$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07ddce46-8efa-397a-a162-a4e2f281fe1b.roa File: 07ddce46-8efa-397a-a162-a4e2f281fe1b.roa (raw, json) Hash identifier: Sb253zVQPL2E1T1hxpfsXDMXzPYs84/9TF0fB31H7L4= Subject key identifier: 58:39:EC:73:F0:C4:B4:2B:63:20:AB:5B:D1:8A:59:BE:E7:F7:3D:53 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E046307940206B22DEC600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07ddce46-8efa-397a-a162-a4e2f281fe1b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:46:30:79:40:20:6b:22:de:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=aa1db851-5668-4ba9-b822-cef4a68bd5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:11:20:b7:e9:74:01:e2:8c:ec:e6:e4:a5: ef:4f:49:12:bf:33:37:21:12:8e:72:2f:68:c4:40: 83:9e:e3:c3:9e:ef:3b:6c:28:6e:e7:1e:75:1c:78: fd:24:bd:90:94:78:a1:1a:42:b4:3a:2d:2b:ca:43: bf:a6:4d:d6:01:aa:4b:8f:fc:9e:1f:a6:d6:94:fd: 5a:be:b3:00:fe:6b:59:b5:40:5a:97:ec:d5:6e:82: 9d:83:a5:de:cc:88:e0:50:db:ec:07:66:44:19:fe: 87:3d:67:4f:6f:f3:be:b5:01:42:3c:37:1a:c4:a5: d8:82:72:a3:21:19:f2:ab:70:25:6c:ee:34:01:cf: ca:35:bd:be:35:f2:d7:9f:6b:26:e2:f5:37:a1:de: 8f:87:0e:e1:d8:6b:ce:4c:d4:16:de:c8:26:8c:31: be:bf:a3:8b:50:31:03:fb:38:b3:e8:0a:80:42:fe: 93:d7:cd:a9:52:7a:42:9e:d8:bd:5c:ed:1b:78:f1: ba:1c:7e:7e:37:fd:91:3d:d7:b6:ea:5f:68:8a:19: c3:63:39:81:18:0a:2b:cf:b5:06:75:6d:9f:7a:a6: 0e:71:e8:18:d3:b4:51:ec:04:25:de:13:ef:79:01: 04:13:ca:e8:5d:fc:80:1b:0b:b4:4b:5d:f5:65:9d: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:39:EC:73:F0:C4:B4:2B:63:20:AB:5B:D1:8A:59:BE:E7:F7:3D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07ddce46-8efa-397a-a162-a4e2f281fe1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a8:ba:c0:40:47:88:95:6c:32:a8:08:3b:5a:f5:4a:9d:31: 27:c9:6a:29:c6:1c:34:a2:1c:b2:e8:ce:91:f3:5c:5a:82:9c: 9d:28:9f:2d:ba:7b:9a:ea:51:b9:66:e4:a8:93:60:40:d2:8c: b6:03:c6:41:2f:58:35:15:2e:21:b0:32:ea:76:de:af:41:08: af:eb:3c:59:37:19:90:d8:9c:42:f1:2f:31:70:93:4b:84:24: 01:35:34:23:db:d0:a9:35:ff:e3:7b:19:ae:21:47:e6:9d:4b: 44:84:55:b4:59:6e:c7:f3:a0:d7:2a:f3:8d:a4:16:0c:86:02: 60:47:e3:11:ac:da:bc:46:6d:53:5d:3f:a2:3f:e4:f2:85:79: e5:9f:96:64:a9:39:ee:27:e6:ee:f4:30:41:26:4e:f8:49:e9: 02:39:c0:3e:f3:ff:6a:9f:93:15:3b:f2:24:93:9e:ef:f9:44: 18:90:ad:e9:14:56:b6:e9:31:89:e0:49:5c:58:bf:9e:5e:30: 8e:d5:d8:36:56:e7:a2:3d:2a:f5:3d:3f:7f:4b:6e:73:23:c7: 82:cf:72:6a:5a:62:98:05:9e:36:12:c7:20:c9:26:13:da:df: 5a:8f:1d:d9:22:dc:5f:75:f4:28:fd:38:a9:21:33:1e:f0:fc: 98:38:ff:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EYweUAgayLexgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWExZGI4NTEtNTY2OC00YmE5LWI4MjItY2VmNGE2OGJkNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAIRILfpdAHijOzm5KXvT0kSvzM3IRKOci9o xECDnuPDnu87bChu5x51HHj9JL2QlHihGkK0Oi0rykO/pk3WAapLj/yeH6bWlP1a vrMA/mtZtUBal+zVboKdg6XezIjgUNvsB2ZEGf6HPWdPb/O+tQFCPDcaxKXYgnKj IRnyq3AlbO40Ac/KNb2+NfLXn2sm4vU3od6Phw7h2GvOTNQW3sgmjDG+v6OLUDED +ziz6AqAQv6T182pUnpCnti9XO0bePG6HH5+N/2RPde26l9oihnDYzmBGAorz7UG dW2feqYOcegY07RR7AQl3hPveQEEE8roXfyAGwu0S131ZZ1ZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg57HPwxLQrYyCrW9GKWb7n9z1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDdkZGNlNDYtOGVmYS0z OTdhLWExNjItYTRlMmYyODFmZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeousBAR4iVbDKoCDta9UqdMSfJainGHDSiHLLozpHzXFqCnJ0ony26 e5rqUblm5KiTYEDSjLYDxkEvWDUVLiGwMup23q9BCK/rPFk3GZDYnELxLzFwk0uE JAE1NCPb0Kk1/+N7Ga4hR+adS0SEVbRZbsfzoNcq842kFgyGAmBH4xGs2rxGbVNd P6I/5PKFeeWflmSpOe4n5u70MEEmTvhJ6QI5wD7z/2qfkxU78iSTnu/5RBiQrekU VrbpMYngSVxYv55eMI7V2DZW56I9KvU9P39LbnMjx4LPcmpaYpgFnjYSxyDJJhPa 31qPHdki3F919Cj9OKkhMx7w/Jg4/yc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:34 2026 by rpki-client