$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec58919-3d48-3039-a44a-4b9d5a500ded.roa File: 4ec58919-3d48-3039-a44a-4b9d5a500ded.roa (raw, json) Hash identifier: AEaQXJOEozF3KsfzT8yddOpPhTmXDLU1IbROME1xc/I= Subject key identifier: C7:9D:E1:75:00:58:D3:36:8B:16:EA:D8:D0:A4:19:B1:0A:C7:C2:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F8E2C0C5FB5E6007FA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec58919-3d48-3039-a44a-4b9d5a500ded.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f8:e2:c0:c5:fb:5e:60:07:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d89f0c99-c390-4f3c-b029-34713f77f750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:bf:05:40:0c:12:35:c8:c0:e9:77:7c:43: 07:1b:bb:ba:28:49:b4:f2:12:64:2e:5d:ff:bc:2a: 2c:e9:47:54:93:ef:3f:d3:b7:df:fb:c2:7d:eb:96: 19:49:7b:24:92:0f:de:34:31:2a:b0:c9:15:96:dd: d1:18:24:d1:3a:cf:35:e4:d9:79:89:b7:e6:cb:ce: 62:6c:5a:0e:ce:1e:0d:94:7b:5e:bb:9b:64:90:51: 00:d1:22:6d:97:83:b9:14:bd:a8:40:65:d0:ca:60: 96:28:44:d8:ad:25:30:54:d0:7f:a0:9a:fe:ec:f2: d7:59:a9:f9:cb:3a:87:cd:61:d3:69:9e:5c:bc:52: c6:5b:24:8a:9d:f3:1c:3f:87:e1:55:9d:a9:0e:b8: b0:fe:e4:6e:d7:db:66:98:28:bd:20:37:ec:ec:da: 8b:af:30:a7:cc:11:fa:03:bc:6f:2e:d2:89:5a:8d: bd:bb:95:6f:a9:b8:7c:a7:56:d7:ea:11:65:39:be: ad:2f:e5:05:d4:b3:80:72:06:e3:de:22:b3:aa:50: 49:17:0c:2f:ec:36:80:41:09:bb:2f:90:0e:06:39: 7b:bd:19:15:26:23:a5:02:88:1d:48:74:ea:f7:fb: c4:fe:44:4d:40:69:90:a9:ac:8a:54:dd:58:8d:1e: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9D:E1:75:00:58:D3:36:8B:16:EA:D8:D0:A4:19:B1:0A:C7:C2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec58919-3d48-3039-a44a-4b9d5a500ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:61:58:c2:89:5d:e4:2e:0c:c7:f3:b0:24:75:e0:9e:f6:e7: f0:15:70:5f:81:5f:32:15:54:e2:93:1b:d2:66:60:94:b7:32: f2:33:08:22:be:20:be:51:34:f8:83:3e:1a:58:6b:fd:a4:5c: 7a:d2:18:af:73:58:9d:4f:ed:25:64:f8:2b:72:32:15:21:d2: 67:fa:05:b0:f3:c6:dd:53:f6:21:47:2e:59:b3:68:9b:a4:4f: ed:bb:1f:dd:7c:9e:c3:5e:b8:ee:8e:a8:62:25:21:9b:ec:59: 2e:05:0a:b4:f3:85:d7:c9:69:ba:f6:51:a1:59:54:26:22:6b: c3:d3:53:14:40:11:b4:85:ef:69:b8:d3:1d:f2:f5:06:0e:cf: e9:f8:7f:c0:5c:3f:c6:74:04:c3:44:70:8c:6f:ce:dc:57:6e: e1:53:00:64:c5:0b:9d:f8:4f:d0:53:e9:0c:d0:b2:d4:db:4e: 82:c5:47:7f:7a:0b:3b:53:0e:39:54:66:2c:ba:46:da:e5:1e: d2:35:5a:3f:f4:e6:a9:82:9f:30:91:da:63:90:95:a0:17:d1: da:03:76:0a:75:81:14:3a:98:9b:4c:ce:5a:0d:54:a8:bf:03: 1b:a9:d3:28:1f:81:46:89:9a:db:eb:fd:65:37:33:fb:32:c7: 1d:ac:5d:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PjiwMX7XmAH+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDg5ZjBjOTktYzM5MC00ZjNjLWIwMjktMzQ3MTNmNzdmNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+m/BUAMEjXIwOl3fEMHG7u6KEm08hJkLl3/ vCos6UdUk+8/07ff+8J965YZSXskkg/eNDEqsMkVlt3RGCTROs815Nl5ibfmy85i bFoOzh4NlHteu5tkkFEA0SJtl4O5FL2oQGXQymCWKETYrSUwVNB/oJr+7PLXWan5 yzqHzWHTaZ5cvFLGWySKnfMcP4fhVZ2pDriw/uRu19tmmCi9IDfs7NqLrzCnzBH6 A7xvLtKJWo29u5Vvqbh8p1bX6hFlOb6tL+UF1LOAcgbj3iKzqlBJFwwv7DaAQQm7 L5AOBjl7vRkVJiOlAogdSHTq9/vE/kRNQGmQqayKVN1YjR5WjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMed4XUAWNM2ixbq2NCkGbEKx8JGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGVjNTg5MTktM2Q0OC0z MDM5LWE0NGEtNGI5ZDVhNTAwZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5hWMKJXeQuDMfzsCR14J725/AVcF+BXzIVVOKTG9JmYJS3MvIzCCK+ IL5RNPiDPhpYa/2kXHrSGK9zWJ1P7SVk+CtyMhUh0mf6BbDzxt1T9iFHLlmzaJuk T+27H918nsNeuO6OqGIlIZvsWS4FCrTzhdfJabr2UaFZVCYia8PTUxRAEbSF72m4 0x3y9QYOz+n4f8BcP8Z0BMNEcIxvztxXbuFTAGTFC534T9BT6QzQstTbToLFR396 CztTDjlUZiy6RtrlHtI1Wj/05qmCnzCR2mOQlaAX0doDdgp1gRQ6mJtMzloNVKi/ Axup0ygfgUaJmtvr/WU3M/syxx2sXbU= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:50 2026 by rpki-client