$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa File: da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa (raw, json) Hash identifier: gEcxIqp9vXgPyUFm8gkPj0YlNuSbWnXMl+Sz8jUYIxs= Subject key identifier: 83:91:6C:EA:0F:24:61:3C:F5:88:3B:7D:B2:71:EA:5B:1B:90:D1:9B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD2487223D3EF92336AC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d2:48:72:23:d3:ef:92:33:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=fa0ef0c3-46de-4604-9386-882a771d1c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:7b:dc:23:e9:7b:40:af:7f:a3:87:8c:3b: 89:2c:e5:b3:e7:dd:08:20:3c:b1:c4:0c:d5:b5:df: 7f:6b:d6:2d:67:5b:63:6e:a2:1b:38:c4:42:d3:6c: 4a:23:ba:da:d0:32:cd:cb:5e:3d:6d:8a:80:ca:5a: 44:f6:7b:6a:22:11:44:ed:26:02:4e:89:cf:81:55: 5e:39:32:27:b2:f1:cd:e9:f5:4b:39:6d:34:8f:14: b0:56:9b:2d:f3:cd:cc:69:b7:86:cc:25:16:a2:3e: 80:8f:c3:a0:57:26:50:7e:11:4f:2d:0d:43:dd:5f: 69:3a:de:7d:9e:a3:85:99:ab:80:b0:2c:30:99:c1: 87:91:e8:dd:c5:d4:a2:51:2c:75:63:ef:b9:4a:5b: a2:02:08:e9:a6:1b:64:93:5a:57:a4:34:b8:eb:7c: 95:aa:ef:da:26:84:26:8f:b3:89:d3:80:dc:b9:26: 3f:bf:c0:ef:30:df:10:de:6c:d6:25:e5:be:31:48: 8b:a6:53:07:43:54:77:bb:3a:28:98:d0:ed:ff:d0: 3a:80:46:6f:d7:8a:74:68:6c:92:6d:0a:e6:7e:4c: 21:9b:11:7f:25:e3:a0:c4:75:e3:e4:28:d5:42:4a: b3:bc:88:cf:20:1e:cb:55:b7:0b:a1:d5:60:b8:d6: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:91:6C:EA:0F:24:61:3C:F5:88:3B:7D:B2:71:EA:5B:1B:90:D1:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/da3e48fd-6ea8-3462-9a6b-7c1e3da50f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:fb:d6:fb:8e:e7:4f:2d:9f:53:40:57:cd:4d:4f:db:dc:f2: 50:b9:f6:9d:ce:ea:e9:e2:7c:e7:4c:2c:99:f2:a4:bd:56:a5: 85:4b:bd:ef:4d:80:59:e8:e0:cc:f8:52:20:1d:f7:5b:6f:9a: 52:95:00:84:9b:eb:50:f3:d5:ae:db:88:17:ff:c4:17:42:a9: 8c:34:30:db:a4:61:3e:30:94:30:17:ba:dc:1a:05:29:0c:e0: a6:87:01:69:54:f5:3b:ae:50:b9:fc:e0:e3:9c:33:95:f8:3b: 09:cc:ef:7a:f8:59:a8:53:d1:a1:15:d3:a9:33:3e:91:5b:47: f4:06:8b:f8:8d:55:32:ab:d9:76:3a:3e:5c:77:25:39:1e:99: 3c:36:7d:b1:4d:e0:1d:4e:5a:e2:be:87:af:24:42:da:46:f5: 0f:4c:62:fe:c1:10:fe:d9:7c:f9:a8:7d:40:27:25:bb:7a:34: 5e:9f:0a:61:3c:93:44:9e:98:06:44:8b:98:6d:de:18:da:5b: 40:3d:5c:58:ff:c3:13:da:cc:55:c9:f5:cb:02:22:6e:17:ce: b6:ac:43:63:32:37:fe:20:7b:16:86:95:98:da:bc:c3:5d:e3: c3:2a:44:39:97:e0:d1:95:ce:69:32:34:df:96:e7:2f:ea:7b: 84:82:c7:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9JIciPT75IzasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZmEwZWYwYzMtNDZkZS00NjA0LTkzODYtODgyYTc3MWQxYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhB73CPpe0Cvf6OHjDuJLOWz590IIDyxxAzV td9/a9YtZ1tjbqIbOMRC02xKI7ra0DLNy149bYqAylpE9ntqIhFE7SYCTonPgVVe OTInsvHN6fVLOW00jxSwVpst883MabeGzCUWoj6Aj8OgVyZQfhFPLQ1D3V9pOt59 nqOFmauAsCwwmcGHkejdxdSiUSx1Y++5SluiAgjpphtkk1pXpDS463yVqu/aJoQm j7OJ04DcuSY/v8DvMN8Q3mzWJeW+MUiLplMHQ1R3uzoomNDt/9A6gEZv14p0aGyS bQrmfkwhmxF/JeOgxHXj5CjVQkqzvIjPIB7LVbcLodVguNZ02wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIORbOoPJGE89Yg7fbJx6lsbkNGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGEzZTQ4ZmQtNmVhOC0z NDYyLTlhNmItN2MxZTNkYTUwZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb71vuO508tn1NAV81NT9vc8lC59p3O6unifOdMLJnypL1WpYVLve9N gFno4Mz4UiAd91tvmlKVAISb61Dz1a7biBf/xBdCqYw0MNukYT4wlDAXutwaBSkM 4KaHAWlU9TuuULn84OOcM5X4OwnM73r4WahT0aEV06kzPpFbR/QGi/iNVTKr2XY6 Plx3JTkemTw2fbFN4B1OWuK+h68kQtpG9Q9MYv7BEP7ZfPmofUAnJbt6NF6fCmE8 k0SemAZEi5ht3hjaW0A9XFj/wxPazFXJ9csCIm4XzrasQ2MyN/4gexaGlZjavMNd 48MqRDmX4NGVzmkyNN+W5y/qe4SCx0s= -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:25 2026 by rpki-client