$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa File: f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa (raw, json) Hash identifier: Y+9a0/riJwXLm5z2YLEyqOrHk4qh+bSgCyNffXErZYQ= Subject key identifier: 96:F2:BB:03:52:22:17:4D:07:E6:D7:70:2A:CE:CE:2F:A5:91:13:81 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00058A0B43A91815DBB280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:05:8a:0b:43:a9:18:15:db:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=0898c66c-86d8-49b0-991a-1063933b4039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:32:6f:a4:98:20:16:87:1e:c3:99:7f:63: 4c:38:b9:a8:05:c5:f8:71:f5:b4:d5:00:c8:8d:87: 00:87:c0:9b:2f:92:77:1c:fc:7a:71:c8:ab:7b:2c: fb:46:27:82:c1:c7:13:8e:77:6f:51:7f:e8:6e:01: 7b:08:ac:2c:42:6d:22:25:f0:b1:2f:32:c7:39:3a: bf:de:1b:bc:39:d0:a0:c8:2e:3a:96:01:f1:b2:5a: 0b:14:84:f5:c1:45:d2:c0:8c:80:f1:d4:41:11:46: c6:90:a2:e1:30:e3:da:23:f8:c6:e7:92:3a:ac:60: ce:83:38:25:4f:ad:dd:9e:1e:49:ba:69:ea:52:f3: 28:34:c1:32:d2:43:8b:60:4a:c2:72:34:cf:33:19: fc:29:94:af:26:ea:73:d3:a1:e4:31:b1:26:0a:5f: c8:3b:89:4a:7e:2f:13:30:52:ed:f6:90:f4:7f:22: 11:ba:00:2a:07:f4:68:09:96:1c:5d:b3:78:30:b8: c9:64:51:16:52:19:89:8e:75:58:04:03:93:c9:e1: 5c:aa:18:d3:dd:5b:f7:ef:25:72:25:a1:cb:90:9e: 30:61:ef:ed:60:99:db:5f:28:3e:6d:be:df:14:ab: 8e:46:9b:82:fc:eb:a7:b7:c6:48:ae:5f:46:10:25: 18:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F2:BB:03:52:22:17:4D:07:E6:D7:70:2A:CE:CE:2F:A5:91:13:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f6c2f7ea-a97f-34d8-836e-17fc553b34b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5b:cb:c2:52:49:56:e5:c0:7e:3a:34:2d:85:d4:d7:07:c9: b9:a0:97:24:0c:fe:97:96:64:be:7d:cb:5a:69:5e:b6:6d:c1: 63:20:86:8a:87:5e:0d:dc:86:f2:34:aa:81:c8:38:39:7f:f8: 60:e0:80:04:93:ef:ab:28:fd:78:e6:cd:33:50:c2:68:7d:99: 6e:7e:4f:25:f2:54:1a:7d:a5:b8:d5:2a:19:b1:95:e9:73:93: 02:be:7f:eb:47:e9:bc:86:8f:b9:0b:23:35:dc:c8:05:e5:ae: de:c3:7a:74:26:cf:47:f7:21:be:2b:29:70:8c:ca:b0:ea:1b: 93:d4:76:75:9c:bf:78:e4:5e:f8:6b:7d:b1:8f:16:91:b5:0d: c9:e0:09:b0:89:70:07:15:46:dd:50:99:81:53:a4:47:2f:4f: 88:02:2a:ac:6b:12:6b:ed:51:cf:61:43:4c:f2:87:75:99:64: 60:2d:6f:a0:d7:d1:2e:38:5b:3d:9d:d0:23:f9:ad:6d:81:88: 5e:d5:86:75:68:a3:a2:41:61:19:90:d1:1e:c4:ac:47:31:12: 34:c3:6c:96:3a:52:18:cc:f0:b0:8e:d0:26:18:a7:7a:dc:60: 28:66:ce:03:07:a6:aa:c0:e2:25:e7:20:93:16:c5:05:8e:fa: ce:fe:a7:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAWKC0OpGBXbsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MDg5OGM2NmMtODZkOC00OWIwLTk5MWEtMTA2MzkzM2I0MDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5gyb6SYIBaHHsOZf2NMOLmoBcX4cfW01QDI jYcAh8CbL5J3HPx6ccireyz7RieCwccTjndvUX/obgF7CKwsQm0iJfCxLzLHOTq/ 3hu8OdCgyC46lgHxsloLFIT1wUXSwIyA8dRBEUbGkKLhMOPaI/jG55I6rGDOgzgl T63dnh5JumnqUvMoNMEy0kOLYErCcjTPMxn8KZSvJupz06HkMbEmCl/IO4lKfi8T MFLt9pD0fyIRugAqB/RoCZYcXbN4MLjJZFEWUhmJjnVYBAOTyeFcqhjT3Vv37yVy JaHLkJ4wYe/tYJnbXyg+bb7fFKuORpuC/Ount8ZIrl9GECUYDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbyuwNSIhdNB+bXcCrOzi+lkROBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjZjMmY3ZWEtYTk3Zi0z NGQ4LTgzNmUtMTdmYzU1M2IzNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVby8JSSVblwH46NC2F1NcHybmglyQM/peWZL59y1ppXrZtwWMghoqH Xg3chvI0qoHIODl/+GDggAST76so/XjmzTNQwmh9mW5+TyXyVBp9pbjVKhmxlelz kwK+f+tH6byGj7kLIzXcyAXlrt7DenQmz0f3Ib4rKXCMyrDqG5PUdnWcv3jkXvhr fbGPFpG1DcngCbCJcAcVRt1QmYFTpEcvT4gCKqxrEmvtUc9hQ0zyh3WZZGAtb6DX 0S44Wz2d0CP5rW2BiF7VhnVoo6JBYRmQ0R7ErEcxEjTDbJY6UhjM8LCO0CYYp3rc YChmzgMHpqrA4iXnIJMWxQWO+s7+p8c= -----END CERTIFICATE-----Generated at Thu Mar 26 18:53:50 2026 by rpki-client