$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa File: ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa (raw, json) Hash identifier: E9TAICZHi9Zm8tWshsN1qC0wTTpau4L3mtrgw1y2HkE= Subject key identifier: F3:6C:BD:52:A6:32:94:80:87:5E:34:67:E9:34:B3:C3:83:1F:A5:CA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0F856545AF2D3AF5B5780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:f8:56:54:5a:f2:d3:af:5b:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f1a7d31b-9317-4a9a-ab41-74fb5f048ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6a:39:c3:d4:9e:df:8c:00:83:b9:13:fd:25: 58:61:06:24:7b:db:c2:cc:1b:d1:22:a7:94:99:a3: f3:dd:60:37:71:a2:87:8a:e6:69:4c:d6:04:89:1b: 29:ec:ca:b3:bc:8d:45:3e:08:e2:64:28:1a:fc:c5: 2d:d5:b5:f4:a8:0a:81:b6:34:f9:40:53:d3:a8:af: 2d:12:4d:8d:16:26:76:25:be:56:74:af:cd:21:20: ed:42:05:bc:7c:29:56:0b:02:4f:d0:10:25:8d:3f: cc:35:2d:30:54:d2:a6:01:15:96:f2:9f:3f:be:06: db:da:ea:dc:9b:ae:e1:5e:dd:dd:3a:9b:6b:8b:97: 8d:da:56:ee:72:4b:06:87:20:96:2a:64:3f:ed:1a: 44:67:af:7a:04:75:99:3f:20:5a:51:ed:fa:17:ad: 23:41:80:bd:7d:2f:f2:bf:db:de:2e:18:d3:83:f7: 95:10:a1:ee:37:27:75:35:06:ca:49:9e:88:c4:29: ae:ca:fb:3f:4e:bd:05:8b:eb:0e:36:70:1b:c8:aa: 5c:80:7d:08:89:e8:cb:bc:e3:30:4d:1b:71:8e:a4: 14:37:90:3d:13:36:40:5b:85:1e:75:b5:b7:62:a8: a5:90:36:f0:77:4b:d9:f7:3d:06:11:2e:9e:a7:16: 47:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6C:BD:52:A6:32:94:80:87:5E:34:67:E9:34:B3:C3:83:1F:A5:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:85:12:5e:59:67:fd:91:ce:80:ab:d3:c8:d4:63:e4:ce:38: 04:c9:2b:5f:d8:ab:a9:94:47:76:40:5c:58:19:59:38:3f:fd: 34:03:da:62:be:21:11:42:ba:4a:e2:58:54:28:c9:35:6f:65: f2:42:5b:8b:39:2e:33:29:dc:7b:bc:51:bc:3e:fb:15:5f:bb: 9e:23:75:c4:ff:76:20:2c:48:bd:0f:56:d0:f4:09:64:d2:22: d3:ff:1f:c8:c5:29:c8:5d:77:87:67:9f:04:0a:ec:d9:54:b4: 28:f3:fa:6f:ed:b6:b7:2c:c5:14:23:29:6a:b0:b1:29:01:aa: bb:65:52:6b:59:86:96:3a:eb:37:c0:5d:d8:b2:63:97:d7:55: 5b:66:6a:e9:5d:8e:a5:3a:ec:69:60:15:9f:47:b5:7e:83:9e: 91:06:1e:a2:c5:2f:aa:8c:b8:5b:90:2c:56:d4:dd:25:d4:ba: 3c:f0:5b:85:a6:aa:f4:c3:b6:7b:f0:83:0c:f1:1d:02:70:b0: 46:37:36:7e:29:af:62:0c:36:4b:25:23:ff:ab:54:92:ad:72: e4:a3:1f:fc:be:89:8b:93:12:1a:b7:3d:60:0a:a4:d9:87:1c: b4:fb:1c:26:5e:50:b2:2b:23:31:2d:b0:40:38:a0:4e:9b:83: b7:a0:d6:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4PhWVFry069bV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjFhN2QzMWItOTMxNy00YTlhLWFiNDEtNzRmYjVmMDQ4YWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Wo5w9Se34wAg7kT/SVYYQYke9vCzBvRIqeU maPz3WA3caKHiuZpTNYEiRsp7MqzvI1FPgjiZCga/MUt1bX0qAqBtjT5QFPTqK8t Ek2NFiZ2Jb5WdK/NISDtQgW8fClWCwJP0BAljT/MNS0wVNKmARWW8p8/vgbb2urc m67hXt3dOptri5eN2lbucksGhyCWKmQ/7RpEZ696BHWZPyBaUe36F60jQYC9fS/y v9veLhjTg/eVEKHuNyd1NQbKSZ6IxCmuyvs/Tr0Fi+sONnAbyKpcgH0IiejLvOMw TRtxjqQUN5A9EzZAW4UedbW3YqilkDbwd0vZ9z0GES6epxZHSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNsvVKmMpSAh140Z+k0s8ODH6XKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2U0ODI4N2YtZTVhYS0z NDNhLWFkOWQtODQ0NWE4ZjY0N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaFEl5ZZ/2RzoCr08jUY+TOOATJK1/Yq6mUR3ZAXFgZWTg//TQD2mK+ IRFCukriWFQoyTVvZfJCW4s5LjMp3Hu8Ubw++xVfu54jdcT/diAsSL0PVtD0CWTS ItP/H8jFKchdd4dnnwQK7NlUtCjz+m/ttrcsxRQjKWqwsSkBqrtlUmtZhpY66zfA XdiyY5fXVVtmauldjqU67GlgFZ9HtX6DnpEGHqLFL6qMuFuQLFbU3SXUujzwW4Wm qvTDtnvwgwzxHQJwsEY3Nn4pr2IMNkslI/+rVJKtcuSjH/y+iYuTEhq3PWAKpNmH HLT7HCZeULIrIzEtsEA4oE6bg7eg1uY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:30 2026 by rpki-client