$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/299e5713-f430-322a-b11e-17331df2c539.roa File: 299e5713-f430-322a-b11e-17331df2c539.roa (raw, json) Hash identifier: eT6F3rTbBIqa+qunVQBozK2KXxt5wwyIwtRE3IcZGHY= Subject key identifier: 38:7B:94:01:E6:13:5C:CF:83:D9:FA:8F:CD:CF:38:57:BF:28:27:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E94F9CD546EA65987980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/299e5713-f430-322a-b11e-17331df2c539.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e9:4f:9c:d5:46:ea:65:98:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=20156a18-c824-49fe-bb41-f52b437e292e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cb:1a:b3:af:d1:cb:bd:6d:c4:e2:6a:af:f9: 9f:35:ae:57:06:4d:fd:93:91:df:dc:06:f4:d7:84: 47:47:f4:7d:fc:8b:f9:f0:89:79:74:05:4f:a2:5f: 50:4e:33:41:27:d2:7f:0d:9d:81:a0:af:d9:ff:22: 77:16:fc:be:b6:07:48:72:9d:4d:58:83:f8:bb:f8: 6a:ee:92:e2:ff:52:58:8b:b9:c8:04:b8:d4:0d:50: f9:4d:e3:6b:2e:eb:1b:ba:50:03:37:61:ab:31:40: ce:f9:00:6c:79:e7:98:18:bf:80:76:f2:81:a3:ac: 12:da:34:55:12:92:12:87:68:a3:f1:9b:f9:18:a1: 06:7e:0b:18:9f:f4:2e:9c:10:c8:44:be:5b:5c:96: 58:91:71:6e:12:6a:96:9b:62:d1:e6:02:47:d9:15: f1:ec:dc:61:55:d8:31:23:0d:09:cb:47:02:ff:bc: 8f:fe:db:ed:d8:59:00:29:48:a0:79:29:d5:84:00: 94:09:03:a3:d4:e0:bc:86:3e:f9:8a:c7:76:1b:95: fa:f2:8c:86:39:e0:25:16:37:55:60:e3:cd:6b:71: 69:2c:d5:92:ed:f6:98:9a:c9:f5:e2:ac:e0:ad:eb: 7a:97:59:01:a9:47:5d:6c:c1:36:91:5a:09:9f:ff: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7B:94:01:E6:13:5C:CF:83:D9:FA:8F:CD:CF:38:57:BF:28:27:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/299e5713-f430-322a-b11e-17331df2c539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:09:a0:43:23:b9:99:fe:2a:14:11:87:2b:f4:93:a8:dd:c5: c1:56:09:83:46:fe:79:10:88:a6:c7:ec:b0:c7:8c:6d:f9:1e: 65:b9:34:7e:30:eb:bd:74:47:fb:40:20:04:4a:3b:37:a1:17: bb:f9:c0:2b:c0:ff:76:ea:bf:27:70:59:5e:80:37:d9:93:f1: 9b:f3:ba:a3:32:12:e7:6a:b5:b1:93:14:1f:8f:75:65:0c:eb: b5:af:0b:58:4a:41:a6:63:25:5e:2c:71:ba:90:40:f6:47:83: 0f:0f:24:55:49:e5:79:d0:d5:6b:c7:4e:45:d1:70:d1:61:29: 9d:33:7d:3e:e2:73:93:6b:e2:1f:25:a1:9e:48:e0:6d:56:3d: 02:8a:46:64:81:f6:2b:68:28:e2:4a:38:1e:13:24:a5:b0:34: a6:da:6f:28:83:c1:a6:4c:1b:1c:9d:18:82:a2:5f:4d:32:fe: 64:84:fc:8b:25:f7:3e:88:71:ec:98:e1:1b:46:20:ef:f7:5a: 97:05:66:37:be:39:d5:32:b7:08:98:8b:06:6c:18:5a:a2:ca: 8e:ac:a1:cb:40:45:52:b5:7d:f2:f3:ae:e8:20:e3:31:ca:b4: 1f:96:ed:85:6d:2c:43:95:9f:dd:88:9e:66:c2:e9:c1:d2:1c: 49:b3:50:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OlPnNVG6mWYeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjAxNTZhMTgtYzgyNC00OWZlLWJiNDEtZjUyYjQzN2UyOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMsas6/Ry71txOJqr/mfNa5XBk39k5Hf3Ab0 14RHR/R9/Iv58Il5dAVPol9QTjNBJ9J/DZ2BoK/Z/yJ3Fvy+tgdIcp1NWIP4u/hq 7pLi/1JYi7nIBLjUDVD5TeNrLusbulADN2GrMUDO+QBseeeYGL+AdvKBo6wS2jRV EpISh2ij8Zv5GKEGfgsYn/QunBDIRL5bXJZYkXFuEmqWm2LR5gJH2RXx7NxhVdgx Iw0Jy0cC/7yP/tvt2FkAKUigeSnVhACUCQOj1OC8hj75isd2G5X68oyGOeAlFjdV YOPNa3FpLNWS7faYmsn14qzgret6l1kBqUddbME2kVoJn//UwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh7lAHmE1zPg9n6j83POFe/KCf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjk5ZTU3MTMtZjQzMC0z MjJhLWIxMWUtMTczMzFkZjJjNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoJoEMjuZn+KhQRhyv0k6jdxcFWCYNG/nkQiKbH7LDHjG35HmW5NH4w 6710R/tAIARKOzehF7v5wCvA/3bqvydwWV6AN9mT8ZvzuqMyEudqtbGTFB+PdWUM 67WvC1hKQaZjJV4scbqQQPZHgw8PJFVJ5XnQ1WvHTkXRcNFhKZ0zfT7ic5Nr4h8l oZ5I4G1WPQKKRmSB9itoKOJKOB4TJKWwNKbabyiDwaZMGxydGIKiX00y/mSE/Isl 9z6IceyY4RtGIO/3WpcFZje+OdUytwiYiwZsGFqiyo6soctARVK1ffLzrugg4zHK tB+W7YVtLEOVn92InmbC6cHSHEmzUH4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:29 2026 by rpki-client