$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f503cbf9-9a82-3f6b-9e3a-a279ab48c604.roa File: f503cbf9-9a82-3f6b-9e3a-a279ab48c604.roa (raw, json) Hash identifier: Sep4FENqLy0e6kTV2rFuDif0xhhfhLQMuWt/TzAI1eY= Subject key identifier: 7F:CE:27:CC:D8:D9:E6:4A:A0:1C:33:B5:99:9A:EE:32:2F:BA:3B:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EBF9E5EFE7851DD33D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f503cbf9-9a82-3f6b-9e3a-a279ab48c604.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:eb:f9:e5:ef:e7:85:1d:d3:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=a8683652-7b7b-495b-84d0-80fcea24cc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c2:0b:a8:99:7d:25:c2:df:b6:3e:bf:ed:af: 5b:19:19:89:2c:b7:2e:4b:ef:66:ce:9f:fc:39:2f: 9c:05:15:02:14:63:b9:1a:b9:52:01:f1:96:ca:d0: 81:fe:78:cd:50:79:cc:33:05:58:41:d2:3f:05:f0: ae:e3:3e:0d:7d:7f:ec:f6:f6:52:f6:3e:f2:c0:e6: 51:60:96:89:d7:80:ee:e9:29:47:7a:75:de:f6:67: da:df:bf:33:bc:b5:dd:3c:b0:0d:4e:c3:bd:c5:24: 86:a4:14:12:e7:7c:66:67:98:e6:f2:8b:48:9c:91: 05:84:51:cb:56:f8:01:8d:4c:18:b4:04:6b:53:70: 89:db:c8:0f:ac:39:0d:25:3d:84:c9:91:cd:15:bd: ce:97:b3:34:b9:0b:f2:91:42:60:2d:e3:e7:2d:c6: a0:f3:a6:51:c9:cd:97:49:52:0e:82:a2:00:85:0e: 5d:7a:0e:23:23:aa:f6:28:53:79:aa:34:12:61:7e: ff:f1:94:a7:f1:84:93:5d:b7:45:e4:66:b1:13:bb: d9:85:58:9f:5d:d8:03:c7:07:e5:31:06:c6:1e:7b: 47:59:b4:87:b8:3b:c3:44:59:ef:66:57:ca:bb:19: a6:ea:cd:02:3c:45:2f:7a:7a:e7:ef:59:26:f5:18: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CE:27:CC:D8:D9:E6:4A:A0:1C:33:B5:99:9A:EE:32:2F:BA:3B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f503cbf9-9a82-3f6b-9e3a-a279ab48c604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:34:3b:5c:37:3e:2c:94:df:7e:f7:11:22:eb:2d:4b:25:05: 8e:fc:e9:e3:5c:a0:74:9c:7a:57:94:80:f4:7c:b9:90:6f:75: 89:d1:bb:03:77:1a:a7:40:17:ad:e0:5b:88:4b:9a:2d:34:f0: 04:6a:59:98:b2:06:8d:8f:26:16:88:2c:e4:94:c8:43:43:53: 61:42:ee:2b:27:c5:64:85:da:ef:2f:54:4b:1c:d3:65:a5:4d: db:f3:a3:81:9e:d5:b0:e2:42:8f:bd:28:b6:c5:0a:0e:90:ed: 79:d4:fe:77:46:80:8c:52:a9:92:13:77:48:36:66:c8:fe:59: 56:d4:b0:88:9a:e8:d7:43:b8:a0:8b:6c:8d:3c:1e:cd:e1:ba: 77:f6:ae:12:dc:49:a9:e6:5d:bd:9e:a7:84:d2:fc:62:74:d9: 8c:f4:fe:43:5b:91:66:f3:53:b3:60:cd:01:9c:19:b6:b2:65: 87:34:34:39:06:e3:3b:77:11:1e:b5:c7:ba:07:29:5e:af:8d: c3:1b:36:cd:fc:e4:12:5f:71:4a:5c:0c:bc:c0:6d:90:f6:be: d8:ee:2b:0a:fa:d8:b2:7d:5e:22:9c:cc:ee:cb:25:8b:4f:b8: 16:94:78:77:41:1e:ea:44:d7:2a:15:3d:7b:f5:69:da:c1:07: 9b:f3:ff:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuv55e/nhR3TPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTg2ODM2NTItN2I3Yi00OTViLTg0ZDAtODBmY2VhMjRjYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsILqJl9JcLftj6/7a9bGRmJLLcuS+9mzp/8 OS+cBRUCFGO5GrlSAfGWytCB/njNUHnMMwVYQdI/BfCu4z4NfX/s9vZS9j7ywOZR YJaJ14Du6SlHenXe9mfa378zvLXdPLANTsO9xSSGpBQS53xmZ5jm8otInJEFhFHL VvgBjUwYtARrU3CJ28gPrDkNJT2EyZHNFb3Ol7M0uQvykUJgLePnLcag86ZRyc2X SVIOgqIAhQ5deg4jI6r2KFN5qjQSYX7/8ZSn8YSTXbdF5GaxE7vZhVifXdgDxwfl MQbGHntHWbSHuDvDRFnvZlfKuxmm6s0CPEUvenrn71km9RizFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/OJ8zY2eZKoBwztZma7jIvujsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjUwM2NiZjktOWE4Mi0z ZjZiLTllM2EtYTI3OWFiNDhjNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU0O1w3PiyU3373ESLrLUslBY786eNcoHSceleUgPR8uZBvdYnRuwN3 GqdAF63gW4hLmi008ARqWZiyBo2PJhaILOSUyENDU2FC7isnxWSF2u8vVEsc02Wl Tdvzo4Ge1bDiQo+9KLbFCg6Q7XnU/ndGgIxSqZITd0g2Zsj+WVbUsIia6NdDuKCL bI08Hs3hunf2rhLcSanmXb2ep4TS/GJ02Yz0/kNbkWbzU7NgzQGcGbayZYc0NDkG 4zt3ER61x7oHKV6vjcMbNs385BJfcUpcDLzAbZD2vtjuKwr62LJ9XiKczO7LJYtP uBaUeHdBHupE1yoVPXv1adrBB5vz/58= -----END CERTIFICATE-----Generated at Sun Nov 15 11:17:00 2026 by rpki-client