$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a7d18bc-d0c0-3849-9f70-dfd593fadd0d.roa File: 1a7d18bc-d0c0-3849-9f70-dfd593fadd0d.roa (raw, json) Hash identifier: Tabuc5jPT/f1kmqrxhgufAIKkWnAgTXWS3syR/S9yj0= Subject key identifier: 91:C8:49:8F:8F:D0:A6:BC:1D:8A:36:D3:01:C1:15:7C:7F:E7:BA:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0EA3F2D3CBC8C99143E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a7d18bc-d0c0-3849-9f70-dfd593fadd0d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ea:3f:2d:3c:bc:8c:99:14:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ce91d5c0-1ae6-4304-a6ea-430404685a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:a6:c2:39:95:45:f7:08:60:e8:3a:5a:62: ed:cb:33:c0:ec:f1:70:28:47:59:37:69:25:76:bc: 1d:2e:94:d8:31:ef:ad:94:77:c7:30:d9:b1:7c:88: dc:ec:0e:07:d3:75:de:1d:6b:a4:6d:60:bc:b5:79: 23:99:c0:1f:a8:12:ea:dc:b7:e4:3d:1e:c3:31:b1: c7:3a:7a:8d:57:ba:21:7b:2e:a4:57:f8:0b:ee:71: e6:c2:96:17:f2:18:fb:82:ea:90:82:6a:21:e3:e9: a5:03:85:d5:8b:41:1e:23:14:9d:36:3d:e8:19:ad: 40:b4:3f:47:53:5e:f1:0a:89:9a:ef:01:52:8a:32: 89:b5:13:32:63:c5:2f:ed:b6:3d:9b:0b:a7:7b:be: d3:3d:b7:4a:78:f8:31:d4:2c:f5:ce:92:6d:53:55: 6e:04:bc:55:bc:d9:e5:87:47:c9:a2:90:79:0f:d2: 2f:cb:e8:2d:53:fc:62:eb:e1:69:d5:8f:c3:21:0d: 70:bd:7c:75:41:8f:8b:73:0c:c6:52:e4:6c:e9:d0: 34:08:bf:3a:ef:a0:66:0d:34:50:e2:ca:f9:22:43: a1:0f:50:fa:d6:3d:ec:3a:e8:95:45:1d:db:0d:9b: 2f:7b:9d:96:b3:65:00:2a:37:be:fc:ad:62:2b:cb: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C8:49:8F:8F:D0:A6:BC:1D:8A:36:D3:01:C1:15:7C:7F:E7:BA:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a7d18bc-d0c0-3849-9f70-dfd593fadd0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:35:af:d8:98:3f:ab:64:b9:0c:e0:36:c2:7e:cc:d7:1d:f1: 83:4c:d1:96:bb:39:0a:9f:92:fc:f0:59:47:cc:39:15:c0:f0: 16:27:21:b6:ec:aa:7a:6f:1d:66:a2:cf:27:84:35:bb:1b:d5: 50:22:15:c2:be:2b:ac:35:79:e0:db:76:d7:e3:34:59:c1:50: 7b:d1:09:6e:7c:d2:71:f0:d0:7e:8b:bf:62:5c:ac:ab:a2:26: bd:40:d4:35:01:71:2d:82:73:fa:4c:d3:c2:24:8f:97:c1:30: 4d:0f:c8:16:c9:40:df:ac:6a:ab:ec:21:91:aa:57:99:d4:ee: 88:75:5a:f3:5b:7c:af:14:0a:5c:f8:f9:e3:5d:e9:37:73:ba: 46:14:b5:5b:e9:19:ea:02:78:a2:f4:90:b4:b8:1c:f8:26:9b: c0:ad:df:a8:c7:b9:e3:53:77:02:f1:a2:32:25:84:5d:83:b6: f8:ef:a1:6a:68:e5:fd:6c:87:c3:e8:42:74:82:99:76:4f:d9: 4b:cd:cd:18:55:eb:c1:6f:f5:f5:15:b4:c2:1d:c1:6c:a9:6d: b5:53:b6:d2:2a:26:4b:8f:d2:b9:e6:48:15:8d:f9:f5:21:de: e7:28:3b:ac:0c:e0:b2:12:3b:5b:1a:5e:50:47:a2:7a:cc:a8: 0b:16:a3:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Oo/LTy8jJkUPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2U5MWQ1YzAtMWFlNi00MzA0LWE2ZWEtNDMwNDA0Njg1YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuCmwjmVRfcIYOg6WmLtyzPA7PFwKEdZN2kl drwdLpTYMe+tlHfHMNmxfIjc7A4H03XeHWukbWC8tXkjmcAfqBLq3LfkPR7DMbHH OnqNV7ohey6kV/gL7nHmwpYX8hj7guqQgmoh4+mlA4XVi0EeIxSdNj3oGa1AtD9H U17xComa7wFSijKJtRMyY8Uv7bY9mwune77TPbdKePgx1Cz1zpJtU1VuBLxVvNnl h0fJopB5D9Ivy+gtU/xi6+Fp1Y/DIQ1wvXx1QY+LcwzGUuRs6dA0CL8676BmDTRQ 4sr5IkOhD1D61j3sOuiVRR3bDZsve52Ws2UAKje+/K1iK8v4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHISY+P0Ka8HYo20wHBFXx/57oaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWE3ZDE4YmMtZDBjMC0z ODQ5LTlmNzAtZGZkNTkzZmFkZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvueMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE01r9iYP6tkuQzgNsJ+zNcd8YNM0Za7OQqfkvzwWUfMORXA8BYnIbbs qnpvHWaizyeENbsb1VAiFcK+K6w1eeDbdtfjNFnBUHvRCW580nHw0H6Lv2JcrKui Jr1A1DUBcS2Cc/pM08Ikj5fBME0PyBbJQN+saqvsIZGqV5nU7oh1WvNbfK8UClz4 +eNd6TdzukYUtVvpGeoCeKL0kLS4HPgmm8Ct36jHueNTdwLxojIlhF2DtvjvoWpo 5f1sh8PoQnSCmXZP2UvNzRhV68Fv9fUVtMIdwWypbbVTttIqJkuP0rnmSBWN+fUh 3ucoO6wM4LISO1saXlBHonrMqAsWo84= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:05 2026 by rpki-client