$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa File: b1faf120-6b01-3ca0-986e-d6804e54299b.roa (raw, json) Hash identifier: Z/lPbgCSopn4PXt1tdgACDkxPtopSKRQxgQwjWijv8Y= Subject key identifier: C4:B5:45:6D:6A:07:BE:D5:A0:E8:84:63:DE:9B:43:81:86:26:12:3E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00043D2A004CBA9FB3AD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:04:3d:2a:00:4c:ba:9f:b3:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a6866706-5374-4969-bcc0-3100fd33755c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:7f:35:41:1a:5d:f5:11:ae:90:a1:89:95: 94:36:84:c3:f0:87:64:ab:43:03:f8:95:21:13:20: cf:71:f6:bf:1b:f9:03:d3:8a:a4:9f:4d:cc:e2:a9: 55:68:c5:66:2d:d7:f3:b3:7e:42:64:36:94:2f:06: 79:c7:c6:43:9f:fe:7b:4f:76:33:03:3b:08:a6:d4: 59:d4:a6:01:b9:28:69:53:34:d7:14:9c:b8:25:0a: fe:61:4c:f6:5d:01:cb:31:06:d1:0e:f1:a4:25:a0: 47:5d:be:c8:ce:44:cd:1a:ef:1b:ed:56:0b:d2:74: 02:69:7f:1e:58:7f:27:96:b4:0a:36:44:3d:2b:a4: ca:da:15:ae:3b:35:d4:23:de:de:c6:f3:f8:8c:a9: e9:57:41:11:a7:0b:31:73:33:e5:92:d2:aa:48:00: f0:92:8d:f7:b2:72:d9:37:7f:e1:cc:df:77:df:91: 68:98:d0:74:41:29:c5:60:b8:67:9a:d7:e8:b0:71: 85:b7:56:50:e5:86:56:fc:d5:22:b1:f3:8f:f9:0f: f7:b4:ea:18:98:3f:9c:0e:f6:24:a4:49:65:3f:07: 7e:f3:9a:02:1d:53:9a:2f:ec:f8:0c:89:43:b7:fa: f1:9d:32:da:79:b1:0e:c7:66:cf:41:4d:e6:11:6f: ae:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:45:6D:6A:07:BE:D5:A0:E8:84:63:DE:9B:43:81:86:26:12:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1faf120-6b01-3ca0-986e-d6804e54299b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:48:49:97:95:98:9c:01:86:95:1e:19:d3:4b:4c:24:61:15: 0b:ee:87:a1:15:ac:7e:58:92:dd:56:85:10:cb:16:be:f1:0b: 0b:cb:48:39:78:5c:46:0a:2e:f2:c8:17:39:47:47:f5:40:d9: 73:4b:17:55:9c:a1:45:8f:97:b5:c9:ff:15:5a:ca:bb:53:aa: 17:6a:bd:36:df:5e:66:13:4f:64:f9:86:40:cf:45:d1:d3:29: b0:7e:40:66:69:a4:3e:19:68:7e:b9:ab:7f:f9:c4:59:67:73: 4e:d1:0f:4b:ae:9d:f1:28:f2:a1:6c:3d:ca:82:09:3d:6f:f2: f5:5c:7b:66:4b:46:02:a4:0f:4a:90:54:2a:55:ff:db:48:54: a0:7b:3d:94:03:f1:b2:ef:a7:11:dc:0c:56:a5:2e:87:86:74: 49:f4:4f:9e:0d:c2:45:55:ec:4b:7d:aa:6b:a1:dd:cc:d1:44: 63:9d:8d:5a:2f:bf:92:05:dc:01:bc:96:e6:37:dc:23:95:89: c1:87:7d:3f:0f:ff:53:ee:6d:a6:dd:f7:40:45:7f:0a:81:53: b3:a7:87:10:14:dc:85:f7:b3:bf:96:a7:75:36:1c:84:37:23: b6:74:57:a9:37:4e:d8:9a:ac:9a:0a:2b:19:f9:cb:b4:f2:94: 24:5a:ad:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAQ9KgBMup+zrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTY4NjY3MDYtNTM3NC00OTY5LWJjYzAtMzEwMGZkMzM3NTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxJ/NUEaXfURrpChiZWUNoTD8Idkq0MD+JUh EyDPcfa/G/kD04qkn03M4qlVaMVmLdfzs35CZDaULwZ5x8ZDn/57T3YzAzsIptRZ 1KYBuShpUzTXFJy4JQr+YUz2XQHLMQbRDvGkJaBHXb7IzkTNGu8b7VYL0nQCaX8e WH8nlrQKNkQ9K6TK2hWuOzXUI97exvP4jKnpV0ERpwsxczPlktKqSADwko33snLZ N3/hzN9335FomNB0QSnFYLhnmtfosHGFt1ZQ5YZW/NUisfOP+Q/3tOoYmD+cDvYk pEllPwd+85oCHVOaL+z4DIlDt/rxnTLaebEOx2bPQU3mEW+u9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS1RW1qB77VoOiEY96bQ4GGJhI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjFmYWYxMjAtNmIwMS0z Y2EwLTk4NmUtZDY4MDRlNTQyOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtISZeVmJwBhpUeGdNLTCRhFQvuh6EVrH5Ykt1WhRDLFr7xCwvLSDl4 XEYKLvLIFzlHR/VA2XNLF1WcoUWPl7XJ/xVayrtTqhdqvTbfXmYTT2T5hkDPRdHT KbB+QGZppD4ZaH65q3/5xFlnc07RD0uunfEo8qFsPcqCCT1v8vVce2ZLRgKkD0qQ VCpV/9tIVKB7PZQD8bLvpxHcDFalLoeGdEn0T54NwkVV7Et9qmuh3czRRGOdjVov v5IF3AG8luY33COVicGHfT8P/1Pubabd90BFfwqBU7OnhxAU3IX3s7+Wp3U2HIQ3 I7Z0V6k3TtiarJoKKxn5y7TylCRarUA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:41 2026 by rpki-client