$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0cede97-7a56-3ecc-b68d-d84e033c5b79.roa File: c0cede97-7a56-3ecc-b68d-d84e033c5b79.roa (raw, json) Hash identifier: o1YLOj7CCMLLEj79MNIJkahVsRNIBxK6sZjucLPC4sg= Subject key identifier: 5B:79:24:FE:83:90:C1:1F:13:13:27:08:F4:AB:96:5D:F6:10:54:76 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFCFB9A076E5D499026100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0cede97-7a56-3ecc-b68d-d84e033c5b79.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:cf:b9:a0:76:e5:d4:99:02:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=4463db43-6c49-4808-bdaf-54f03863b8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e8:5c:c8:d9:3c:16:4c:85:7a:e4:76:96:93: 90:e2:89:32:9a:6b:fa:72:23:91:4f:cf:9a:3f:50: f1:28:d8:54:a7:0f:ed:d7:0f:62:9b:b0:88:63:d2: 8a:d2:d4:e6:e9:83:66:35:e0:1a:d6:0b:b9:e5:27: e4:6e:a7:66:d9:f0:80:3a:c0:e3:d4:9b:37:18:f9: d7:0e:b6:b9:5f:d5:8a:dd:f1:d7:5c:dd:a2:28:50: 95:c2:23:26:36:51:ed:b1:09:87:4e:52:69:fd:17: a0:63:c8:16:c4:64:e2:56:e9:9a:00:80:63:f7:14: 53:ad:25:45:45:1e:3f:e7:f8:8e:91:dc:9c:e3:bf: 00:32:60:81:35:65:3e:d5:7d:45:61:fa:22:0b:68: 94:8d:dc:4e:6b:8b:a6:9d:bc:d8:90:ee:55:8e:b6: 8d:ef:03:5a:00:59:cd:3b:5c:0e:7e:e6:de:51:2c: ab:31:7f:43:32:f9:da:9c:6a:32:b0:60:22:d2:ea: 71:66:d1:a8:eb:91:3d:fa:b0:01:55:29:f3:64:0c: ae:99:8c:04:57:b6:9a:8c:b4:81:84:f7:3a:10:3c: c6:03:ac:a3:9b:d9:7e:3a:0f:4b:d8:51:c8:3f:ab: 8a:18:44:6c:18:14:b5:c1:f1:60:5a:02:8d:a3:92: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:79:24:FE:83:90:C1:1F:13:13:27:08:F4:AB:96:5D:F6:10:54:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c0cede97-7a56-3ecc-b68d-d84e033c5b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:02:e1:70:ae:0d:a4:1e:3b:26:78:18:3a:2f:22:11:cc:36: 07:bb:e1:6d:42:64:2d:72:dc:b9:a6:d0:10:5b:eb:a9:70:27: 69:f2:d2:15:b7:01:16:c9:13:74:ee:b0:fd:bc:3e:5e:80:ff: a8:f3:4f:06:e8:60:d1:99:d4:61:81:49:b6:71:db:dc:25:22: 33:a2:37:df:1e:a7:e8:9a:45:39:f2:c9:f6:ac:6e:fe:18:62: c3:2d:ed:13:4c:66:2c:ef:1b:2c:d4:41:98:e9:d4:4b:41:b3: a5:f8:12:77:e4:43:c5:25:bf:b1:9a:f3:37:ce:e4:13:1a:80: 3d:76:64:48:71:cb:ec:61:f7:6e:79:5c:35:7e:99:9f:32:e2: 62:1e:3c:83:93:3d:77:ff:a4:0f:ae:fa:a6:1c:20:ee:18:94: cf:6e:99:90:06:9f:f9:9a:f0:ca:27:f9:1a:24:5d:19:49:95: 2e:a8:db:1f:ac:3d:0c:d7:af:b8:8d:d4:0a:55:d5:cb:ce:d7: 42:01:e6:56:d6:bd:ee:9e:bb:53:b7:95:a8:c9:6e:10:a6:06: e3:f9:46:61:9c:bb:86:23:11:32:51:7b:69:95:af:3c:b7:6c: c2:d6:cc:8e:78:15:78:17:7f:60:b4:df:ed:34:d6:51:d5:6b: 48:fd:d9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/8+5oHbl1JkCYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDQ2M2RiNDMtNmM0OS00ODA4LWJkYWYtNTRmMDM4NjNiOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OhcyNk8FkyFeuR2lpOQ4okymmv6ciORT8+a P1DxKNhUpw/t1w9im7CIY9KK0tTm6YNmNeAa1gu55Sfkbqdm2fCAOsDj1Js3GPnX Dra5X9WK3fHXXN2iKFCVwiMmNlHtsQmHTlJp/RegY8gWxGTiVumaAIBj9xRTrSVF RR4/5/iOkdyc478AMmCBNWU+1X1FYfoiC2iUjdxOa4umnbzYkO5VjraN7wNaAFnN O1wOfubeUSyrMX9DMvnanGoysGAi0upxZtGo65E9+rABVSnzZAyumYwEV7aajLSB hPc6EDzGA6yjm9l+Og9L2FHIP6uKGERsGBS1wfFgWgKNo5ICJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt5JP6DkMEfExMnCPSrll32EFR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzBjZWRlOTctN2E1Ni0z ZWNjLWI2OGQtZDg0ZTAzM2M1Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAC4XCuDaQeOyZ4GDovIhHMNge74W1CZC1y3Lmm0BBb66lwJ2ny0hW3 ARbJE3TusP28Pl6A/6jzTwboYNGZ1GGBSbZx29wlIjOiN98ep+iaRTnyyfasbv4Y YsMt7RNMZizvGyzUQZjp1EtBs6X4EnfkQ8Ulv7Ga8zfO5BMagD12ZEhxy+xh9255 XDV+mZ8y4mIePIOTPXf/pA+u+qYcIO4YlM9umZAGn/ma8Mon+RokXRlJlS6o2x+s PQzXr7iN1ApV1cvO10IB5lbWve6eu1O3lajJbhCmBuP5RmGcu4YjETJRe2mVrzy3 bMLWzI54FXgXf2C03+001lHVa0j92S0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:28 2026 by rpki-client