$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa File: fcffca7c-1a11-39cf-b450-a1243d10e54e.roa (raw, json) Hash identifier: Zm08EtedGkia1wJ9+rnXkRVsW2iqIoKGsY/IOeQjtDo= Subject key identifier: 4C:2A:76:70:9B:9F:2C:5B:BA:3A:A3:AC:14:B4:B9:20:B1:C5:37:40 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD13038D68ECB2EFE5400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d1:30:38:d6:8e:cb:2e:fe:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=94785160-ea0c-481d-b8e0-044bea29d608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:2c:ca:3a:1c:bb:dc:50:73:70:a3:c5:14: c0:2a:46:99:98:f2:e9:e5:ce:22:82:3e:d7:1b:33: 83:a2:53:7f:16:fb:3f:92:01:b1:76:3f:ed:cc:7b: c3:b7:92:d6:a2:f8:a8:8a:6e:99:83:ea:d6:5a:31: 03:49:6c:ec:91:70:bd:5b:66:07:6e:12:ac:38:4b: be:11:b7:bf:b5:16:8d:34:40:70:c3:00:07:33:49: 64:2c:07:db:b1:76:a6:30:7a:b5:7f:ac:92:7c:59: d9:0b:a8:03:b9:03:1a:d5:4b:41:0b:04:56:50:57: 19:26:77:58:39:13:ba:7b:2f:0c:c4:b6:ce:cc:28: 7c:46:10:e1:d7:a8:a4:53:7b:5d:0d:9a:03:65:8a: 35:cc:5c:4b:82:52:6c:0c:3a:56:5d:31:f3:82:d6: 47:fd:dd:af:5f:c6:b9:07:4f:2e:37:e2:e8:42:97: a9:52:ba:c8:f0:e0:e0:14:35:0d:18:e6:30:58:bd: 1f:43:16:65:4c:1e:82:47:c5:67:d9:c8:b2:06:09: 76:41:9d:d5:81:7c:7d:06:46:8c:43:8a:a8:99:a6: 83:dd:38:fb:c3:96:02:0a:f1:2e:a0:fb:18:ca:00: f5:4a:5a:9f:57:3c:ce:1f:e3:f4:33:3a:89:b0:42: 1f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2A:76:70:9B:9F:2C:5B:BA:3A:A3:AC:14:B4:B9:20:B1:C5:37:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fcffca7c-1a11-39cf-b450-a1243d10e54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:44:fc:13:1b:62:8c:87:7a:43:0e:de:93:49:83:27:79:1f: 42:76:aa:9b:30:fd:26:cb:a0:83:36:01:ab:df:89:59:19:78: 84:75:19:87:62:39:d2:6b:b6:2d:1f:59:8a:0f:1e:15:44:02: d0:01:54:1e:74:6c:0b:ac:8e:06:4f:5a:e6:53:56:90:17:70: 19:82:23:9e:7b:c4:8a:92:32:ae:ce:2d:e1:25:8e:1c:8d:05: 14:02:8d:36:9b:13:d8:90:8b:53:04:b7:55:62:2a:76:e9:52: a5:f3:9c:81:73:16:07:e0:76:8a:36:69:63:3d:03:32:13:cf: 93:fa:c9:64:7b:89:99:f4:43:88:7e:e5:9b:66:36:2d:73:5a: 97:1e:05:6d:95:b1:9a:7a:c3:ac:d2:48:20:fe:38:d7:04:23: e8:40:1a:d2:35:4c:80:58:17:7a:89:9f:b2:b9:f9:81:5c:17: 14:6e:e7:69:77:b9:69:41:77:c4:4b:1a:3f:f7:60:e1:21:a1: a7:cc:3c:de:7e:5c:78:4b:ae:7f:ce:b0:73:c9:fb:14:f2:59: 9b:3c:1d:cb:73:e8:7e:48:0c:d4:ed:b7:02:ca:6a:39:22:5d: ab:c7:1b:d2:35:ea:e3:ad:6f:54:27:4b:83:2c:67:70:f6:ca: dd:a8:e5:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9EwONaOyy7+VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OTQ3ODUxNjAtZWEwYy00ODFkLWI4ZTAtMDQ0YmVhMjlkNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv0syjocu9xQc3CjxRTAKkaZmPLp5c4igj7X GzODolN/Fvs/kgGxdj/tzHvDt5LWovioim6Zg+rWWjEDSWzskXC9W2YHbhKsOEu+ Ebe/tRaNNEBwwwAHM0lkLAfbsXamMHq1f6ySfFnZC6gDuQMa1UtBCwRWUFcZJndY ORO6ey8MxLbOzCh8RhDh16ikU3tdDZoDZYo1zFxLglJsDDpWXTHzgtZH/d2vX8a5 B08uN+LoQpepUrrI8ODgFDUNGOYwWL0fQxZlTB6CR8Vn2ciyBgl2QZ3VgXx9BkaM Q4qomaaD3Tj7w5YCCvEuoPsYygD1SlqfVzzOH+P0MzqJsEIfywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwqdnCbnyxbujqjrBS0uSCxxTdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmNmZmNhN2MtMWExMS0z OWNmLWI0NTAtYTEyNDNkMTBlNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtE/BMbYoyHekMO3pNJgyd5H0J2qpsw/SbLoIM2AavfiVkZeIR1GYdi OdJrti0fWYoPHhVEAtABVB50bAusjgZPWuZTVpAXcBmCI557xIqSMq7OLeEljhyN BRQCjTabE9iQi1MEt1ViKnbpUqXznIFzFgfgdoo2aWM9AzITz5P6yWR7iZn0Q4h+ 5ZtmNi1zWpceBW2VsZp6w6zSSCD+ONcEI+hAGtI1TIBYF3qJn7K5+YFcFxRu52l3 uWlBd8RLGj/3YOEhoafMPN5+XHhLrn/OsHPJ+xTyWZs8Hctz6H5IDNTttwLKajki XavHG9I16uOtb1QnS4MsZ3D2yt2o5f0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:53:59 2026 by rpki-client