$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/895098bc-8b22-33dc-ad15-6492ba5b7aaa.roa File: 895098bc-8b22-33dc-ad15-6492ba5b7aaa.roa (raw, json) Hash identifier: i0HkmMZex7+1Bt8w4gnMYONlVtpaZ8Lq1R3nHe0mp/U= Subject key identifier: B1:96:61:8A:E2:80:BE:A1:89:3D:CC:D0:E7:6F:39:0F:59:45:2B:F0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0FBA7463692E27460DB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/895098bc-8b22-33dc-ad15-6492ba5b7aaa.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:fb:a7:46:36:92:e2:74:60:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=64efe0e8-9a0b-4996-935c-ad98a833f92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:47:0b:bc:c7:9e:e7:92:63:85:a0:33:17: 1d:c7:71:29:0b:58:27:09:91:d2:77:ce:5f:33:50: 21:45:14:e9:8c:ad:fb:90:69:f0:42:99:9c:ae:58: 7c:27:80:9f:2e:7e:07:34:39:cf:20:14:ff:90:b5: de:51:f3:cb:96:c2:5b:32:23:eb:03:cc:a5:de:71: d4:b7:a2:f7:7d:1c:4c:47:cf:f4:f9:49:15:f1:e4: c7:4c:25:9e:34:cf:f3:36:6e:4b:dd:f6:59:a7:67: 24:a9:1e:98:cc:c3:b8:ba:7a:0d:80:e4:47:df:41: 22:4e:d0:41:c8:d6:f7:4c:16:15:fb:25:ac:be:27: f9:52:fc:d0:1b:f4:c5:59:18:7d:fa:de:1b:3b:3f: 14:5d:fa:a1:c2:f4:bd:b3:05:7c:21:5d:e7:78:b3: 41:15:1b:95:aa:74:fb:8d:fc:6c:b4:91:1c:4a:d1: 5e:59:21:0b:3e:6a:8d:71:09:4f:5e:de:98:56:b1: e5:ee:12:34:c0:2c:af:3a:cf:24:ae:9f:59:b8:14: 80:a6:d7:d1:cf:35:2e:2c:6a:76:24:07:b7:58:b5: 46:60:bb:cc:9e:4a:57:e2:93:ce:11:28:e7:62:9e: 4a:ff:bd:6e:8b:2f:58:17:be:c7:9c:80:25:de:4a: 77:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:96:61:8A:E2:80:BE:A1:89:3D:CC:D0:E7:6F:39:0F:59:45:2B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/895098bc-8b22-33dc-ad15-6492ba5b7aaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:91:87:a0:8f:1d:86:2e:d9:bf:5c:a4:a0:24:14:b8:32:73: ff:61:3b:35:8c:5c:71:f8:df:6d:34:a5:b6:71:33:ab:5c:f2: f4:b5:bb:8e:0b:33:82:cf:e8:cf:8d:e9:6b:42:b4:b3:61:a5: d8:1a:72:c0:1f:d6:c4:14:6a:2c:77:ce:89:6f:0e:a6:82:1a: 76:bb:2a:8a:d7:5d:d5:83:38:19:a7:22:b3:c5:98:51:40:52: db:54:32:e6:a5:a7:f8:c6:74:d1:f0:29:85:7f:9f:08:7c:6f: 27:70:24:6e:41:5f:59:a9:5b:fd:88:0b:62:40:d2:b3:d5:f5: c7:57:05:67:76:74:b8:41:b3:4a:c1:5b:bc:3a:87:fc:78:31: 5d:c6:8a:8f:c4:b5:2a:78:d8:ff:35:a5:67:25:a8:c3:9e:b5: ba:31:53:2b:78:9d:c6:5e:a3:44:67:df:e9:49:25:48:e6:11: 16:7a:e1:db:a3:89:9a:3a:f2:96:48:04:7f:63:72:53:ca:3e: 1c:b0:51:58:3f:d9:79:66:2a:20:56:11:1d:a6:8c:40:93:51: ac:6f:1a:b9:11:b6:d2:e1:81:f4:0e:14:25:c2:21:43:64:89: 20:0a:13:b3:c2:78:96:e9:f5:74:c2:8b:cb:d2:9f:eb:b3:16: 87:aa:9e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PunRjaS4nRg2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjRlZmUwZTgtOWEwYi00OTk2LTkzNWMtYWQ5OGE4MzNmOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6FHC7zHnueSY4WgMxcdx3EpC1gnCZHSd85f M1AhRRTpjK37kGnwQpmcrlh8J4CfLn4HNDnPIBT/kLXeUfPLlsJbMiPrA8yl3nHU t6L3fRxMR8/0+UkV8eTHTCWeNM/zNm5L3fZZp2ckqR6YzMO4unoNgORH30EiTtBB yNb3TBYV+yWsvif5UvzQG/TFWRh9+t4bOz8UXfqhwvS9swV8IV3neLNBFRuVqnT7 jfxstJEcStFeWSELPmqNcQlPXt6YVrHl7hI0wCyvOs8krp9ZuBSAptfRzzUuLGp2 JAe3WLVGYLvMnkpX4pPOESjnYp5K/71uiy9YF77HnIAl3kp3hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGWYYrigL6hiT3M0OdvOQ9ZRSvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODk1MDk4YmMtOGIyMi0z M2RjLWFkMTUtNjQ5MmJhNWI3YWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvs6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuRh6CPHYYu2b9cpKAkFLgyc/9hOzWMXHH43200pbZxM6tc8vS1u44L M4LP6M+N6WtCtLNhpdgacsAf1sQUaix3zolvDqaCGna7KorXXdWDOBmnIrPFmFFA UttUMualp/jGdNHwKYV/nwh8bydwJG5BX1mpW/2IC2JA0rPV9cdXBWd2dLhBs0rB W7w6h/x4MV3Gio/EtSp42P81pWclqMOetboxUyt4ncZeo0Rn3+lJJUjmERZ64duj iZo68pZIBH9jclPKPhywUVg/2XlmKiBWER2mjECTUaxvGrkRttLhgfQOFCXCIUNk iSAKE7PCeJbp9XTCi8vSn+uzFoeqnnc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:10 2026 by rpki-client