$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d12ea3b4-6d93-38f1-accf-9f44be86fe03.roa File: d12ea3b4-6d93-38f1-accf-9f44be86fe03.roa (raw, json) Hash identifier: u9kdYlFZEfNt703n9scORrgdPWlYsjugjqusUab9oOU= Subject key identifier: 49:AA:37:21:40:DF:B6:E2:08:5C:F1:75:D4:14:FF:BF:46:75:67:53 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00037150B8970F28437BE0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d12ea3b4-6d93-38f1-accf-9f44be86fe03.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:03:71:50:b8:97:0f:28:43:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=2b0d7743-a1c9-45fa-9c31-9e2cf6dc3907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:b5:a6:86:09:99:e6:b7:10:55:5c:47:a6: 41:ef:6b:41:95:02:69:25:35:8f:54:ad:4d:1b:04: cd:ce:02:3b:3b:ef:35:f2:e7:06:98:b0:2b:18:a7: 65:f2:18:b5:80:64:b3:e5:ad:90:ed:34:55:6b:21: 54:b8:c4:07:22:b8:33:77:66:d6:b9:25:f3:16:ce: 2e:ef:c8:9c:43:df:2a:21:65:e5:b3:a9:b3:23:0d: 60:ad:05:90:f4:22:84:73:69:e4:2b:7e:2a:6a:7a: 48:92:5f:c2:4d:5a:df:02:19:69:64:ce:68:3f:fe: fa:7d:58:91:43:ea:10:34:ec:fb:f7:74:94:92:50: a9:7e:ed:e0:e9:d3:c7:e2:bd:27:d2:7b:c6:5a:ac: 78:9e:33:03:8a:79:a4:79:c9:ed:35:8a:46:e7:a0: 3f:67:7e:04:91:21:18:a6:58:9c:e7:91:7c:02:24: 8b:d7:4c:70:3b:d3:d6:e5:79:69:53:5c:7e:3b:c4: a2:f7:fa:8e:41:f4:ca:2a:c4:69:3d:09:2b:30:86: 72:25:e7:9e:ec:9e:32:2e:6d:40:59:db:d4:8f:6f: 47:7c:5b:76:72:0c:12:5b:40:ee:a3:1d:8d:bb:d4: af:e7:aa:d4:5b:25:64:b3:b3:bf:cf:17:c6:16:0b: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AA:37:21:40:DF:B6:E2:08:5C:F1:75:D4:14:FF:BF:46:75:67:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d12ea3b4-6d93-38f1-accf-9f44be86fe03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:67:f0:30:22:f1:40:b7:0a:a2:e4:2e:af:e0:7b:0a:92:3c: 12:76:8f:ae:07:09:12:f8:51:4b:3e:ac:94:75:c2:0d:ed:20: 07:24:ac:79:d1:65:cb:3a:ac:a9:e4:c6:50:25:19:b3:16:12: 5e:87:ec:47:ac:ad:00:31:fe:a6:62:5b:d3:ef:03:16:6f:f0: 37:cc:b4:42:72:85:2f:07:9f:a3:0a:b8:40:7c:c8:b8:8f:a5: 8c:ad:e8:af:31:7c:26:28:12:2a:46:d0:16:32:3e:a5:e7:e1: 71:47:2c:f7:db:77:1c:5a:68:67:e9:7b:6c:a8:14:d3:bc:5b: aa:cf:c7:21:82:6f:63:17:d5:19:ed:53:c6:ba:cf:20:7a:a4: 66:95:ab:4a:7b:8d:cd:25:cc:c9:e6:c8:00:4d:e7:ad:dc:26: 6a:f2:ea:c2:aa:18:01:b6:ec:aa:b0:e8:56:6d:ec:6f:c8:22: 4a:a4:17:02:9d:02:69:99:c3:48:2b:4a:21:fa:8a:94:36:df: 69:a9:6d:e9:49:e2:7d:f8:95:ed:61:e7:17:fd:d0:ba:f7:66: 22:ac:71:6c:af:e9:24:4c:b2:92:06:7c:dc:98:f2:62:94:f7: 62:57:7d:2f:1f:e6:d9:de:c0:67:e0:58:e4:ff:c3:e6:28:a7: 75:27:ef:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AANxULiXDyhDe+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MmIwZDc3NDMtYTFjOS00NWZhLTljMzEtOWUyY2Y2ZGMzOTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBW1poYJmea3EFVcR6ZB72tBlQJpJTWPVK1N GwTNzgI7O+818ucGmLArGKdl8hi1gGSz5a2Q7TRVayFUuMQHIrgzd2bWuSXzFs4u 78icQ98qIWXls6mzIw1grQWQ9CKEc2nkK34qanpIkl/CTVrfAhlpZM5oP/76fViR Q+oQNOz793SUklCpfu3g6dPH4r0n0nvGWqx4njMDinmkecntNYpG56A/Z34EkSEY plic55F8AiSL10xwO9PW5XlpU1x+O8Si9/qOQfTKKsRpPQkrMIZyJeee7J4yLm1A WdvUj29HfFt2cgwSW0Duox2Nu9Sv56rUWyVks7O/zxfGFgv+uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmqNyFA37biCFzxddQU/79GdWdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDEyZWEzYjQtNmQ5My0z OGYxLWFjY2YtOWY0NGJlODZmZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1n8DAi8UC3CqLkLq/gewqSPBJ2j64HCRL4UUs+rJR1wg3tIAckrHnR Zcs6rKnkxlAlGbMWEl6H7EesrQAx/qZiW9PvAxZv8DfMtEJyhS8Hn6MKuEB8yLiP pYyt6K8xfCYoEipG0BYyPqXn4XFHLPfbdxxaaGfpe2yoFNO8W6rPxyGCb2MX1Rnt U8a6zyB6pGaVq0p7jc0lzMnmyABN563cJmry6sKqGAG27Kqw6FZt7G/IIkqkFwKd AmmZw0grSiH6ipQ232mpbelJ4n34le1h5xf90Lr3ZiKscWyv6SRMspIGfNyY8mKU 92JXfS8f5tnewGfgWOT/w+Yop3Un758= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:04 2026 by rpki-client