$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa File: e5178a4c-dbdb-35df-8402-ea056b4cb828.roa (raw, json) Hash identifier: Bi7slcNpef/nTH0vELdD8dRFdk04W4xWiE3IeDDvRAA= Subject key identifier: EB:76:2F:C0:C4:06:79:5E:38:E4:2F:9C:6C:24:19:AE:8F:27:C6:41 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFCF6364393BFB45258240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:cf:63:64:39:3b:fb:45:25:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=b0b8e329-5289-4196-9b95-0fac443c25c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:0b:75:42:83:0f:a9:b2:e5:ec:0d:2e:b4: 6b:d9:37:a5:31:e8:33:12:33:9c:f9:1e:e1:31:50: c8:7b:4c:e6:6f:9e:77:9e:d0:45:9d:5b:b9:a7:44: 36:72:c9:e5:71:1c:cc:3a:e3:99:18:bd:d9:b2:f7: de:58:ec:d4:d2:d9:2e:17:79:ef:3d:83:98:7c:2c: fa:a3:5d:42:a9:08:db:c2:76:0b:1e:46:70:df:e9: 1c:01:b7:d5:04:46:fc:b7:47:cd:8c:3b:0a:b2:7c: 12:92:95:e5:7c:89:f5:a8:b5:4c:7a:3a:7e:fd:58: 8b:ac:2e:ae:a8:d2:ae:8b:0a:fa:24:97:3d:19:0b: ce:16:58:e5:e5:a1:9a:0f:c5:77:af:59:51:24:9a: 98:1a:ac:3f:47:03:f5:e2:c7:a2:3e:2b:04:66:67: 20:94:50:fb:36:02:bb:60:f2:c2:23:70:62:66:70: 6e:7c:9f:87:23:84:68:09:9f:7f:38:80:e5:80:9d: d1:da:c6:01:51:54:62:4e:5c:9c:a0:60:d6:47:18: 4f:1f:57:3e:15:8a:0c:58:c5:b0:b0:6b:38:38:91: b9:c8:0a:5c:c4:9e:8f:18:3d:2d:7f:d1:74:48:a0: 1b:37:bf:4d:47:e4:b4:9a:24:c8:06:5d:e5:70:3e: 75:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:76:2F:C0:C4:06:79:5E:38:E4:2F:9C:6C:24:19:AE:8F:27:C6:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5178a4c-dbdb-35df-8402-ea056b4cb828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8e:7d:9a:da:8d:aa:80:d2:51:c4:a1:56:82:e3:be:9b:07: 41:04:d6:34:bb:40:f0:ba:cf:1e:29:30:2d:de:a7:be:38:3c: 5d:69:dc:6b:2c:44:56:33:d7:cd:d7:60:1f:54:d6:59:a3:f7: 79:cc:bf:56:b4:76:6e:94:ba:01:99:d8:ef:62:c4:e6:b9:2b: 90:22:30:2e:01:6c:46:d9:99:78:92:4d:c3:0c:dd:ac:ad:c9: b3:e5:33:87:9c:29:d0:64:cb:5a:4f:f8:3c:06:7a:f2:e3:a7: f4:fa:66:5e:70:cb:26:f4:f8:87:26:aa:b7:0d:36:67:91:07: 4b:65:b3:7e:8c:55:ef:f5:aa:0b:4f:74:2c:e7:29:2c:73:de: ee:5c:57:d2:36:b5:41:8c:b7:d4:c3:86:f9:76:0a:6f:62:22: 89:b9:24:d2:c4:24:92:ec:de:a6:6c:58:a4:7e:f7:03:26:9c: 89:bf:e7:37:67:89:b5:48:ef:0f:ae:e9:06:b5:cd:8a:9e:28: ce:03:2d:ff:cb:da:95:2c:63:7e:18:d1:ee:f9:bf:7d:1a:f5: 57:ab:33:f4:95:b4:f7:79:90:20:b8:1b:09:90:0e:f8:a0:47: 0c:a4:e2:f5:91:43:77:0a:64:d3:d9:c6:02:72:b1:bf:b5:71: 5d:29:52:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/89jZDk7+0UlgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YjBiOGUzMjktNTI4OS00MTk2LTliOTUtMGZhYzQ0M2MyNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZILdUKDD6my5ewNLrRr2TelMegzEjOc+R7h MVDIe0zmb553ntBFnVu5p0Q2csnlcRzMOuOZGL3ZsvfeWOzU0tkuF3nvPYOYfCz6 o11CqQjbwnYLHkZw3+kcAbfVBEb8t0fNjDsKsnwSkpXlfIn1qLVMejp+/ViLrC6u qNKuiwr6JJc9GQvOFljl5aGaD8V3r1lRJJqYGqw/RwP14seiPisEZmcglFD7NgK7 YPLCI3BiZnBufJ+HI4RoCZ9/OIDlgJ3R2sYBUVRiTlycoGDWRxhPH1c+FYoMWMWw sGs4OJG5yApcxJ6PGD0tf9F0SKAbN79NR+S0miTIBl3lcD51JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt2L8DEBnleOOQvnGwkGa6PJ8ZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTUxNzhhNGMtZGJkYi0z NWRmLTg0MDItZWEwNTZiNGNiODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeOfZrajaqA0lHEoVaC476bB0EE1jS7QPC6zx4pMC3ep744PF1p3Gss RFYz183XYB9U1lmj93nMv1a0dm6UugGZ2O9ixOa5K5AiMC4BbEbZmXiSTcMM3ayt ybPlM4ecKdBky1pP+DwGevLjp/T6Zl5wyyb0+IcmqrcNNmeRB0tls36MVe/1qgtP dCznKSxz3u5cV9I2tUGMt9TDhvl2Cm9iIom5JNLEJJLs3qZsWKR+9wMmnIm/5zdn ibVI7w+u6Qa1zYqeKM4DLf/L2pUsY34Y0e75v30a9VerM/SVtPd5kCC4GwmQDvig Rwyk4vWRQ3cKZNPZxgJysb+1cV0pUuk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:54:09 2026 by rpki-client