$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa File: c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa (raw, json) Hash identifier: nskJAkVeZty1qsgsVkAeFSbC5YRNjpA2eJ350inQ78U= Subject key identifier: A5:62:D0:E0:64:B4:B8:95:4D:CF:68:DB:C5:8C:D2:07:44:B9:24:48 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02DD992CE3B917BCF0700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2d:d9:92:ce:3b:91:7b:cf:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=029460e1-3192-4534-87d5-e6bc9a401161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:d9:d8:f0:5e:15:ae:79:7d:6e:83:2c:4e: 15:60:9c:67:df:74:6f:f2:3b:b4:03:1e:b9:cc:13: 5d:73:7b:dd:9f:a3:98:b7:c6:0d:e5:90:7a:82:b5: 78:4f:e7:7b:e0:5f:8d:17:57:2e:30:26:e2:35:44: 81:0d:9a:cd:80:f8:31:b6:52:9d:9b:34:6d:31:62: 1c:59:86:87:0c:54:d7:a1:e1:20:4c:36:a4:f1:e3: 54:ba:d9:5d:6a:6b:9e:b8:b8:ad:0c:ef:d3:8c:56: d7:8c:f3:42:6b:53:ff:af:48:72:fe:03:c3:d9:1e: 10:cd:09:d4:ea:fe:af:e0:77:30:86:69:d4:83:8d: 4f:58:84:49:99:b4:29:b1:7d:a0:70:f0:31:b3:a8: 60:35:53:7e:4c:70:f6:49:40:76:13:2d:e9:d4:7b: 51:ba:17:24:c8:f7:57:78:d3:2d:b7:62:b2:dc:43: 82:ef:0d:e4:c1:10:a9:50:56:06:80:21:06:80:89: 34:9e:a4:c1:8c:6c:34:55:9e:dd:fa:29:13:17:80: 73:8b:bb:a1:11:4b:3f:cf:1f:6c:9d:de:85:b5:44: de:0e:fc:ea:50:60:cd:81:4f:98:a9:1e:9c:9d:c0: ec:ed:ae:45:ca:31:c4:b7:d6:2c:fc:77:b1:af:ef: ef:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:62:D0:E0:64:B4:B8:95:4D:CF:68:DB:C5:8C:D2:07:44:B9:24:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c5ce0fd2-06ba-31b8-b288-b7d11cc5a7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d9:07:2f:49:ed:9d:60:6f:98:50:b3:9e:04:b7:f0:d9:4a: 74:8e:fd:e4:95:93:3e:d6:8b:b4:f0:c5:b9:35:7c:ae:ec:c7: 50:29:1d:15:bd:16:62:41:2a:c9:16:cf:45:f8:4d:bb:bf:72: a2:95:0c:6b:d3:71:4f:cf:88:8c:01:fa:0a:3a:1c:8e:b3:63: 12:4f:f1:8b:16:98:46:24:96:28:18:b3:e2:ec:b4:95:9c:9b: ac:f9:75:cf:37:bb:2e:93:78:58:55:a1:af:5b:07:3e:99:2a: 21:79:c3:6f:d1:a1:b0:c1:6f:a3:ff:55:0c:d5:7f:56:66:85: 84:59:7b:99:42:04:96:b8:df:05:94:bd:8e:f1:39:ba:0b:67: e7:80:be:28:7e:f9:9b:77:b9:6f:6f:eb:61:d9:bf:9f:b3:01: 3c:07:7f:d0:c9:bc:2a:88:33:ab:7b:ee:5f:6f:c1:cd:5b:91: 4b:d7:2a:1f:77:0e:e6:de:21:22:ed:93:36:23:37:67:6d:e2: 3e:54:3a:82:de:ad:ad:bb:dc:59:5c:32:3d:f7:00:a2:63:b9: b7:a2:54:06:68:cb:95:e9:a4:65:89:f0:63:e9:39:ba:7c:e8: 35:f8:c0:23:07:16:ef:f1:b3:26:2a:3e:ff:bc:d5:cd:9f:34: 93:43:b5:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4C3Zks47kXvPBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDI5NDYwZTEtMzE5Mi00NTM0LTg3ZDUtZTZiYzlhNDAxMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJPZ2PBeFa55fW6DLE4VYJxn33Rv8ju0Ax65 zBNdc3vdn6OYt8YN5ZB6grV4T+d74F+NF1cuMCbiNUSBDZrNgPgxtlKdmzRtMWIc WYaHDFTXoeEgTDak8eNUutldamueuLitDO/TjFbXjPNCa1P/r0hy/gPD2R4QzQnU 6v6v4HcwhmnUg41PWIRJmbQpsX2gcPAxs6hgNVN+THD2SUB2Ey3p1HtRuhckyPdX eNMtt2Ky3EOC7w3kwRCpUFYGgCEGgIk0nqTBjGw0VZ7d+ikTF4Bzi7uhEUs/zx9s nd6FtUTeDvzqUGDNgU+YqR6cncDs7a5FyjHEt9Ys/Hexr+/vuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVi0OBktLiVTc9o28WM0gdEuSRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzVjZTBmZDItMDZiYS0z MWI4LWIyODgtYjdkMTFjYzVhN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvs7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/ZBy9J7Z1gb5hQs54Et/DZSnSO/eSVkz7Wi7Twxbk1fK7sx1ApHRW9 FmJBKskWz0X4Tbu/cqKVDGvTcU/PiIwB+go6HI6zYxJP8YsWmEYkligYs+LstJWc m6z5dc83uy6TeFhVoa9bBz6ZKiF5w2/RobDBb6P/VQzVf1ZmhYRZe5lCBJa43wWU vY7xOboLZ+eAvih++Zt3uW9v62HZv5+zATwHf9DJvCqIM6t77l9vwc1bkUvXKh93 DubeISLtkzYjN2dt4j5UOoLera273FlcMj33AKJjubeiVAZoy5XppGWJ8GPpObp8 6DX4wCMHFu/xsyYqPv+81c2fNJNDtVU= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:37 2026 by rpki-client