$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa File: b06bceef-a146-3786-a710-c662d310f7f5.roa (raw, json) Hash identifier: X4VdPpsYgnsStMFk3gaZUvpyYkAJLCr2V6XgNc2do9M= Subject key identifier: 2A:60:F2:19:91:1A:B6:F1:49:D4:43:39:56:3C:AE:AE:1E:29:9A:EE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0003D514CFB64146970BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:03:d5:14:cf:b6:41:46:97:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=89d1e23c-4b46-4a47-8d6b-bdc9448e40aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:14:79:03:67:fe:c2:a6:0a:99:87:38:85: 63:da:ce:3a:a2:43:96:e9:8f:eb:b0:63:62:89:f5: 55:fb:18:c0:f7:bf:09:b2:54:f7:c4:48:bb:65:6f: a7:83:80:e7:8e:8e:53:4d:96:b0:77:02:e8:19:86: 28:b9:a8:6e:76:cd:49:07:4e:53:f2:93:fc:37:93: 2b:ae:df:13:dd:0d:84:a6:49:c3:21:92:a4:1b:41: 8b:cb:43:92:91:b2:ec:7e:f5:dc:56:02:fd:48:68: 30:d4:17:81:01:31:54:d6:79:41:2e:4a:79:0f:c1: 3a:bd:87:1d:6c:24:4c:74:cd:14:78:d8:08:4c:dd: 6f:81:4f:11:38:5e:68:8c:5c:e3:b5:f2:8a:3b:cb: 2e:ff:2a:6f:e5:68:83:ed:9d:d8:42:13:48:1e:b2: 0f:6a:f4:eb:28:33:75:49:7c:82:e6:fc:72:c4:b5: c6:f6:00:ed:0f:9c:c5:43:c9:a5:a5:3b:62:21:2d: 1e:2b:1b:cc:10:79:95:7c:7a:d7:23:cc:2e:f9:d6: b3:e0:39:cf:67:84:80:55:43:eb:fc:59:16:86:8e: 4e:07:53:58:72:21:23:5a:4d:fe:36:a7:1e:76:84: 85:a7:66:3f:0d:d7:95:50:66:5a:45:6c:c4:31:f9: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:60:F2:19:91:1A:B6:F1:49:D4:43:39:56:3C:AE:AE:1E:29:9A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b06bceef-a146-3786-a710-c662d310f7f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:85:6f:80:64:8a:60:c0:5e:02:e4:bf:24:3e:08:2d:c0:50: 5c:63:cb:22:67:10:ad:7d:b9:23:6e:8c:50:22:4b:5d:ec:06: ea:c6:bf:ee:5f:95:ef:2b:9d:1f:41:ee:c5:b9:37:73:54:a0: 2c:85:cf:6f:74:de:3b:2c:26:fa:5e:91:4c:16:63:e5:8c:ff: c9:9a:69:f2:ea:23:23:1b:7c:99:e7:c7:65:e5:51:56:a1:7c: 7a:fe:c5:64:dd:67:e5:8e:51:a6:20:5a:96:3e:d4:e6:c1:52: ef:b7:ce:92:6f:9e:6d:ca:2c:8d:7a:8c:e8:db:e9:76:a4:4c: bc:8a:bc:f6:fc:46:98:43:a5:d1:f0:a1:b9:3f:22:5d:3f:6a: 77:90:79:96:1d:47:c6:6b:d8:17:f1:32:25:cd:5d:b6:bf:1d: bf:bd:47:d7:f2:25:75:30:b6:ed:43:4d:38:c1:48:d5:cf:0d: 6a:32:63:02:55:a5:13:a6:14:64:f4:8f:be:36:1d:57:ee:96: b9:0d:01:52:c2:4b:a0:5d:f8:ed:98:b7:16:29:65:25:c4:06: bb:59:c0:cf:a9:01:25:6f:41:cd:9a:2b:63:e9:ea:33:2c:71: 9e:f1:cf:39:51:96:b0:7e:22:7c:70:af:f9:2b:ab:27:47:4c: 9b:42:e6:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAPVFM+2QUaXC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ODlkMWUyM2MtNGI0Ni00YTQ3LThkNmItYmRjOTQ0OGU0MGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tkUeQNn/sKmCpmHOIVj2s46okOW6Y/rsGNi ifVV+xjA978JslT3xEi7ZW+ng4Dnjo5TTZawdwLoGYYouahuds1JB05T8pP8N5Mr rt8T3Q2EpknDIZKkG0GLy0OSkbLsfvXcVgL9SGgw1BeBATFU1nlBLkp5D8E6vYcd bCRMdM0UeNgITN1vgU8ROF5ojFzjtfKKO8su/ypv5WiD7Z3YQhNIHrIPavTrKDN1 SXyC5vxyxLXG9gDtD5zFQ8mlpTtiIS0eKxvMEHmVfHrXI8wu+daz4DnPZ4SAVUPr /FkWho5OB1NYciEjWk3+NqcedoSFp2Y/DdeVUGZaRWzEMfm73QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpg8hmRGrbxSdRDOVY8rq4eKZruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjA2YmNlZWYtYTE0Ni0z Nzg2LWE3MTAtYzY2MmQzMTBmN2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeFb4BkimDAXgLkvyQ+CC3AUFxjyyJnEK19uSNujFAiS13sBurGv+5f le8rnR9B7sW5N3NUoCyFz2903jssJvpekUwWY+WM/8maafLqIyMbfJnnx2XlUVah fHr+xWTdZ+WOUaYgWpY+1ObBUu+3zpJvnm3KLI16jOjb6XakTLyKvPb8RphDpdHw obk/Il0/aneQeZYdR8Zr2BfxMiXNXba/Hb+9R9fyJXUwtu1DTTjBSNXPDWoyYwJV pROmFGT0j742HVfulrkNAVLCS6Bd+O2YtxYpZSXEBrtZwM+pASVvQc2aK2Pp6jMs cZ7xzzlRlrB+Inxwr/krqydHTJtC5v4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:50 2026 by rpki-client