$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa File: ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa (raw, json) Hash identifier: TQ8Hr/QJZkw03qrQIDzPaSEc+IPEzyADtq1reG5Ox4k= Subject key identifier: 1F:A6:06:B0:01:A9:A4:F8:0D:47:54:38:C3:EE:DF:35:7A:88:B7:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6293069A49BE3FC6DA5F6BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:06:9a:49:be:3f:c6:da:5f:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=a01ff956-1be4-4bed-b1c0-17e27b4a8c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:9c:e2:a7:3d:1c:46:70:97:bd:ff:2a:35: e1:8e:c8:59:ee:1e:df:63:3c:ba:93:97:48:0c:62: 36:d6:d2:b9:a3:ba:48:22:8e:af:60:33:db:30:ee: a2:11:98:36:7f:a6:9f:07:e5:12:29:c0:52:25:df: 96:7c:d0:6f:6e:23:96:07:df:59:fc:7b:0f:fc:2d: 83:c9:cf:2c:cd:ac:00:3f:75:af:fe:a6:c1:ff:c6: ca:fe:7f:b2:4b:10:33:06:8f:90:2a:2b:88:86:da: 8b:9c:b6:be:cb:3d:ef:7b:a8:34:35:64:b0:d9:d6: fc:40:a4:79:21:69:f2:45:f4:9e:31:1e:c5:fa:68: 74:36:03:23:08:60:19:28:f7:0c:a7:c8:54:76:a1: ca:28:a1:b5:64:b1:2c:0f:d0:c7:58:9f:6d:73:69: d4:fd:87:a8:ad:b9:33:97:aa:1a:af:17:79:9e:15: 1d:f0:e6:6d:e9:c4:95:f7:1d:c0:16:c2:4d:ba:fa: 60:fb:73:f3:0d:32:7c:df:3f:8f:63:e9:a9:b7:22: 5b:09:21:68:f4:ab:66:fc:ea:20:8d:2f:6d:ac:40: c9:0f:b5:cf:12:9b:7b:8f:b3:a7:e0:f7:2b:1f:80: 4a:31:bf:97:72:1e:fb:d7:2d:18:9e:6b:85:ec:5a: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A6:06:B0:01:A9:A4:F8:0D:47:54:38:C3:EE:DF:35:7A:88:B7:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad0ab422-0d48-386c-9682-9fa8f3ba50bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1b:25:50:45:5d:80:e4:67:96:e8:83:82:a7:ef:40:44:c3: 39:4f:c9:17:e1:fc:41:12:31:ee:9b:82:4e:2b:b6:70:0a:56: 42:b6:aa:23:36:6d:c9:e2:02:f3:28:c7:a3:be:79:d4:5b:93: 6d:6b:0f:47:84:c2:9f:90:0a:30:9d:38:75:43:9a:bc:76:38: 7f:aa:2e:7d:8a:e7:99:cc:ba:59:89:c2:6a:76:7f:7d:0c:6d: 70:44:87:d1:ae:e4:bc:73:5d:56:70:ea:74:7e:ab:8f:13:94: 39:75:46:59:78:03:77:85:97:13:db:5d:43:07:c0:03:b1:1f: 50:a9:b1:5c:ea:8f:aa:73:82:70:79:74:1a:71:ef:46:fd:85: a0:be:c9:e4:7a:0b:5f:fc:91:64:e7:4e:9a:2d:55:91:69:8b: 3c:54:94:f5:30:f3:ef:30:f1:f0:41:51:1b:69:a5:47:4e:4b: ae:a1:c2:03:40:78:46:5e:fc:bb:9c:50:1c:57:52:f3:59:ff: 6a:34:da:84:30:62:44:12:da:37:b8:bb:9d:8f:69:5c:1c:b1: be:47:e3:5f:80:0a:55:e0:3a:e5:8f:a4:4e:1b:6b:3a:88:4c: 69:47:5f:ab:90:6d:36:36:06:cd:7e:98:19:60:9a:24:72:be: ca:92:30:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwaaSb4/xtpfa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTAxZmY5NTYtMWJlNC00YmVkLWIxYzAtMTdlMjdiNGE4YzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubWc4qc9HEZwl73/KjXhjshZ7h7fYzy6k5dI DGI21tK5o7pIIo6vYDPbMO6iEZg2f6afB+USKcBSJd+WfNBvbiOWB99Z/HsP/C2D yc8szawAP3Wv/qbB/8bK/n+ySxAzBo+QKiuIhtqLnLa+yz3ve6g0NWSw2db8QKR5 IWnyRfSeMR7F+mh0NgMjCGAZKPcMp8hUdqHKKKG1ZLEsD9DHWJ9tc2nU/Yeorbkz l6oarxd5nhUd8OZt6cSV9x3AFsJNuvpg+3PzDTJ83z+PY+mptyJbCSFo9Ktm/Oog jS9trEDJD7XPEpt7j7On4PcrH4BKMb+Xch771y0YnmuF7FoTsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+mBrABqaT4DUdUOMPu3zV6iLcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWQwYWI0MjItMGQ0OC0z ODZjLTk2ODItOWZhOGYzYmE1MGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIbJVBFXYDkZ5bog4Kn70BEwzlPyRfh/EESMe6bgk4rtnAKVkK2qiM2 bcniAvMox6O+edRbk21rD0eEwp+QCjCdOHVDmrx2OH+qLn2K55nMulmJwmp2f30M bXBEh9Gu5LxzXVZw6nR+q48TlDl1Rll4A3eFlxPbXUMHwAOxH1CpsVzqj6pzgnB5 dBpx70b9haC+yeR6C1/8kWTnTpotVZFpizxUlPUw8+8w8fBBURtppUdOS66hwgNA eEZe/LucUBxXUvNZ/2o02oQwYkQS2je4u52PaVwcsb5H41+AClXgOuWPpE4bazqI TGlHX6uQbTY2Bs1+mBlgmiRyvsqSMCg= -----END CERTIFICATE-----Generated at Sun Nov 15 13:32:13 2026 by rpki-client