$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa File: cfb3d42c-ef81-39ea-8662-b711a5af348b.roa (raw, json) Hash identifier: Hk/P5+aLCjj04kGfC1TG/dRsNuUusscZKbUbabj6c2E= Subject key identifier: 1A:4F:42:31:E4:08:97:6C:8F:AC:9C:86:A0:95:3B:ED:CD:70:0C:07 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0007AD9167505C44820080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:07:ad:91:67:50:5c:44:82:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=b3140d6d-5f38-457e-85d4-d7f9cae42084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9e:1e:09:65:3b:76:c7:d6:fa:65:7c:1a:d5: 5e:35:fc:30:5d:e2:b4:94:ae:85:f8:85:9c:97:71: 6e:34:45:47:a6:84:e6:22:1c:d0:5b:07:7f:cf:b5: e4:d9:f5:01:ed:53:cb:07:f7:61:43:43:c8:59:9e: 97:81:d7:ef:01:05:94:07:4f:db:12:ae:04:64:42: 00:b4:b5:f7:84:bc:92:aa:bf:62:42:b9:fb:c0:e5: 92:7b:26:fa:76:fa:76:c7:91:2b:02:54:a5:e6:4b: 11:4e:c0:bc:20:6d:35:6a:a5:ec:10:ef:79:8e:cc: db:a6:d1:a3:84:8a:a9:8c:c3:e1:d7:3d:60:ff:78: 44:9b:4c:4c:ef:a1:88:09:52:74:e2:23:3e:5d:0b: 26:ec:2f:47:be:6e:b9:9a:45:26:47:0d:3f:0b:03: c6:85:f0:e8:38:b4:c8:1f:67:ab:7e:5c:7e:39:d5: 08:3e:88:f2:06:1b:7e:c3:1b:3a:46:55:fb:db:dc: 44:5d:a0:d3:89:e2:fc:ae:01:88:b2:4c:57:2b:a5: 46:8a:2f:e8:52:d7:aa:8c:4e:4b:46:a6:dd:29:ed: d7:e1:06:5a:bc:ed:41:d5:23:52:d2:93:94:d6:a0: f3:76:40:41:16:2d:c5:8c:df:79:46:64:a5:36:6e: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4F:42:31:E4:08:97:6C:8F:AC:9C:86:A0:95:3B:ED:CD:70:0C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfb3d42c-ef81-39ea-8662-b711a5af348b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7b:c6:cc:52:6c:48:e6:31:3b:da:ed:a9:cb:38:7d:19:9f: fe:42:bc:d3:69:d5:b5:47:78:14:d8:4f:34:68:2f:0d:3d:f1: 7d:fc:20:5d:7b:67:da:e1:eb:e1:ae:51:13:47:e6:e3:66:19: dc:a6:a6:a8:09:ef:4b:fc:01:1b:24:2b:ec:8a:d0:b4:1f:4f: 1a:c6:e7:45:a6:cd:6e:ec:d6:f9:e9:96:22:bd:de:93:8e:36: 19:c7:0e:91:97:df:8d:c0:e9:35:a2:fe:5c:9f:80:d9:26:06: 1d:b1:31:28:8c:38:25:af:b2:33:16:ab:d4:8c:87:51:32:14: 24:a7:71:c7:aa:c4:27:0f:64:48:8c:90:63:af:27:ec:7a:63: 3d:85:d8:e9:f2:db:0f:32:a6:3a:ff:6e:9d:65:37:d7:98:8d: 5a:06:cf:d7:d3:5f:5f:f1:79:73:ec:6c:30:4e:04:dd:f8:32: 74:a8:a1:42:e5:b5:87:7b:52:8c:55:d0:b4:64:87:70:25:c7: a3:7c:b6:6b:65:f0:3d:2c:f3:2d:10:6f:4d:03:2f:55:b4:e3: 8c:33:68:24:b3:80:70:5b:08:ab:9a:19:fd:78:41:b4:a0:27: 47:75:77:42:05:40:93:2e:0e:22:53:fe:94:c4:0e:26:14:7b: 63:d4:c4:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAetkWdQXESCAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YjMxNDBkNmQtNWYzOC00NTdlLTg1ZDQtZDdmOWNhZTQyMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J4eCWU7dsfW+mV8GtVeNfwwXeK0lK6F+IWc l3FuNEVHpoTmIhzQWwd/z7Xk2fUB7VPLB/dhQ0PIWZ6XgdfvAQWUB0/bEq4EZEIA tLX3hLySqr9iQrn7wOWSeyb6dvp2x5ErAlSl5ksRTsC8IG01aqXsEO95jszbptGj hIqpjMPh1z1g/3hEm0xM76GICVJ04iM+XQsm7C9Hvm65mkUmRw0/CwPGhfDoOLTI H2erflx+OdUIPojyBht+wxs6RlX729xEXaDTieL8rgGIskxXK6VGii/oUteqjE5L RqbdKe3X4QZavO1B1SNS0pOU1qDzdkBBFi3FjN95RmSlNm76lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpPQjHkCJdsj6ychqCVO+3NcAwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2ZiM2Q0MmMtZWY4MS0z OWVhLTg2NjItYjcxMWE1YWYzNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx7xsxSbEjmMTva7anLOH0Zn/5CvNNp1bVHeBTYTzRoLw098X38IF17 Z9rh6+GuURNH5uNmGdympqgJ70v8ARskK+yK0LQfTxrG50WmzW7s1vnpliK93pOO NhnHDpGX343A6TWi/lyfgNkmBh2xMSiMOCWvsjMWq9SMh1EyFCSncceqxCcPZEiM kGOvJ+x6Yz2F2Ony2w8ypjr/bp1lN9eYjVoGz9fTX1/xeXPsbDBOBN34MnSooULl tYd7UoxV0LRkh3Alx6N8tmtl8D0s8y0Qb00DL1W044wzaCSzgHBbCKuaGf14QbSg J0d1d0IFQJMuDiJT/pTEDiYUe2PUxNo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:05 2026 by rpki-client