$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa File: 558a9f03-d275-3df3-9fd9-2afd50775883.roa (raw, json) Hash identifier: cYi6veeF4kfyX2hDr0uOqGPvHKlVcz9BvUkWM/oy1ZQ= Subject key identifier: 3F:1B:D8:A5:37:2E:D8:60:DE:CC:E1:33:2E:70:08:0C:59:33:12:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD1F12ADC4D8DA4ACDDA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d1:f1:2a:dc:4d:8d:a4:ac:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=4f1ecef5-a96d-4f15-8993-c7d3d968bdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:da:28:f3:b0:29:72:ef:1e:e3:47:8c:ae:e1: 92:f5:9d:e0:b0:4b:75:72:f0:12:e0:b8:2f:d1:fb: 1f:31:ff:3b:eb:a0:fc:c8:d4:92:a9:89:2d:d4:07: 95:08:20:43:10:72:13:21:83:4b:6f:a1:52:31:aa: d2:ee:40:33:3c:3d:13:44:2b:ea:12:78:3f:cb:3e: 74:e0:9f:e3:33:16:6b:58:1b:e8:85:b4:90:e0:c9: ed:c4:8d:66:ff:eb:07:f0:83:7c:77:53:0a:a8:86: 7a:32:40:21:92:f1:6c:cc:09:24:8a:2e:03:00:c3: 7e:a2:ea:3d:f1:6a:60:54:7c:ba:34:3c:a0:17:0d: 94:68:8b:3f:d3:b3:3e:aa:78:d3:28:69:bd:ef:2a: 01:fb:be:19:57:1d:9d:af:47:d8:65:fc:65:8b:41: 85:21:c4:a2:ed:cc:c5:fc:04:a1:00:76:83:96:57: 31:5c:39:75:44:12:9b:56:fa:ab:f7:0f:e2:86:f3: a7:68:19:3b:83:88:e9:3b:a0:fc:6f:49:8d:0c:16: 13:f5:75:14:9e:db:80:61:07:3f:ad:6c:d7:c7:a4: 45:c6:a6:32:cd:72:a4:70:3b:71:d8:dc:5e:9a:1e: 3d:b6:7e:83:c9:c2:45:14:c4:a7:db:fc:f9:25:9f: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1B:D8:A5:37:2E:D8:60:DE:CC:E1:33:2E:70:08:0C:59:33:12:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/558a9f03-d275-3df3-9fd9-2afd50775883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:7c:37:c2:fc:e3:8b:d5:4e:f0:a7:ea:e2:89:70:21:d3:16: be:75:c5:62:22:3f:88:43:9d:dc:04:2d:eb:b2:0b:f9:d9:2a: 2a:5a:ca:18:63:b5:e7:8b:4d:ef:75:4c:10:cf:2b:b1:f8:b2: 78:98:42:c7:f8:dc:0b:07:42:59:f6:91:23:d7:3a:44:12:23: 64:e8:11:f8:60:5b:5d:f1:c3:2b:59:c1:ee:24:f7:1e:ca:20: 2d:61:35:ab:59:6b:4e:00:bc:71:7a:be:4e:36:b0:b1:f9:f8: 5d:82:86:47:47:cd:b1:04:b9:89:7c:fe:2e:d5:44:4b:e1:79: db:10:3b:9c:44:47:e2:b2:90:9c:10:6d:66:25:c1:08:98:f0: 3f:20:79:f2:e9:67:b7:c0:ae:6f:f8:e9:5a:22:f6:26:8a:19: d4:25:0b:ca:b5:1e:f6:cd:0b:62:97:8a:af:be:bb:9c:90:1f: e2:20:1b:8e:6c:23:4e:31:ff:c8:a4:ba:85:c4:73:ac:82:94: 84:82:d7:38:80:2f:6d:56:de:36:31:91:26:6c:40:e6:43:dc: 80:4a:27:7a:5d:1f:ad:2a:50:cf:49:a9:bf:0f:80:9b:9e:a7: 05:30:d8:98:2a:c7:2b:81:fe:c6:38:b6:19:91:9e:12:9c:5d: e5:e3:90:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9HxKtxNjaSs3aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NGYxZWNlZjUtYTk2ZC00ZjE1LTg5OTMtYzdkM2Q5NjhiZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNoo87Apcu8e40eMruGS9Z3gsEt1cvAS4Lgv 0fsfMf8766D8yNSSqYkt1AeVCCBDEHITIYNLb6FSMarS7kAzPD0TRCvqEng/yz50 4J/jMxZrWBvohbSQ4MntxI1m/+sH8IN8d1MKqIZ6MkAhkvFszAkkii4DAMN+ouo9 8WpgVHy6NDygFw2UaIs/07M+qnjTKGm97yoB+74ZVx2dr0fYZfxli0GFIcSi7czF /AShAHaDllcxXDl1RBKbVvqr9w/ihvOnaBk7g4jpO6D8b0mNDBYT9XUUntuAYQc/ rWzXx6RFxqYyzXKkcDtx2Nxemh49tn6DycJFFMSn2/z5JZ9sJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8b2KU3Lthg3szhMy5wCAxZMxJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTU4YTlmMDMtZDI3NS0z ZGYzLTlmZDktMmFmZDUwNzc1ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh8N8L844vVTvCn6uKJcCHTFr51xWIiP4hDndwELeuyC/nZKipayhhj teeLTe91TBDPK7H4sniYQsf43AsHQln2kSPXOkQSI2ToEfhgW13xwytZwe4k9x7K IC1hNatZa04AvHF6vk42sLH5+F2ChkdHzbEEuYl8/i7VREvhedsQO5xER+KykJwQ bWYlwQiY8D8gefLpZ7fArm/46Voi9iaKGdQlC8q1HvbNC2KXiq++u5yQH+IgG45s I04x/8ikuoXEc6yClISC1ziAL21W3jYxkSZsQOZD3IBKJ3pdH60qUM9Jqb8PgJue pwUw2JgqxyuB/sY4thmRnhKcXeXjkBg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:49 2026 by rpki-client