$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b85bf151-1ace-3df7-bb1e-e89c34708210.roa File: b85bf151-1ace-3df7-bb1e-e89c34708210.roa (raw, json) Hash identifier: Pq1Yffs5nJ7l4A5QCilidox+vW2rSxP7BnP8UTGW5nk= Subject key identifier: 7E:8D:52:3B:01:4D:30:A7:D1:20:B0:70:0B:92:E5:39:78:24:E9:5D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0EC36D0B03A2E945D0240 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b85bf151-1ace-3df7-bb1e-e89c34708210.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ec:36:d0:b0:3a:2e:94:5d:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=161cf07c-eb37-47de-a831-4d71fc558f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:71:89:95:4f:e4:0b:52:2f:9a:ad:9b:df:a6: 81:a6:bc:58:ee:03:f6:f0:ba:01:db:2a:16:b3:ce: 94:4d:9e:1e:f2:04:75:53:4c:74:35:83:60:f1:0b: 59:1f:86:bf:b6:b0:ec:e2:91:77:76:35:27:1a:40: 5e:68:a7:f3:a9:0b:39:d9:11:f3:ee:6b:6c:10:88: 58:be:34:42:cc:62:11:cc:18:03:87:d5:0f:e9:6f: 2d:13:97:7a:8e:94:39:d5:4d:9d:ea:db:96:60:f0: 42:f0:c6:2e:d4:7c:1e:b4:a7:de:98:67:fa:56:4c: 08:c5:b1:ae:42:18:2c:82:61:6e:7a:9c:dc:79:69: 28:b6:49:96:d6:f6:b3:9f:5e:04:21:bc:5f:a7:45: ef:17:1c:ad:07:2a:77:50:3f:44:a4:cc:09:58:bc: c2:23:b4:78:55:2b:47:20:00:a0:9c:36:52:3d:3d: 37:10:07:af:a0:11:c0:75:15:14:56:ff:17:a0:8b: 79:02:ca:3e:cb:56:93:f5:61:57:95:99:c1:0d:6c: ed:29:90:f2:ca:59:b9:31:b5:de:2c:fd:be:3e:0b: 28:7f:2d:cf:6b:cd:f4:17:5e:18:3c:e3:f8:15:1c: ac:79:6e:bb:5e:15:55:3a:ac:ad:72:a0:c3:b4:56: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8D:52:3B:01:4D:30:A7:D1:20:B0:70:0B:92:E5:39:78:24:E9:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b85bf151-1ace-3df7-bb1e-e89c34708210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0a:65:ec:73:15:31:fa:03:3b:32:07:aa:12:39:2e:d5:b1: 34:02:a1:8d:48:48:be:13:a6:da:dc:23:a5:89:fd:c6:d9:8a: 33:a7:77:e2:06:cd:4a:90:27:7d:72:64:df:c3:f2:e8:4f:5a: b1:9d:ac:62:53:e7:f1:31:17:1e:b2:be:08:6d:8d:34:02:e9: ed:23:64:61:2f:96:47:43:45:33:d4:c9:e4:f6:e4:e6:70:16: ca:b2:3f:89:dc:38:35:5e:11:3c:f6:24:98:64:ec:02:79:f6: 83:2e:96:28:c1:59:71:fa:b3:e9:5e:70:09:6d:c0:4d:7b:ad: d9:66:69:2d:10:39:77:a0:ee:1a:1c:6d:38:b6:ad:11:5f:ec: ee:9d:fe:42:a0:d3:3b:89:80:de:99:ac:c1:3b:a8:bd:d2:6a: 09:cd:f8:29:c4:4a:e9:4e:60:04:e3:34:3d:b0:46:1f:49:73: 24:23:ac:bf:04:bd:ed:e5:3e:63:0f:cf:45:3f:83:50:54:cc: 24:e8:79:fd:6e:e7:41:39:77:2b:f4:e3:65:a2:ae:23:fd:da: 9f:10:e9:3b:a3:69:4d:97:5c:e5:ba:e4:16:0e:cd:63:1c:23: 8f:cf:6a:1c:9c:75:96:30:c3:95:5d:bf:17:8a:e6:9c:8b:cd: 4a:be:23:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Ow20LA6LpRdAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTYxY2YwN2MtZWIzNy00N2RlLWE4MzEtNGQ3MWZjNTU4ZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3GJlU/kC1Ivmq2b36aBprxY7gP28LoB2yoW s86UTZ4e8gR1U0x0NYNg8QtZH4a/trDs4pF3djUnGkBeaKfzqQs52RHz7mtsEIhY vjRCzGIRzBgDh9UP6W8tE5d6jpQ51U2d6tuWYPBC8MYu1HwetKfemGf6VkwIxbGu QhgsgmFuepzceWkotkmW1vazn14EIbxfp0XvFxytByp3UD9EpMwJWLzCI7R4VStH IACgnDZSPT03EAevoBHAdRUUVv8XoIt5Aso+y1aT9WFXlZnBDWztKZDyylm5MbXe LP2+Pgsofy3Pa830F14YPOP4FRyseW67XhVVOqytcqDDtFbxowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6NUjsBTTCn0SCwcAuS5Tl4JOldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjg1YmYxNTEtMWFjZS0z ZGY3LWJiMWUtZTg5YzM0NzA4MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvurMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQKZexzFTH6AzsyB6oSOS7VsTQCoY1ISL4TptrcI6WJ/cbZijOnd+IG zUqQJ31yZN/D8uhPWrGdrGJT5/ExFx6yvghtjTQC6e0jZGEvlkdDRTPUyeT25OZw FsqyP4ncODVeETz2JJhk7AJ59oMulijBWXH6s+lecAltwE17rdlmaS0QOXeg7hoc bTi2rRFf7O6d/kKg0zuJgN6ZrME7qL3SagnN+CnESulOYATjND2wRh9JcyQjrL8E ve3lPmMPz0U/g1BUzCToef1u50E5dyv042WiriP92p8Q6TujaU2XXOW65BYOzWMc I4/PahycdZYww5VdvxeK5pyLzUq+Izk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:50 2026 by rpki-client