$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64223dd2-111e-39ee-8c2e-c0348ec78c18.roa File: 64223dd2-111e-39ee-8c2e-c0348ec78c18.roa (raw, json) Hash identifier: 1rw+P+DpH6zJOXSsI+YX6zOE3kxbrWCOXZIa0dFFN2A= Subject key identifier: 20:72:88:95:02:E5:F2:CA:EF:36:F0:D7:4B:64:92:B3:66:57:51:41 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02AFE4234FA53CE17AB40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64223dd2-111e-39ee-8c2e-c0348ec78c18.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2a:fe:42:34:fa:53:ce:17:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=499e0393-b5a5-470b-a3c8-6636ce845277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:87:8f:fd:06:ca:bf:ca:d0:ec:3d:e9:ee:5a: 0c:54:24:c7:de:c9:79:c9:45:10:b2:46:9e:98:5b: 63:96:4b:79:8e:cb:15:6c:b0:a4:e8:cc:a7:37:33: 80:06:96:a3:46:01:d5:d9:56:cc:4e:8d:13:63:c1: b4:10:5e:a9:a9:a3:5f:5f:d2:cc:6b:e2:13:0e:cb: 02:08:e0:26:5e:e3:89:1e:4c:8a:1e:ca:b4:00:f5: 60:46:76:ee:80:d4:97:c6:0e:05:b8:b1:c2:b6:9d: 0c:13:fc:6a:77:31:c1:18:e0:93:da:42:1a:21:cc: 8d:49:43:ab:fb:b0:cd:7b:b3:e3:48:68:1c:60:cd: e3:e7:f9:f2:76:0c:1a:6b:1c:92:f2:c9:6c:ce:a8: 6d:06:63:f9:ed:2f:df:8e:cf:04:2f:19:22:63:ce: 9b:a7:60:ad:26:95:f3:0a:e7:49:26:bc:dd:19:8e: 26:6a:dc:17:4e:44:a2:a2:06:f8:f5:db:54:23:13: 7f:c6:e2:19:e3:13:6f:32:e6:50:8a:f1:48:e8:12: 4e:87:94:28:f8:82:83:3a:af:68:69:40:e2:7d:21: 33:62:11:9b:4d:dd:09:d7:e8:cd:04:0a:c7:a4:16: 7b:bc:cc:d0:2e:55:ca:a4:a7:02:66:2e:21:d8:32: a4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:88:95:02:E5:F2:CA:EF:36:F0:D7:4B:64:92:B3:66:57:51:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64223dd2-111e-39ee-8c2e-c0348ec78c18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:dd:a8:9e:60:99:57:c0:1d:c9:42:0b:d3:6b:4c:c3:34:bd: 2d:fe:b6:ca:ab:ef:f5:31:1d:65:bc:04:55:76:9f:44:51:74: c1:81:7d:7a:c5:bf:7d:d6:f3:75:da:d9:ba:07:14:ef:c7:04: 9d:8b:91:3e:98:3f:b2:bc:b4:83:4a:f1:13:c7:47:9f:16:fa: 1e:2d:c5:b8:70:da:08:10:5b:1e:bd:52:46:e4:6e:7f:4a:72: 3b:01:45:99:a6:7b:f4:a1:b1:95:43:ed:a7:f0:16:ce:ef:2f: 1a:85:f3:9d:14:8a:1e:af:67:d2:f4:a5:24:f9:55:1e:ec:3e: 66:bc:2d:2d:8a:cc:4d:f7:71:7a:23:c0:ca:48:8b:be:26:d2: 0f:94:12:56:f4:dd:d4:74:f5:7b:9c:be:70:2e:74:9e:17:e6: e8:bd:0d:3f:7d:e8:2d:a8:01:bd:b4:94:66:70:06:49:73:29: 64:00:3f:3c:28:8f:9d:f6:ff:2f:ce:7f:7e:1b:06:e9:f5:db: b9:7f:7b:d4:f2:13:41:fe:b9:a0:a7:ed:96:cd:f5:80:3e:ca: ce:51:48:fd:29:59:5e:e1:2b:41:3c:8e:52:f0:90:7c:fd:a1: 79:e3:97:c0:66:3b:a4:95:d1:6e:cd:06:2e:d9:ba:79:11:74: 37:92:f8:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Cr+QjT6U84Xq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDk5ZTAzOTMtYjVhNS00NzBiLWEzYzgtNjYzNmNlODQ1Mjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoeP/QbKv8rQ7D3p7loMVCTH3sl5yUUQskae mFtjlkt5jssVbLCk6MynNzOABpajRgHV2VbMTo0TY8G0EF6pqaNfX9LMa+ITDssC COAmXuOJHkyKHsq0APVgRnbugNSXxg4FuLHCtp0ME/xqdzHBGOCT2kIaIcyNSUOr +7DNe7PjSGgcYM3j5/nydgwaaxyS8slszqhtBmP57S/fjs8ELxkiY86bp2CtJpXz CudJJrzdGY4matwXTkSiogb49dtUIxN/xuIZ4xNvMuZQivFI6BJOh5Qo+IKDOq9o aUDifSEzYhGbTd0J1+jNBArHpBZ7vMzQLlXKpKcCZi4h2DKkhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCByiJUC5fLK7zbw10tkkrNmV1FBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQyMjNkZDItMTExZS0z OWVlLThjMmUtYzAzNDhlYzc4YzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrdqJ5gmVfAHclCC9NrTMM0vS3+tsqr7/UxHWW8BFV2n0RRdMGBfXrF v33W83Xa2boHFO/HBJ2LkT6YP7K8tINK8RPHR58W+h4txbhw2ggQWx69Ukbkbn9K cjsBRZmme/ShsZVD7afwFs7vLxqF850Uih6vZ9L0pST5VR7sPma8LS2KzE33cXoj wMpIi74m0g+UElb03dR09XucvnAudJ4X5ui9DT996C2oAb20lGZwBklzKWQAPzwo j532/y/Of34bBun127l/e9TyE0H+uaCn7ZbN9YA+ys5RSP0pWV7hK0E8jlLwkHz9 oXnjl8BmO6SV0W7NBi7ZunkRdDeS+BY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:32 2026 by rpki-client