$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa File: 98e2edf8-c542-3049-b50c-6a39dee13a72.roa (raw, json) Hash identifier: /+sd1hjBsqQ/+N1eWeP2TRrc2evoejS4ruinLhP/WiY= Subject key identifier: 99:2A:86:28:D6:A5:7F:23:8B:C7:3B:75:C0:87:A9:14:D3:CD:95:FA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629306545D161338FBA53A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:06:54:5d:16:13:38:fb:a5:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=2e57e665-87cd-42bf-83d1-c5cf4616f69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:c2:33:1b:0e:3d:7d:9d:a0:66:e4:ae:62: 59:a7:f1:e9:ae:65:f0:ca:44:47:29:f0:35:f8:79: e2:e1:2e:89:0a:66:3e:d2:fc:ca:c2:95:1e:1f:d7: 71:ae:70:dc:f9:ff:7b:f5:65:9d:85:89:58:35:e6: e9:0a:6e:21:50:e2:2b:fa:2a:65:72:7c:70:77:7b: 72:cf:52:70:75:91:97:46:83:54:1e:40:28:0d:2b: 6b:1e:1f:ee:2d:fb:87:38:95:bd:f3:80:a4:cb:26: 37:10:0c:8b:0d:63:c5:7b:7e:d1:3b:83:7b:ed:36: 55:a4:2d:43:00:4a:8b:f1:61:36:87:cd:5e:dd:02: 46:39:83:6e:28:63:2a:85:26:7d:c6:0f:e4:76:ee: ee:bd:97:17:75:d7:f6:bb:43:c3:7c:c3:56:df:89: 8c:96:e3:96:5b:33:cd:c5:9c:d0:90:2b:3e:4d:32: e3:ea:62:6c:14:37:ca:c9:c8:b5:20:d6:53:fa:d4: 0c:c1:f2:e7:7f:c4:98:9c:21:44:c8:c0:ef:d9:b7: 8b:a4:29:d8:6d:1a:f6:ce:8a:f1:b2:a1:b7:d4:54: a8:49:a9:19:24:67:52:a7:6b:0a:99:2b:0d:8e:7b: 74:66:66:ee:0d:cb:ad:00:93:42:90:36:76:7c:c5: f2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:86:28:D6:A5:7F:23:8B:C7:3B:75:C0:87:A9:14:D3:CD:95:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/98e2edf8-c542-3049-b50c-6a39dee13a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:9e:13:d6:7c:0f:91:f0:88:a0:32:9d:98:09:97:72:4b:f0: 72:d5:c7:49:dc:3d:ac:6e:ff:43:f2:47:68:fd:3b:29:6b:83: f3:9e:4d:e4:41:90:56:39:5c:16:13:af:cf:fe:a8:b8:d6:0b: 75:6e:a5:e4:26:e6:10:ab:e1:c1:6b:d7:24:7c:7d:d0:98:2f: 1c:23:22:34:88:ac:5f:1c:76:7c:2b:ac:cf:91:ac:7e:f1:28: 56:2c:b0:f4:ac:96:7c:29:e7:79:80:40:bc:af:62:84:b9:71: 33:0d:3f:63:d0:22:e8:c2:6c:b2:16:4f:f7:53:d4:14:94:0f: 15:e8:07:f0:76:b4:ce:e0:51:3b:e2:25:92:17:99:cf:5d:33: eb:49:dc:ba:b5:c9:41:1d:85:fe:7b:94:ea:02:23:8b:3b:d4: c2:37:a0:a9:fa:ea:6c:59:63:34:da:82:22:fc:d8:66:82:6c: 79:94:11:8d:80:ef:1f:06:db:3e:d0:a4:17:4b:46:5e:61:77: 10:4a:ca:6f:73:23:63:0c:14:8a:5c:32:5a:20:42:d5:f5:f6: 9c:00:e3:6d:c0:0a:d2:72:be:a8:1c:c7:02:56:f7:c4:b3:86: ec:c9:b8:c6:e1:4a:5a:3e:a0:17:11:d9:c6:3e:39:79:8b:cb: 39:42:ee:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwZUXRYTOPulOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MmU1N2U2NjUtODdjZC00MmJmLTgzZDEtYzVjZjQ2MTZmNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd3CMxsOPX2doGbkrmJZp/HprmXwykRHKfA1 +Hni4S6JCmY+0vzKwpUeH9dxrnDc+f979WWdhYlYNebpCm4hUOIr+iplcnxwd3ty z1JwdZGXRoNUHkAoDStrHh/uLfuHOJW984CkyyY3EAyLDWPFe37RO4N77TZVpC1D AEqL8WE2h81e3QJGOYNuKGMqhSZ9xg/kdu7uvZcXddf2u0PDfMNW34mMluOWWzPN xZzQkCs+TTLj6mJsFDfKyci1INZT+tQMwfLnf8SYnCFEyMDv2beLpCnYbRr2zorx sqG31FSoSakZJGdSp2sKmSsNjnt0ZmbuDcutAJNCkDZ2fMXymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkqhijWpX8ji8c7dcCHqRTTzZX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOThlMmVkZjgtYzU0Mi0z MDQ5LWI1MGMtNmEzOWRlZTEzYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaeE9Z8D5HwiKAynZgJl3JL8HLVx0ncPaxu/0PyR2j9Oylrg/OeTeRB kFY5XBYTr8/+qLjWC3VupeQm5hCr4cFr1yR8fdCYLxwjIjSIrF8cdnwrrM+RrH7x KFYssPSslnwp53mAQLyvYoS5cTMNP2PQIujCbLIWT/dT1BSUDxXoB/B2tM7gUTvi JZIXmc9dM+tJ3Lq1yUEdhf57lOoCI4s71MI3oKn66mxZYzTagiL82GaCbHmUEY2A 7x8G2z7QpBdLRl5hdxBKym9zI2MMFIpcMlogQtX19pwA423ACtJyvqgcxwJW98Sz huzJuMbhSlo+oBcR2cY+OXmLyzlC7jk= -----END CERTIFICATE-----Generated at Sun Nov 15 11:16:49 2026 by rpki-client