raw, json) Hash identifier: mdLnUW1nkQcqiUgX+aEy7edr1nyqJMslWVEKmv/+OTA= Subject key identifier: D0:02:91:0D:02:24:AD:E4:43:A2:49:4F:EB:2C:03:62:7F:45:D6:D8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EBC29CCB140C08568200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/49678650-e677-377c-88c4-a90a428afa95.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:eb:c2:9c:cb:14:0c:08:56:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=d3d23228-0d21-4427-8d5f-bce70b42fa92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:2a:06:54:22:c0:f3:d9:e1:86:7f:af:36: df:78:ad:bf:b4:55:10:cd:bc:ea:c3:36:09:ec:6f: 2b:f3:a7:77:4a:60:49:d4:3e:18:31:0d:36:19:91: 2e:0f:68:45:91:fe:13:05:a6:93:85:ee:d6:65:73: fc:8c:63:2a:56:7f:6f:2d:eb:29:60:d2:23:c6:22: e2:d7:b7:dc:2d:e6:6a:cd:c2:b3:0d:69:3d:42:a5: 56:cb:c2:ff:dd:65:35:4b:44:de:00:19:59:55:53: 98:11:e7:d5:18:20:2d:4a:72:b5:fd:22:88:83:b7: 7c:5f:df:bd:79:9e:86:42:02:f9:1b:26:b1:3c:bb: 37:c6:d4:d6:51:bb:b3:cc:16:fe:dd:ff:a2:cc:7a: 90:72:1c:a1:b8:29:54:15:4e:34:1a:29:ae:3a:b5: 78:35:77:05:55:6f:9f:3f:fc:3c:c4:2c:ee:66:08: c4:b9:68:00:dd:2a:b0:67:d5:dd:2d:9c:8c:34:43: c9:1c:40:a7:88:dc:13:93:44:31:53:d1:20:f7:68: b4:df:78:d3:67:a7:76:f6:e1:6b:e0:47:7a:01:71: d2:fd:e3:d2:38:c3:86:93:4e:a8:1a:4e:6f:d3:1f: fc:ae:ad:4e:e7:77:93:88:e9:22:9b:d0:fb:a4:ec: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:02:91:0D:02:24:AD:E4:43:A2:49:4F:EB:2C:03:62:7F:45:D6:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/49678650-e677-377c-88c4-a90a428afa95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5d:2e:0b:e1:d4:26:6f:43:52:d9:4b:10:8f:84:26:08:b3: ce:c1:5a:40:f8:64:67:8a:a7:98:a4:40:c9:bd:ee:c8:ee:23: ec:fd:dc:10:97:4d:f7:dc:87:78:f0:d0:82:63:5a:89:08:40: 7f:0a:a4:2a:ab:18:cb:94:5b:0c:4d:90:6f:4b:71:1c:4a:b3: 9f:dc:f8:ba:bb:bf:d1:16:9a:bc:1b:f8:de:7e:bd:0d:bb:6b: ea:e7:1b:d1:13:09:25:61:c4:59:eb:17:6f:93:e0:22:75:21: de:17:73:23:75:af:f1:54:1a:5c:5a:bb:26:4d:e7:7a:ce:dc: 27:7e:47:32:c9:18:a0:91:59:03:20:a6:ba:63:ab:a8:62:a2: c2:03:20:90:b9:69:c0:dc:b9:e3:dd:02:1d:dc:18:c2:73:b2: 30:62:8d:4f:dd:cb:86:93:69:76:24:26:93:77:4a:eb:9c:54: b0:65:a2:f3:55:89:bc:0d:89:e0:d2:a7:20:66:8c:fe:67:a5: 9a:ed:47:d6:74:92:2f:97:e5:89:bd:7a:0b:72:09:bd:35:e3: df:00:d0:79:2a:51:cd:0d:d1:c7:ae:0f:93:8d:86:16:16:45: 7a:ec:f2:8b:20:eb:33:05:00:d5:90:9b:8d:9e:a5:66:a8:8f: 52:8e:2c:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuvCnMsUDAhWggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDNkMjMyMjgtMGQyMS00NDI3LThkNWYtYmNlNzBiNDJmYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5UqBlQiwPPZ4YZ/rzbfeK2/tFUQzbzqwzYJ 7G8r86d3SmBJ1D4YMQ02GZEuD2hFkf4TBaaThe7WZXP8jGMqVn9vLespYNIjxiLi 17fcLeZqzcKzDWk9QqVWy8L/3WU1S0TeABlZVVOYEefVGCAtSnK1/SKIg7d8X9+9 eZ6GQgL5GyaxPLs3xtTWUbuzzBb+3f+izHqQchyhuClUFU40GimuOrV4NXcFVW+f P/w8xCzuZgjEuWgA3SqwZ9XdLZyMNEPJHECniNwTk0QxU9Eg92i033jTZ6d29uFr 4Ed6AXHS/ePSOMOGk06oGk5v0x/8rq1O53eTiOkim9D7pOy4LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNACkQ0CJK3kQ6JJT+ssA2J/RdbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDk2Nzg2NTAtZTY3Ny0z NzdjLTg4YzQtYTkwYTQyOGFmYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJdLgvh1CZvQ1LZSxCPhCYIs87BWkD4ZGeKp5ikQMm97sjuI+z93BCX Tffch3jw0IJjWokIQH8KpCqrGMuUWwxNkG9LcRxKs5/c+Lq7v9EWmrwb+N5+vQ27 a+rnG9ETCSVhxFnrF2+T4CJ1Id4XcyN1r/FUGlxauyZN53rO3Cd+RzLJGKCRWQMg prpjq6hiosIDIJC5acDcuePdAh3cGMJzsjBijU/dy4aTaXYkJpN3SuucVLBlovNV ibwNieDSpyBmjP5npZrtR9Z0ki+X5Ym9egtyCb01498A0HkqUc0N0ceuD5ONhhYW RXrs8osg6zMFANWQm42epWaoj1KOLFg= -----END CERTIFICATE-----Generated at Sun Nov 15 12:23:55 2026 by rpki-client