$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9664285-5f8f-3a45-aa2d-8e2b02dc8d7b.roa File: a9664285-5f8f-3a45-aa2d-8e2b02dc8d7b.roa (raw, json) Hash identifier: KL4HGQVxRdFFvc5rIUgBQQa/aNdUdNMj86BB0mJeqMo= Subject key identifier: 33:A2:04:11:49:6F:AE:96:69:14:7B:35:23:5D:AA:D2:2C:58:27:2F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0ED420B2E783F8F380390 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9664285-5f8f-3a45-aa2d-8e2b02dc8d7b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ed:42:0b:2e:78:3f:8f:38:03:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3cefb12f-9d6d-4530-b571-22709c437029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:e4:a5:89:74:a1:74:42:fa:81:6a:55:51: 08:60:d1:36:5b:5a:ea:4d:b6:36:02:0e:0f:f5:17: 5b:09:d1:65:d9:3d:d1:e1:7f:20:44:cb:4c:80:39: 88:7b:ae:db:39:d6:38:56:73:a2:4b:34:a4:dd:cf: 5b:da:ce:02:d7:6c:3d:f6:b1:83:a4:a8:a1:19:6c: 17:e7:ec:91:65:c1:42:26:c4:94:3b:3b:37:53:7a: 2e:a1:1a:e9:0c:68:02:d0:61:c4:3c:45:cc:3d:dc: d1:a4:c9:ab:f4:a5:aa:42:4a:aa:3b:9a:bc:c8:dc: a5:a6:bd:13:46:be:23:ed:6c:6e:72:9b:57:10:92: 4f:5d:65:80:e2:8b:a4:8b:74:6a:5f:62:b9:f9:f1: 2e:2b:db:47:66:bb:68:4b:09:64:e6:2d:bc:2a:d6: 1f:39:76:73:c0:1d:00:bd:d0:c6:94:6a:a9:8b:57: 41:2f:4d:19:b6:e9:32:65:db:54:f1:74:f7:c3:95: 97:62:db:63:8f:b6:32:f6:ae:a7:c3:28:f5:bf:7b: e7:19:6b:d8:5b:b4:92:45:ed:3a:78:eb:c3:18:16: 4c:2f:99:1f:b1:fd:0f:37:5c:08:5c:bc:4d:93:67: b2:9f:9a:4c:ad:f0:b3:28:88:91:19:e9:ea:23:ed: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A2:04:11:49:6F:AE:96:69:14:7B:35:23:5D:AA:D2:2C:58:27:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9664285-5f8f-3a45-aa2d-8e2b02dc8d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1b:67:56:bf:ef:f6:1b:67:9d:e1:cc:22:1d:fe:19:25:41: 99:d3:15:4e:88:18:78:35:f7:1e:ba:b4:e9:c8:9e:29:51:72: 02:e8:e3:06:a2:c6:24:2a:34:46:da:51:98:e3:e9:8a:0d:9f: c8:b6:82:27:44:a9:56:03:5f:2d:19:1c:54:82:c8:08:6e:af: 91:a9:38:fa:ec:e7:e2:39:83:51:15:61:d0:e3:bd:dd:05:5d: 6d:ab:62:4d:0a:bb:0e:6e:62:d0:ff:11:7b:a3:6f:6f:f5:1d: 31:78:9d:cc:98:4d:86:63:4d:aa:d5:09:9a:91:89:c0:ea:5a: 14:8b:08:60:d7:48:9c:b5:4f:58:67:e5:a5:64:e0:9e:60:ea: 92:37:bf:56:4b:7a:81:fa:88:95:f5:25:f5:c9:4a:44:d9:04: dc:22:fc:15:59:72:ac:cf:e6:04:86:ad:45:ff:97:61:81:8c: 72:bb:a9:fd:a1:cd:2c:5f:59:d1:52:9b:b9:a2:33:4b:17:71: 0f:84:60:03:2e:d5:b3:03:53:eb:20:7f:8a:bb:08:17:7a:b6: 78:03:28:f4:77:8d:41:47:ff:ea:cb:4f:ae:c3:c7:d4:6e:0e: 1a:dc:f6:ce:9f:f6:5a:2b:e8:dd:63:1f:aa:10:89:a1:eb:7e: 13:c3:f1:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O1CCy54P484A5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2NlZmIxMmYtOWQ2ZC00NTMwLWI1NzEtMjI3MDljNDM3MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQLkpYl0oXRC+oFqVVEIYNE2W1rqTbY2Ag4P 9RdbCdFl2T3R4X8gRMtMgDmIe67bOdY4VnOiSzSk3c9b2s4C12w99rGDpKihGWwX 5+yRZcFCJsSUOzs3U3ouoRrpDGgC0GHEPEXMPdzRpMmr9KWqQkqqO5q8yNylpr0T Rr4j7WxucptXEJJPXWWA4ouki3RqX2K5+fEuK9tHZrtoSwlk5i28KtYfOXZzwB0A vdDGlGqpi1dBL00ZtukyZdtU8XT3w5WXYttjj7Yy9q6nwyj1v3vnGWvYW7SSRe06 eOvDGBZML5kfsf0PN1wIXLxNk2eyn5pMrfCzKIiRGenqI+04JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOiBBFJb66WaRR7NSNdqtIsWCcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTk2NjQyODUtNWY4Zi0z YTQ1LWFhMmQtOGUyYjAyZGM4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUbZ1a/7/YbZ53hzCId/hklQZnTFU6IGHg19x66tOnInilRcgLo4wai xiQqNEbaUZjj6YoNn8i2gidEqVYDXy0ZHFSCyAhur5GpOPrs5+I5g1EVYdDjvd0F XW2rYk0Kuw5uYtD/EXujb2/1HTF4ncyYTYZjTarVCZqRicDqWhSLCGDXSJy1T1hn 5aVk4J5g6pI3v1ZLeoH6iJX1JfXJSkTZBNwi/BVZcqzP5gSGrUX/l2GBjHK7qf2h zSxfWdFSm7miM0sXcQ+EYAMu1bMDU+sgf4q7CBd6tngDKPR3jUFH/+rLT67Dx9Ru Dhrc9s6f9lor6N1jH6oQiaHrfhPD8Y8= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:36 2026 by rpki-client