$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d05495e1-37ad-3544-920d-93adc921c846.roa File: d05495e1-37ad-3544-920d-93adc921c846.roa (raw, json) Hash identifier: bgnuZ7xZR7/97nQkrDXPyYDCQb0i5wgvuLxfqG9xZkg= Subject key identifier: 9A:AF:41:F9:B7:31:1B:0D:09:49:E0:25:07:EA:0C:89:4A:80:AB:24 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F62930923B7749693895C2C40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d05495e1-37ad-3544-920d-93adc921c846.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:09:23:b7:74:96:93:89:5c:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=554823ca-dc57-4323-b0b5-0efada8e1649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:d0:1b:06:ac:1d:37:fa:ab:05:df:52:eb: f4:41:a9:78:f5:46:b9:29:a1:3f:9f:df:8a:4a:90: f2:69:d4:c3:1d:3d:6f:0b:5e:cb:65:7d:df:1d:c4: e9:88:88:c8:c4:0a:c1:60:1b:0c:94:a3:cd:a7:73: bb:d4:00:af:04:8a:e5:96:42:11:cc:9a:3d:17:34: 5c:78:51:dd:88:62:c3:e0:93:b1:e6:6e:df:9b:df: 00:df:5f:6e:b8:f0:b4:b8:b2:31:dc:e5:7a:0e:96: 92:83:0e:19:47:23:10:e0:20:52:5d:18:a7:a3:e6: 97:ac:60:54:55:9d:f2:f8:37:6c:a9:c1:e1:9d:c8: f2:46:ac:1d:bc:1b:48:2c:a7:a3:10:4e:78:8b:9a: eb:a3:14:93:01:e9:5b:85:b1:c2:d3:1d:c2:88:6c: ac:d9:37:95:85:e1:c8:50:eb:e2:cb:49:d2:f8:99: bf:e1:5b:b1:70:02:c8:a2:cb:51:61:db:d1:9d:bb: 13:a5:76:9e:22:07:17:35:12:ab:94:2e:0d:63:74: df:44:af:da:f1:88:b7:9f:0e:06:ae:be:a9:6a:8d: 89:55:0d:77:82:39:33:bb:70:b7:05:d5:33:ff:01: 8c:29:b0:cd:70:38:36:2c:0d:62:b9:1b:30:34:70: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AF:41:F9:B7:31:1B:0D:09:49:E0:25:07:EA:0C:89:4A:80:AB:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d05495e1-37ad-3544-920d-93adc921c846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c3:fe:fb:78:6c:3f:9a:5e:c9:2a:98:cf:ef:2b:2a:10:b2: 26:c4:05:46:93:dc:7b:10:63:da:52:04:ad:5b:1d:78:86:8e: b6:b9:ff:88:e9:8d:d8:4a:7e:84:e0:ba:1e:0b:5b:62:e0:2a: 87:0d:0c:47:1b:56:c2:d0:32:1b:13:c6:82:f1:56:7a:2a:c2: af:ee:38:a9:45:9c:d6:9c:5b:66:e8:08:11:f8:ca:2f:78:1f: 0f:30:81:d6:47:33:ce:d8:6d:6a:f3:81:71:ad:60:ff:19:b2: 9b:37:6d:23:af:e7:62:31:11:47:11:42:9a:62:c6:8e:fc:78: 06:4e:73:90:4b:f2:6d:c8:89:8b:f0:d6:0b:7a:00:2e:ec:da: 7b:51:06:67:b7:a8:81:62:6b:6b:6c:e7:49:ac:98:6e:a9:e9: 6a:28:ab:99:8f:41:92:cb:e1:3f:24:56:96:38:b7:71:96:bb: 28:8e:f9:2a:db:23:c2:9a:c2:54:19:13:dd:2f:03:07:c8:c2: d3:a0:72:35:e7:52:08:57:00:4b:22:8d:8a:a9:ba:16:d7:8d: 49:30:f6:2e:39:5e:b7:46:f5:84:a3:f3:cb:f9:c6:03:06:52: c4:c6:84:bf:8a:b6:26:14:53:09:83:e8:36:6e:88:12:77:50: f4:c7:37:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwkjt3SWk4lcLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NTU0ODIzY2EtZGM1Ny00MzIzLWIwYjUtMGVmYWRhOGUxNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkPQGwasHTf6qwXfUuv0Qal49Ua5KaE/n9+K SpDyadTDHT1vC17LZX3fHcTpiIjIxArBYBsMlKPNp3O71ACvBIrllkIRzJo9FzRc eFHdiGLD4JOx5m7fm98A319uuPC0uLIx3OV6DpaSgw4ZRyMQ4CBSXRino+aXrGBU VZ3y+DdsqcHhncjyRqwdvBtILKejEE54i5rroxSTAelbhbHC0x3CiGys2TeVheHI UOviy0nS+Jm/4VuxcALIostRYdvRnbsTpXaeIgcXNRKrlC4NY3TfRK/a8Yi3nw4G rr6pao2JVQ13gjkzu3C3BdUz/wGMKbDNcDg2LA1iuRswNHDpIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqvQfm3MRsNCUngJQfqDIlKgKskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA1NDk1ZTEtMzdhZC0z NTQ0LTkyMGQtOTNhZGM5MjFjODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHD/vt4bD+aXskqmM/vKyoQsibEBUaT3HsQY9pSBK1bHXiGjra5/4jp jdhKfoTguh4LW2LgKocNDEcbVsLQMhsTxoLxVnoqwq/uOKlFnNacW2boCBH4yi94 Hw8wgdZHM87YbWrzgXGtYP8Zsps3bSOv52IxEUcRQppixo78eAZOc5BL8m3IiYvw 1gt6AC7s2ntRBme3qIFia2ts50msmG6p6Wooq5mPQZLL4T8kVpY4t3GWuyiO+Srb I8KawlQZE90vAwfIwtOgcjXnUghXAEsijYqpuhbXjUkw9i45XrdG9YSj88v5xgMG UsTGhL+KtiYUUwmD6DZuiBJ3UPTHN9M= -----END CERTIFICATE-----Generated at Sun Nov 15 15:31:47 2026 by rpki-client