$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa File: dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa (raw, json) Hash identifier: IWGfKWWRV814qFjJZRbTVyWu6xBVD8F8X6hF6H1nJKU= Subject key identifier: 59:C3:C6:0F:D6:6A:13:1C:C9:22:AB:69:92:FA:85:48:5B:35:3D:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E000409ABCAB199EF088880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:04:09:ab:ca:b1:99:ef:08:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a3d9cc57-b137-4ede-b8b3-3fb66a99d499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:3e:04:3b:d3:72:9a:ea:f0:84:d8:19:50: e1:4b:99:e6:db:ba:ed:8c:4e:71:e0:dd:67:67:4f: 4b:a4:9c:d2:20:46:0b:45:c1:cd:18:bf:e5:3f:eb: ea:a1:57:dd:89:2f:8f:4b:37:6c:1c:bb:08:b2:8d: 18:2c:4a:aa:99:ab:2e:39:bd:3d:b5:7d:fc:1a:5a: e8:23:63:01:41:e6:13:01:e9:ea:6c:8d:b4:b3:2b: 5c:e7:8b:62:79:df:65:fc:46:d6:f3:a7:65:5b:d6: 70:b2:ef:b9:95:49:60:7d:04:03:e4:32:59:0a:78: d3:80:d2:40:48:2d:57:7c:c1:16:50:72:4a:b6:3d: 49:07:94:b1:51:05:d2:64:ea:c2:54:66:01:e9:4b: 7b:f8:3f:8f:25:47:01:ed:eb:37:51:81:8a:8e:9c: 4b:b8:3b:3f:43:e0:c9:b3:34:c5:7d:c2:09:f2:f2: ae:b7:19:0e:5b:9d:54:db:be:81:f1:96:18:8c:9f: 93:c7:2d:a0:b6:aa:b7:7c:8d:2f:b2:4e:d4:8c:4b: 94:bf:84:29:50:af:e4:5c:31:e9:bf:c0:9e:52:10: 7a:73:3d:45:67:b8:ad:b7:ff:c5:21:a6:50:b2:42: 7c:30:ba:af:ab:88:69:1e:5f:83:5a:9e:0c:88:a7: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C3:C6:0F:D6:6A:13:1C:C9:22:AB:69:92:FA:85:48:5B:35:3D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd1ee6ef-e317-3e4b-bea0-77efeb244665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1d:16:bf:c0:ce:bf:9f:64:ca:93:8e:31:66:f6:da:04:60: 3e:06:04:18:0d:6a:f6:70:4d:4f:cd:00:83:a9:ef:51:59:6b: 84:6c:25:8c:03:ea:5e:e6:9d:d9:89:f5:93:f2:47:2e:64:2e: 9f:18:c4:35:f6:9f:48:cf:af:a8:23:6b:b0:8f:96:a5:3d:08: cc:bf:0f:c6:a5:1a:90:53:52:67:93:85:66:98:26:88:02:ce: ef:18:65:80:bb:3e:00:a1:49:8a:16:81:79:ff:38:be:c3:a3: 14:00:0d:39:b3:2b:6e:b5:8d:04:f1:63:7a:75:fe:e2:75:52: 8f:46:1f:70:fd:b7:ca:d0:fe:73:7c:7a:df:77:f8:07:3e:c0: b5:fc:e4:3a:18:12:88:8d:08:06:47:77:d6:0f:4d:21:53:88: 65:c7:80:12:6d:91:60:c1:e0:88:64:12:9d:99:ba:de:05:c0: 49:b9:92:70:43:f7:ed:f5:2b:cb:9c:f2:c4:80:fc:31:63:a2: bf:4e:ba:16:2c:93:95:f9:bc:b1:a7:03:42:04:d9:0d:dd:30: d6:78:b1:3e:a9:cf:a7:17:80:58:a2:d3:60:d6:61:b8:d2:1b: f5:96:04:41:a0:69:85:e9:df:a6:d1:a8:2f:65:2b:b2:ac:2b: 84:34:2f:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAQJq8qxme8IiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTNkOWNjNTctYjEzNy00ZWRlLWI4YjMtM2ZiNjZhOTlkNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVE+BDvTcprq8ITYGVDhS5nm27rtjE5x4N1n Z09LpJzSIEYLRcHNGL/lP+vqoVfdiS+PSzdsHLsIso0YLEqqmasuOb09tX38Glro I2MBQeYTAenqbI20sytc54tied9l/EbW86dlW9Zwsu+5lUlgfQQD5DJZCnjTgNJA SC1XfMEWUHJKtj1JB5SxUQXSZOrCVGYB6Ut7+D+PJUcB7es3UYGKjpxLuDs/Q+DJ szTFfcIJ8vKutxkOW51U276B8ZYYjJ+Txy2gtqq3fI0vsk7UjEuUv4QpUK/kXDHp v8CeUhB6cz1FZ7itt//FIaZQskJ8MLqvq4hpHl+DWp4MiKe1GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnDxg/WahMcySKraZL6hUhbNT32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQxZWU2ZWYtZTMxNy0z ZTRiLWJlYTAtNzdlZmViMjQ0NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAdFr/Azr+fZMqTjjFm9toEYD4GBBgNavZwTU/NAIOp71FZa4RsJYwD 6l7mndmJ9ZPyRy5kLp8YxDX2n0jPr6gja7CPlqU9CMy/D8alGpBTUmeThWaYJogC zu8YZYC7PgChSYoWgXn/OL7DoxQADTmzK261jQTxY3p1/uJ1Uo9GH3D9t8rQ/nN8 et93+Ac+wLX85DoYEoiNCAZHd9YPTSFTiGXHgBJtkWDB4IhkEp2Zut4FwEm5knBD 9+31K8uc8sSA/DFjor9OuhYsk5X5vLGnA0IE2Q3dMNZ4sT6pz6cXgFii02DWYbjS G/WWBEGgaYXp36bRqC9lK7KsK4Q0Lzo= -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:18 2026 by rpki-client