$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa File: cfb3d42c-ef81-39ea-8662-b711a5af348b.roa (raw, json) Hash identifier: C6YjOuRwgddZMMnclbyci9aHLcXwrkV697iwQQhxeMg= Subject key identifier: 53:7C:41:49:16:12:8F:55:69:53:9F:0A:1E:E3:28:CE:58:92:A6:53 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629309A209CA241948B85500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:09:a2:09:ca:24:19:48:b8:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=26a352d5-f388-4b64-8051-e623d05af4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:71:4a:2f:35:4a:63:62:08:f6:05:51:53: fd:b1:4a:2f:1a:00:d4:54:c5:8c:7b:a8:08:f5:a4: 2c:23:df:91:8f:49:8d:25:0e:c7:9b:69:38:74:e0: 12:a3:9a:0a:52:a9:9f:82:94:c1:df:38:e0:5a:3d: 1f:43:bd:4b:84:5f:aa:39:6a:9d:9d:e2:d0:f0:c9: 38:1c:68:b9:9a:76:77:0e:19:4e:88:15:5f:4b:af: 5f:d1:f7:8e:4b:88:64:83:e4:1a:69:63:5f:33:39: a1:df:9a:d8:3e:85:4f:af:41:a7:e9:a3:11:a0:89: 41:34:1c:82:c6:b9:0f:29:f7:73:a7:85:d8:77:87: de:0b:70:ad:7b:20:fd:8a:62:1e:9b:41:be:dc:aa: 6e:54:58:32:23:a5:55:d8:48:dc:6a:41:32:2d:0d: 75:42:f4:56:78:a4:ab:14:23:e7:b7:0a:55:50:f3: 1f:d2:50:8a:92:0a:e4:81:88:1d:44:f7:d4:09:ad: 35:84:3b:c2:25:77:25:0c:06:9c:27:a1:70:32:a3: 9e:da:b7:2e:08:c5:7b:ab:d4:05:d2:9d:3d:f8:27: da:fa:57:bc:ce:38:cb:d7:2c:a7:20:59:ab:0d:ed: e6:7f:a9:ce:f6:34:02:3a:15:b6:f1:ad:cf:36:cb: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7C:41:49:16:12:8F:55:69:53:9F:0A:1E:E3:28:CE:58:92:A6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ea:44:b7:b3:52:14:26:f0:af:73:28:00:80:2f:cc:64:41: b2:26:28:84:47:b5:86:b9:cb:f1:ba:cf:28:e5:09:b2:92:06: c4:44:18:e4:f3:50:9f:ed:56:8f:43:50:a1:d9:ad:ba:de:28: 4a:09:b9:9b:71:ec:6f:a8:78:f6:aa:58:b9:ab:62:97:bb:46: 2d:0a:18:a7:19:76:e8:02:79:95:f1:29:1c:47:3e:98:46:1e: af:fd:be:b6:ae:0f:a8:0f:6c:dd:f1:f3:cb:01:bd:51:f7:9f: 82:cb:01:c9:be:d5:5b:87:97:f9:37:67:ba:b3:1e:41:9c:bc: f2:c6:77:5f:0b:39:85:f7:0b:e5:10:de:0c:e6:82:e3:61:74: 80:84:e2:47:38:e4:e3:7f:d2:b5:28:36:43:c8:c0:14:11:7d: c0:d5:bd:7e:93:c3:56:44:69:9d:fb:d0:75:81:aa:e9:bf:fb: 27:e6:b9:ad:09:10:42:a3:35:2d:d3:e3:0f:2b:fa:a5:cd:11: 84:90:c0:e7:5f:36:91:d0:da:86:46:7b:7f:ea:cd:45:bb:0b: c0:15:43:8d:e8:f8:5e:a9:7b:69:b3:80:b7:09:bc:1c:b0:ab: be:10:ff:b8:7a:54:4e:91:cb:94:07:93:bf:73:a9:95:e6:f3: e3:dc:26:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwmiCcokGUi4VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MjZhMzUyZDUtZjM4OC00YjY0LTgwNTEtZTYyM2QwNWFmNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRdxSi81SmNiCPYFUVP9sUovGgDUVMWMe6gI 9aQsI9+Rj0mNJQ7Hm2k4dOASo5oKUqmfgpTB3zjgWj0fQ71LhF+qOWqdneLQ8Mk4 HGi5mnZ3DhlOiBVfS69f0feOS4hkg+QaaWNfMzmh35rYPoVPr0Gn6aMRoIlBNByC xrkPKfdzp4XYd4feC3CteyD9imIem0G+3KpuVFgyI6VV2EjcakEyLQ11QvRWeKSr FCPntwpVUPMf0lCKkgrkgYgdRPfUCa01hDvCJXclDAacJ6FwMqOe2rcuCMV7q9QF 0p09+Cfa+le8zjjL1yynIFmrDe3mf6nO9jQCOhW28a3PNsuvmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFN8QUkWEo9VaVOfCh7jKM5YkqZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2ZiM2Q0MmMtZWY4MS0z OWVhLTg2NjItYjcxMWE1YWYzNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnqRLezUhQm8K9zKACAL8xkQbImKIRHtYa5y/G6zyjlCbKSBsREGOTz UJ/tVo9DUKHZrbreKEoJuZtx7G+oePaqWLmrYpe7Ri0KGKcZdugCeZXxKRxHPphG Hq/9vrauD6gPbN3x88sBvVH3n4LLAcm+1VuHl/k3Z7qzHkGcvPLGd18LOYX3C+UQ 3gzmguNhdICE4kc45ON/0rUoNkPIwBQRfcDVvX6Tw1ZEaZ370HWBqum/+yfmua0J EEKjNS3T4w8r+qXNEYSQwOdfNpHQ2oZGe3/qzUW7C8AVQ43o+F6pe2mzgLcJvByw q74Q/7h6VE6Ry5QHk79zqZXm8+PcJg0= -----END CERTIFICATE-----Generated at Sun Nov 15 10:06:48 2026 by rpki-client