$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa File: c5211ada-1406-3cf0-ace4-7211be6b6547.roa (raw, json) Hash identifier: bu4xr/kENDuTPIZqtCMmRV1Aa49n2Qbc4rAhIYq8dts= Subject key identifier: CC:3D:B4:C6:88:C5:D1:FC:9F:86:F4:F4:91:EA:D7:14:CE:F1:EC:A0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFCF20BCF8FF879A878500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:cf:20:bc:f8:ff:87:9a:87:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=df6bb704-cece-4751-a3f9-91cfdcbedc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:14:a3:30:c9:d0:45:38:cb:0a:3c:42:b8: b4:4d:1b:9b:55:b8:31:2e:2e:5c:cb:84:9d:92:10: 1b:42:37:e5:8c:94:73:b1:c1:27:81:6e:6e:07:95: 9f:11:d6:e1:86:6f:5c:d0:3e:9e:14:46:c0:d9:9f: e9:31:fa:0c:56:dc:f9:9f:9b:29:17:0e:1e:fc:0e: f0:bb:46:a2:26:ad:bd:1a:98:1f:30:0c:e6:ea:67: 0e:8b:19:19:da:77:84:b0:20:c8:b9:27:d5:9b:f6: 77:dd:da:dd:24:c1:17:f2:1a:e7:08:e9:16:ef:49: 5f:66:2e:b2:4e:b8:c4:32:e0:c1:cd:77:15:3e:d4: ff:9d:6c:dc:29:44:b0:d4:44:28:ab:8f:48:65:9f: 41:ce:d4:00:a3:62:4e:b4:31:82:72:0e:24:08:f4: b5:6f:41:c6:65:75:dc:38:5c:b7:a9:2b:f3:d0:fd: ff:68:ba:8a:ac:59:b5:79:29:5e:3e:70:6e:05:e7: 70:c8:6b:36:5d:20:57:96:d8:29:7e:05:2c:8c:bb: af:2f:f7:c0:68:c0:24:f8:37:0d:78:f8:c7:e9:5d: af:31:3c:57:9a:89:4e:bc:11:8d:82:22:cc:af:c8: be:6d:31:85:12:e5:0a:43:f7:70:22:72:23:d8:0b: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3D:B4:C6:88:C5:D1:FC:9F:86:F4:F4:91:EA:D7:14:CE:F1:EC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5211ada-1406-3cf0-ace4-7211be6b6547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4e:7e:e5:0e:eb:57:dc:1b:4a:85:e4:fb:a1:a0:f0:6b:61: 39:bd:60:ce:7b:3b:63:c3:cb:64:9b:83:5a:94:d0:77:7e:01: 51:40:4b:89:48:f6:41:90:58:e0:e6:9f:c2:2c:6e:76:64:cd: fd:be:1e:d3:28:82:3c:7b:f4:f7:4d:8a:bd:85:40:23:4d:7e: 22:01:f3:c4:4b:e9:07:74:d5:b8:d9:cd:8d:55:16:e6:3b:4d: e2:21:f4:41:0f:6e:d1:41:ef:eb:78:6f:08:ac:c6:48:93:88: 72:6a:f3:19:d7:f9:a5:a7:33:80:1d:11:85:2b:c4:43:cd:71: 5a:f3:9d:18:44:3f:46:ac:98:85:8c:6f:6d:47:2c:ea:5d:83: 31:07:f3:27:22:e3:db:51:d9:e4:e1:cd:a6:bc:0e:38:14:a2: 2a:22:a0:d6:74:46:07:a2:24:64:0b:4f:a6:f1:ca:71:40:c3: 60:33:c1:7d:e9:0c:87:34:b0:39:17:5c:da:e7:48:0a:ab:2e: 2c:0c:df:86:6d:f5:ec:ea:c5:2f:04:2e:57:8c:55:ef:d3:49: a7:35:1d:44:d9:9c:57:72:60:0e:66:fc:fc:c3:60:07:6e:95: 7d:57:25:ad:d0:e2:4b:0f:c5:ab:e4:72:4b:fe:23:84:85:70: cb:52:56:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/88gvPj/h5qHhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGY2YmI3MDQtY2VjZS00NzUxLWEzZjktOTFjZmRjYmVkYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJoUozDJ0EU4ywo8Qri0TRubVbgxLi5cy4Sd khAbQjfljJRzscEngW5uB5WfEdbhhm9c0D6eFEbA2Z/pMfoMVtz5n5spFw4e/A7w u0aiJq29GpgfMAzm6mcOixkZ2neEsCDIuSfVm/Z33drdJMEX8hrnCOkW70lfZi6y TrjEMuDBzXcVPtT/nWzcKUSw1EQoq49IZZ9BztQAo2JOtDGCcg4kCPS1b0HGZXXc OFy3qSvz0P3/aLqKrFm1eSlePnBuBedwyGs2XSBXltgpfgUsjLuvL/fAaMAk+DcN ePjH6V2vMTxXmolOvBGNgiLMr8i+bTGFEuUKQ/dwInIj2AtZcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw9tMaIxdH8n4b09JHq1xTO8eygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzUyMTFhZGEtMTQwNi0z Y2YwLWFjZTQtNzIxMWJlNmI2NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVOfuUO61fcG0qF5PuhoPBrYTm9YM57O2PDy2Sbg1qU0Hd+AVFAS4lI 9kGQWODmn8IsbnZkzf2+HtMogjx79PdNir2FQCNNfiIB88RL6Qd01bjZzY1VFuY7 TeIh9EEPbtFB7+t4bwisxkiTiHJq8xnX+aWnM4AdEYUrxEPNcVrznRhEP0asmIWM b21HLOpdgzEH8yci49tR2eThzaa8DjgUoioioNZ0RgeiJGQLT6bxynFAw2AzwX3p DIc0sDkXXNrnSAqrLiwM34Zt9ezqxS8ELleMVe/TSac1HUTZnFdyYA5m/PzDYAdu lX1XJa3Q4ksPxavkckv+I4SFcMtSVmA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:26 2026 by rpki-client