$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a25f6c11-5a00-3862-a54e-18e09c229720.roa File: a25f6c11-5a00-3862-a54e-18e09c229720.roa (raw, json) Hash identifier: thU4XLRKo/JYdqAoduJry7EGd6s7iWocP0qlB2XfBso= Subject key identifier: 16:26:9C:A7:3F:2A:9D:EE:26:34:50:28:01:C0:4D:F0:BB:DB:C3:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04BCBEDA582370C6D82C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a25f6c11-5a00-3862-a54e-18e09c229720.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4b:cb:ed:a5:82:37:0c:6d:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ddc92b47-b8b2-49c2-87ec-052765fa59b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:f2:7e:f9:48:3c:22:23:27:4d:ba:ba:f9: 05:d4:b2:7d:2e:5e:65:10:5f:49:ab:4d:67:47:ac: 2b:f2:f3:bb:af:53:a1:09:39:a8:38:9c:cb:1d:dd: cc:58:20:c0:45:8b:b6:40:d8:a3:74:0c:0d:dd:89: f9:4e:b6:a3:87:55:3b:ee:b6:47:a1:62:ea:fb:0b: a0:99:21:65:e6:35:b4:4b:95:48:cf:65:f7:3b:e5: c6:4e:ea:70:e9:24:24:ea:c3:bc:99:d4:24:43:62: 47:c3:a5:3c:13:5e:37:4c:33:eb:67:a2:87:53:a4: 6d:73:35:ed:af:23:17:ef:b8:2f:48:0b:dd:42:98: 4c:91:6e:a7:d0:1c:dd:d2:de:9e:7d:1d:92:69:94: b7:7c:1b:45:61:72:8a:f7:57:76:2b:46:a8:13:fc: bd:a9:2f:11:6b:18:fe:bd:27:18:1b:1f:fc:b5:c6: 1d:23:f9:84:cc:6d:79:74:e3:f4:e9:c7:3f:1e:4b: fc:52:7d:6e:05:63:8a:92:69:c2:1b:7e:d9:42:ea: 18:2c:10:8a:73:1c:5a:43:b0:98:da:6c:38:89:5d: 93:a3:56:55:a3:38:ff:e1:8b:48:42:36:25:ea:cc: 52:5a:18:c8:68:91:d1:37:5f:bc:14:0a:e9:30:97: 07:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:26:9C:A7:3F:2A:9D:EE:26:34:50:28:01:C0:4D:F0:BB:DB:C3:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a25f6c11-5a00-3862-a54e-18e09c229720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:83:51:28:30:75:13:ce:da:ae:fb:30:e4:68:45:da:88:e3: c6:5a:fa:fd:5c:64:c5:e0:6d:b6:70:54:95:8a:56:85:53:a2: 7b:55:33:d0:8e:34:6a:ee:95:86:34:25:3c:a9:93:55:b9:0c: 9d:96:2a:a6:32:a4:90:e4:12:4c:64:c5:e3:de:88:77:57:6f: ff:c8:1c:78:14:72:32:00:f0:3d:6c:ca:4a:61:83:eb:dc:5a: c6:d9:6b:52:98:09:1f:ae:f8:d8:4b:00:e2:94:da:0e:4e:a4: 79:d5:3b:7b:64:ed:ab:2f:a6:98:2e:e5:1a:83:62:e1:01:b4: 29:59:36:00:16:1f:91:da:64:29:13:eb:7d:31:79:89:49:57: da:57:86:25:a4:7c:4e:e6:dd:13:8a:64:c8:2b:5f:0d:96:b4: de:c9:1d:97:73:32:da:07:a3:b0:09:12:c1:3c:10:5c:a5:c4: 63:fc:26:53:1c:da:dd:07:8c:47:99:d3:0a:74:73:81:cf:62: 37:85:8e:e2:4f:6f:17:b4:41:a3:85:e7:54:93:66:b1:50:bc: c0:6e:5a:8a:21:43:94:55:da:fa:21:be:41:e9:39:6d:b2:02: df:88:3e:06:29:c4:b6:f9:7e:fd:9a:c6:bf:af:fb:13:25:e6: 78:28:88:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EvL7aWCNwxtgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGRjOTJiNDctYjhiMi00OWMyLTg3ZWMtMDUyNzY1ZmE1OWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0nyfvlIPCIjJ026uvkF1LJ9Ll5lEF9Jq01n R6wr8vO7r1OhCTmoOJzLHd3MWCDARYu2QNijdAwN3Yn5Trajh1U77rZHoWLq+wug mSFl5jW0S5VIz2X3O+XGTupw6SQk6sO8mdQkQ2JHw6U8E143TDPrZ6KHU6RtczXt ryMX77gvSAvdQphMkW6n0Bzd0t6efR2SaZS3fBtFYXKK91d2K0aoE/y9qS8Raxj+ vScYGx/8tcYdI/mEzG15dOP06cc/Hkv8Un1uBWOKkmnCG37ZQuoYLBCKcxxaQ7CY 2mw4iV2To1ZVozj/4YtIQjYl6sxSWhjIaJHRN1+8FArpMJcHbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYmnKc/Kp3uJjRQKAHATfC728NIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTI1ZjZjMTEtNWEwMC0z ODYyLWE1NGUtMThlMDljMjI5NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvs2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmDUSgwdRPO2q77MORoRdqI48Za+v1cZMXgbbZwVJWKVoVTontVM9CO NGrulYY0JTypk1W5DJ2WKqYypJDkEkxkxePeiHdXb//IHHgUcjIA8D1sykphg+vc WsbZa1KYCR+u+NhLAOKU2g5OpHnVO3tk7asvppgu5RqDYuEBtClZNgAWH5HaZCkT 630xeYlJV9pXhiWkfE7m3ROKZMgrXw2WtN7JHZdzMtoHo7AJEsE8EFylxGP8JlMc 2t0HjEeZ0wp0c4HPYjeFjuJPbxe0QaOF51STZrFQvMBuWoohQ5RV2vohvkHpOW2y At+IPgYpxLb5fv2axr+v+xMl5ngoiLY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:59 2026 by rpki-client