$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f503cbf9-9a82-3f6b-9e3a-a279ab48c604.roa File: f503cbf9-9a82-3f6b-9e3a-a279ab48c604.roa (raw, json) Hash identifier: eOfGPVv2LxxVyurji1NUtU8kqt+OPkHctdkFpjwO2BY= Subject key identifier: E4:93:B9:90:49:9A:B5:00:6A:F1:46:45:10:59:8B:40:E9:CF:16:95 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD1207E1841ABAD25D900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f503cbf9-9a82-3f6b-9e3a-a279ab48c604.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d1:20:7e:18:41:ab:ad:25:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=66aab75d-b4c8-479d-aed3-7d4a7a322675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:ec:f9:d8:e6:8d:f6:9c:4e:b2:f8:b4:c3: 0e:c1:76:5e:ba:6f:16:b2:42:9d:31:7a:84:3f:df: c1:83:67:c1:9d:93:33:36:4a:50:4c:5a:83:c3:48: 6b:71:1e:16:77:c3:de:81:3d:06:8e:33:98:c1:e7: 83:af:4b:e2:d4:86:2a:01:3e:86:67:c7:44:ff:85: fb:23:d0:f1:51:a1:8c:ac:0d:07:63:f8:e3:b7:69: c8:7b:c4:05:0f:37:e9:28:ef:cb:d8:d2:25:9e:a7: 59:00:7b:60:48:50:01:b7:b2:68:67:c0:3e:a7:42: 93:a5:34:7f:66:84:ff:98:cf:47:de:14:ea:bd:ab: a5:9f:64:ad:64:72:10:a5:b5:33:a3:72:f9:ca:7c: e8:87:ad:12:40:db:69:73:fd:17:6d:c2:4c:24:70: 2a:fa:db:ad:d1:48:0a:25:6b:de:6d:44:32:4a:4f: cf:c6:6c:a5:c1:cd:1d:ce:72:2b:8e:73:82:16:16: ec:e2:0b:fb:f9:5c:91:18:c1:e9:2c:ac:a1:ec:7a: 5e:8f:ab:45:82:af:b6:4c:b0:bf:ef:3a:7d:10:09: e4:b9:84:94:9f:72:f3:36:48:52:c7:41:cf:ef:ab: 92:49:64:58:89:77:df:bb:ac:26:72:4b:b9:b1:24: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:B9:90:49:9A:B5:00:6A:F1:46:45:10:59:8B:40:E9:CF:16:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f503cbf9-9a82-3f6b-9e3a-a279ab48c604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b6:01:cd:2c:d5:69:57:89:34:0e:c8:7b:2a:d8:43:4f:d8: 96:ed:86:14:19:27:35:20:04:90:f4:92:26:80:5a:1a:c7:d6: c5:17:05:f3:8e:ee:77:38:43:b0:12:95:d9:19:44:3e:23:e5: f0:e8:5a:9f:c1:08:92:f2:e5:33:79:9f:5a:9e:ff:a9:d0:38: 80:9f:b6:12:30:b6:37:66:93:4f:70:6c:f2:95:86:58:a2:fa: ef:d5:49:ec:51:65:e0:88:ca:c6:96:33:f7:05:1d:9d:14:93: c2:d2:15:86:7b:05:1c:cf:72:b1:ac:16:3e:9d:2e:ff:46:67: 64:3c:a4:18:87:57:86:85:1b:43:51:0f:ef:c5:73:1c:8f:85: 56:4a:13:3d:01:3f:54:26:7f:9f:02:48:f7:cd:99:89:10:6b: be:14:ec:a5:08:7e:95:ff:67:6b:6f:24:9c:ae:1d:00:00:95: 3c:35:ae:a1:b7:43:66:b4:86:92:6c:b6:63:61:ee:35:a1:16: eb:1c:67:3a:17:21:8b:ad:8d:7c:1e:a9:cf:8f:6c:1a:cf:e4: 75:ee:e8:de:d3:0d:6f:19:9c:5d:a8:2d:e1:f7:fb:19:4d:73: 06:54:03:ba:cb:3b:20:a8:a1:8d:cd:e6:a0:48:c3:82:e7:a6: 57:89:91:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9EgfhhBq60l2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjZhYWI3NWQtYjRjOC00NzlkLWFlZDMtN2Q0YTdhMzIyNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/Ts+djmjfacTrL4tMMOwXZeum8WskKdMXqE P9/Bg2fBnZMzNkpQTFqDw0hrcR4Wd8PegT0GjjOYweeDr0vi1IYqAT6GZ8dE/4X7 I9DxUaGMrA0HY/jjt2nIe8QFDzfpKO/L2NIlnqdZAHtgSFABt7JoZ8A+p0KTpTR/ ZoT/mM9H3hTqvauln2StZHIQpbUzo3L5ynzoh60SQNtpc/0XbcJMJHAq+tut0UgK JWvebUQySk/Pxmylwc0dznIrjnOCFhbs4gv7+VyRGMHpLKyh7Hpej6tFgq+2TLC/ 7zp9EAnkuYSUn3LzNkhSx0HP76uSSWRYiXffu6wmcku5sSRqyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSTuZBJmrUAavFGRRBZi0DpzxaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjUwM2NiZjktOWE4Mi0z ZjZiLTllM2EtYTI3OWFiNDhjNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE22Ac0s1WlXiTQOyHsq2ENP2JbthhQZJzUgBJD0kiaAWhrH1sUXBfOO 7nc4Q7ASldkZRD4j5fDoWp/BCJLy5TN5n1qe/6nQOICfthIwtjdmk09wbPKVhlii +u/VSexRZeCIysaWM/cFHZ0Uk8LSFYZ7BRzPcrGsFj6dLv9GZ2Q8pBiHV4aFG0NR D+/FcxyPhVZKEz0BP1Qmf58CSPfNmYkQa74U7KUIfpX/Z2tvJJyuHQAAlTw1rqG3 Q2a0hpJstmNh7jWhFuscZzoXIYutjXweqc+PbBrP5HXu6N7TDW8ZnF2oLeH3+xlN cwZUA7rLOyCooY3N5qBIw4LnpleJkX4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:09 2026 by rpki-client