$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa File: 95de198e-9bc7-3f62-8579-2e33c1164c71.roa (raw, json) Hash identifier: ZK4FBdZ6c//EA9sV3K4VGArvJhS3KymBvZ9H3zAeL3o= Subject key identifier: E4:6F:D4:EE:F2:C7:30:A5:93:1E:4F:89:28:D4:04:E2:C4:0F:86:BE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00065295CDB0A7A747E900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:06:52:95:cd:b0:a7:a7:47:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=0150a752-21b1-4bb7-b757-d6a8a924893e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:99:59:b9:9a:57:a4:86:ca:c1:53:cd:8d: 2d:2c:29:82:07:de:41:93:9d:6d:db:51:5b:0a:79: e2:c5:55:5b:f4:a1:53:51:18:39:cf:f1:da:69:ac: e1:fa:25:b6:36:6e:9f:40:c0:0e:1e:de:6f:f5:46: 89:5e:9e:8d:03:47:78:3f:b4:de:47:01:d3:32:3a: 3b:f0:30:c7:a0:82:3e:c6:13:bc:e4:5e:7e:ec:14: 9f:9b:7e:ea:fa:3c:e9:92:90:8e:9c:1e:cf:af:94: 07:80:ae:cf:f1:20:f1:79:63:fe:3f:7a:f6:72:b7: bb:30:76:c8:b8:28:14:66:bc:8b:a6:c8:e0:de:f3: 2d:62:0a:c0:5c:70:16:1f:64:52:85:48:6d:38:e5: 40:38:c4:c2:6f:a8:6c:63:66:3e:5f:45:b3:c1:a2: 5f:1b:a9:9f:78:81:e4:50:8f:f9:c1:28:2c:41:ca: 1c:4e:cb:c4:e2:c2:cb:14:c9:d8:30:5f:a5:0e:61: b5:3f:ca:a6:5a:7b:9a:b9:30:5e:f2:21:9f:01:a1: f8:05:b3:4b:76:69:75:2b:db:a7:38:b0:b3:a8:31: 8c:7a:f9:ce:13:14:5f:9f:1c:01:40:b5:1f:cf:f0: bf:2a:8e:9d:70:2f:ce:f8:ac:31:c7:e3:35:66:4e: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6F:D4:EE:F2:C7:30:A5:93:1E:4F:89:28:D4:04:E2:C4:0F:86:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95de198e-9bc7-3f62-8579-2e33c1164c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7f:b0:6b:87:a1:21:5e:93:fb:73:ea:91:75:51:fb:f8:95: 39:20:97:dd:87:91:90:24:8e:59:92:b4:e6:5e:d9:f7:61:12: 27:ca:de:59:92:89:7a:49:d1:d7:b5:b3:fa:4f:c2:cd:3d:41: 73:96:f4:c9:22:58:f0:d4:d8:db:84:8a:14:b4:06:b2:21:93: 81:a6:a5:d6:42:7b:04:a8:57:67:b1:2b:e5:7f:bc:14:61:ba: 47:b2:6e:a8:50:cf:76:74:20:31:2f:0a:ba:b5:01:0a:52:36: f4:73:ea:8a:8c:11:e6:f8:bc:ad:c4:e7:78:fa:2a:e2:a5:ce: aa:b2:a1:0e:8a:e0:1c:59:ac:0d:7b:3d:25:82:a7:98:ff:12: e1:e8:d2:cc:7b:46:81:49:54:1f:42:f6:b4:df:be:22:ec:09: 31:55:d3:0a:4c:e1:81:84:47:5f:50:ab:d7:dd:b1:e9:38:66: d1:e0:4c:1a:13:23:d4:80:30:38:ec:d3:95:86:ef:87:35:90: 46:07:70:f7:ff:3e:44:87:c0:9d:f1:4f:fd:e3:97:39:29:fd: d3:91:1e:05:09:fd:2b:38:aa:0b:85:a4:82:79:f4:08:c3:71: ad:8b:17:44:96:e7:e5:49:92:d9:35:28:86:b3:d1:aa:e6:f7: dd:5b:45:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAZSlc2wp6dH6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MDE1MGE3NTItMjFiMS00YmI3LWI3NTctZDZhOGE5MjQ4OTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqamZWbmaV6SGysFTzY0tLCmCB95Bk51t21Fb CnnixVVb9KFTURg5z/Haaazh+iW2Nm6fQMAOHt5v9UaJXp6NA0d4P7TeRwHTMjo7 8DDHoII+xhO85F5+7BSfm37q+jzpkpCOnB7Pr5QHgK7P8SDxeWP+P3r2cre7MHbI uCgUZryLpsjg3vMtYgrAXHAWH2RShUhtOOVAOMTCb6hsY2Y+X0WzwaJfG6mfeIHk UI/5wSgsQcocTsvE4sLLFMnYMF+lDmG1P8qmWnuauTBe8iGfAaH4BbNLdml1K9un OLCzqDGMevnOExRfnxwBQLUfz/C/Ko6dcC/O+Kwxx+M1Zk7SpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORv1O7yxzClkx5PiSjUBOLED4a+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTVkZTE5OGUtOWJjNy0z ZjYyLTg1NzktMmUzM2MxMTY0YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV/sGuHoSFek/tz6pF1Ufv4lTkgl92HkZAkjlmStOZe2fdhEifK3lmS iXpJ0de1s/pPws09QXOW9MkiWPDU2NuEihS0BrIhk4GmpdZCewSoV2exK+V/vBRh ukeybqhQz3Z0IDEvCrq1AQpSNvRz6oqMEeb4vK3E53j6KuKlzqqyoQ6K4BxZrA17 PSWCp5j/EuHo0sx7RoFJVB9C9rTfviLsCTFV0wpM4YGER19Qq9fdsek4ZtHgTBoT I9SAMDjs05WG74c1kEYHcPf/PkSHwJ3xT/3jlzkp/dORHgUJ/Ss4qguFpIJ59AjD ca2LF0SW5+VJktk1KIaz0arm991bRS8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:54 2026 by rpki-client