$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa File: 7cf2fd49-6469-31b7-b902-e90312ec317d.roa (raw, json) Hash identifier: tGjNXfjimFpijzH3KDtNnIOyvgGS0KsdFwTBWc0Ag+Q= Subject key identifier: 59:10:B9:27:2D:85:18:61:19:D9:AE:93:78:86:E1:62:20:EB:43:ED Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F49850CCA20609871217535A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.250.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:0c:ca:20:60:98:71:21:75:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e60b8959-c393-42ea-aff1-77999d50cd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:1f:b4:35:f2:c2:21:e7:43:f9:29:37:55: 09:79:00:18:2e:2c:ad:39:09:6e:ae:1c:27:e9:bc: e5:be:b6:22:1d:56:b8:08:66:81:62:e5:5c:39:d2: 05:e3:61:ae:a8:f7:09:7f:64:a9:8d:0a:10:1c:eb: e6:bd:d6:f5:2a:eb:47:c4:c0:9b:47:51:9c:9b:af: 42:e8:ed:bb:b1:8b:0f:aa:9c:78:0a:3a:a8:d3:75: a3:d3:e0:cf:1d:0d:1d:03:92:9d:c3:23:05:b3:dd: 25:09:ff:8a:b8:a7:0d:94:6a:cc:c4:71:a6:07:aa: e5:97:64:f1:fd:d1:46:92:2d:f0:e1:31:d8:6f:d6: fe:63:e8:d2:3c:36:06:83:78:b6:cb:6f:06:85:25: 23:78:c3:7d:d9:0c:95:e3:43:e5:80:07:cb:4b:3a: 23:ee:fe:db:3d:c1:8f:2d:e3:93:a9:c8:59:a5:dd: 3f:d8:5e:e3:cf:a6:69:a6:c8:e1:88:4d:44:3f:bd: f2:63:59:b5:b3:0e:01:d3:89:03:4f:8f:f1:e4:12: 38:7d:4e:b7:e1:8f:d0:59:26:f6:6e:e9:b6:ad:a7: 24:2c:a5:4e:c1:79:3a:4a:80:69:e0:1e:65:fc:b2: ce:de:64:b5:9b:3a:08:de:93:c6:bf:2d:0d:ee:f1: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:10:B9:27:2D:85:18:61:19:D9:AE:93:78:86:E1:62:20:EB:43:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7cf2fd49-6469-31b7-b902-e90312ec317d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3f:60:7c:9a:17:8a:a3:38:d7:a3:72:73:6b:eb:d6:c9:18: 0e:6c:d6:12:b7:23:42:82:6a:3c:cd:66:0b:41:85:f8:07:b2: 8d:02:77:fc:8d:44:2e:2d:7c:4a:f2:e6:db:89:fb:47:2b:da: 9b:63:b0:72:ab:69:cc:2f:d1:3b:3e:9a:3b:eb:03:2b:8d:ef: b2:7c:5b:95:b1:c7:19:4a:3e:67:f7:b6:30:af:1b:be:6d:02: 3e:0e:61:c3:ff:e4:0d:12:95:2e:35:b5:37:8e:92:dc:34:fb: a8:18:9b:0c:aa:86:21:49:b5:38:db:78:97:c8:02:e4:4d:a6: 37:0f:a3:6a:87:9d:fd:28:67:e4:37:44:77:e3:e6:3e:4a:5a: f0:02:ba:ad:0c:dc:c1:92:94:5d:94:33:a6:d5:dd:42:42:6e: 46:b2:e6:bd:00:31:8c:5c:8b:90:6c:e8:36:c2:4f:8c:e3:ba: 50:60:4c:e4:c3:38:8b:7d:b3:f2:14:5b:72:d1:84:c2:78:74: 84:f9:2e:96:f5:0c:5d:c3:34:40:93:3f:71:57:87:30:23:04: 1d:fd:d3:fc:50:0e:a5:df:67:1d:ea:c1:95:e8:50:c3:e7:8f: eb:aa:27:4d:b1:60:ba:e7:06:fd:8f:f6:9a:87:a3:fb:c5:51: fc:55:02:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQzKIGCYcSF1NaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTYwYjg5NTktYzM5My00MmVhLWFmZjEtNzc5OTlkNTBjZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiucftDXywiHnQ/kpN1UJeQAYLiytOQlurhwn 6bzlvrYiHVa4CGaBYuVcOdIF42GuqPcJf2SpjQoQHOvmvdb1KutHxMCbR1Gcm69C 6O27sYsPqpx4Cjqo03Wj0+DPHQ0dA5KdwyMFs90lCf+KuKcNlGrMxHGmB6rll2Tx /dFGki3w4THYb9b+Y+jSPDYGg3i2y28GhSUjeMN92QyV40PlgAfLSzoj7v7bPcGP LeOTqchZpd0/2F7jz6ZppsjhiE1EP73yY1m1sw4B04kDT4/x5BI4fU634Y/QWSb2 bum2rackLKVOwXk6SoBp4B5l/LLO3mS1mzoI3pPGvy0N7vHz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkQuScthRhhGdmuk3iG4WIg60PtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2NmMmZkNDktNjQ2OS0z MWI3LWI5MDItZTkwMzEyZWMzMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg/YHyaF4qjONejcnNr69bJGA5s1hK3I0KCajzNZgtBhfgHso0Cd/yN RC4tfEry5tuJ+0cr2ptjsHKracwv0Ts+mjvrAyuN77J8W5WxxxlKPmf3tjCvG75t Aj4OYcP/5A0SlS41tTeOktw0+6gYmwyqhiFJtTjbeJfIAuRNpjcPo2qHnf0oZ+Q3 RHfj5j5KWvACuq0M3MGSlF2UM6bV3UJCbkay5r0AMYxci5Bs6DbCT4zjulBgTOTD OIt9s/IUW3LRhMJ4dIT5Lpb1DF3DNECTP3FXhzAjBB390/xQDqXfZx3qwZXoUMPn j+uqJ02xYLrnBv2P9pqHo/vFUfxVAm0= -----END CERTIFICATE-----Generated at Sat Sep 26 14:21:37 2026 by rpki-client