$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7b5371a-d045-3315-a2a1-56e23167a78e.roa File: e7b5371a-d045-3315-a2a1-56e23167a78e.roa (raw, json) Hash identifier: 03RDcqL+aMrXC/NECsd91QfeyXoHq6VCiGC3zTtJ5T0= Subject key identifier: 5A:1F:F2:A9:15:21:A2:2A:61:59:E3:F0:3E:9F:38:01:FB:1C:02:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0ED5253AA87D38E4E6840 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7b5371a-d045-3315-a2a1-56e23167a78e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ed:52:53:aa:87:d3:8e:4e:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=71afb5a9-622e-4e19-baf9-ad70ebf49615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fd:3b:0f:97:93:6c:5d:4a:2d:2d:72:7e:95: d9:81:9d:e8:2f:73:5d:29:01:32:07:50:de:32:3c: f9:a2:cd:2a:89:47:b2:2b:68:10:23:fd:ad:3a:d9: cf:b6:37:07:ab:52:5b:be:ca:c6:fc:13:20:54:e9: 63:7c:a7:dd:2f:65:49:9a:3a:a9:93:44:f9:ee:39: 28:8d:72:02:f5:42:c1:05:90:75:01:56:20:26:79: b5:5a:9d:ee:61:1b:af:e2:b3:aa:b1:b7:6f:d8:df: a6:7d:9b:26:24:de:7b:22:39:69:49:7e:d0:4b:b2: 62:b8:f1:f7:62:43:17:3e:e4:f5:89:b5:4f:89:2a: 4a:13:40:75:47:98:29:f2:57:d4:7c:cb:23:02:a8: ce:12:ec:67:67:29:40:32:91:c9:28:70:d0:3f:57: d7:69:fd:19:57:42:3e:3f:1e:38:51:38:99:e9:99: 2b:3a:c4:11:a6:cf:ef:74:52:73:b4:6e:3a:cd:d3: e8:cf:71:dd:1d:b3:ed:87:66:0f:e7:19:f8:b5:de: 51:85:51:c3:87:4f:be:2d:b0:9a:be:65:37:e8:9f: be:05:12:33:73:b1:49:b6:4b:c9:f3:0d:e1:92:7d: 16:1c:21:d0:c1:71:15:ee:d5:fc:09:a8:19:c4:60: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1F:F2:A9:15:21:A2:2A:61:59:E3:F0:3E:9F:38:01:FB:1C:02:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7b5371a-d045-3315-a2a1-56e23167a78e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:76:01:84:d6:df:5c:b0:79:d6:8c:82:99:e8:0f:e7:39:57: 32:0f:78:bd:ce:17:ae:06:7e:a3:16:d2:6a:73:07:d2:66:c8: da:72:ae:cf:ae:74:04:38:e2:59:38:43:89:03:14:26:ec:23: 06:10:95:54:8f:18:40:e0:69:95:ea:94:ab:7f:21:99:52:c9: 60:3c:68:58:78:65:ca:b9:21:61:bc:7a:b3:04:e2:a2:db:91: 49:d8:40:07:67:7d:c3:70:27:79:8e:29:cd:de:27:51:5f:70: e1:94:75:f9:90:2c:47:05:7a:8d:8f:5f:53:b6:76:18:6c:f6: 57:d2:1d:a4:e0:69:5d:4a:5e:71:65:09:df:e6:35:a4:f8:66: a8:05:1c:8a:d4:8c:1b:4f:be:e0:f0:a0:2a:ac:d5:b4:89:c9: 76:6d:21:59:2a:f1:88:59:50:d0:8c:72:0e:2e:f3:aa:cd:ff: 6c:2f:13:e5:0b:cc:45:53:27:98:cf:d9:10:51:80:81:2a:0b: 25:4a:27:0d:d4:fc:d9:e6:6b:a2:fd:41:97:92:16:53:4e:66: 00:10:f8:a4:2a:9f:c5:09:81:47:4a:1e:76:c2:c2:2e:ed:a2: 5e:b8:45:ec:89:bf:61:a9:57:f7:55:b7:13:e3:a4:4c:1b:00: 63:8f:f9:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O1SU6qH045OaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzFhZmI1YTktNjIyZS00ZTE5LWJhZjktYWQ3MGViZjQ5NjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7v07D5eTbF1KLS1yfpXZgZ3oL3NdKQEyB1De Mjz5os0qiUeyK2gQI/2tOtnPtjcHq1JbvsrG/BMgVOljfKfdL2VJmjqpk0T57jko jXIC9ULBBZB1AVYgJnm1Wp3uYRuv4rOqsbdv2N+mfZsmJN57IjlpSX7QS7JiuPH3 YkMXPuT1ibVPiSpKE0B1R5gp8lfUfMsjAqjOEuxnZylAMpHJKHDQP1fXaf0ZV0I+ Px44UTiZ6ZkrOsQRps/vdFJztG46zdPoz3HdHbPth2YP5xn4td5RhVHDh0++LbCa vmU36J++BRIzc7FJtkvJ8w3hkn0WHCHQwXEV7tX8CagZxGBT/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFof8qkVIaIqYVnj8D6fOAH7HAJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdiNTM3MWEtZDA0NS0z MzE1LWEyYTEtNTZlMjMxNjdhNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvupMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV2AYTW31ywedaMgpnoD+c5VzIPeL3OF64GfqMW0mpzB9JmyNpyrs+u dAQ44lk4Q4kDFCbsIwYQlVSPGEDgaZXqlKt/IZlSyWA8aFh4Zcq5IWG8erME4qLb kUnYQAdnfcNwJ3mOKc3eJ1FfcOGUdfmQLEcFeo2PX1O2dhhs9lfSHaTgaV1KXnFl Cd/mNaT4ZqgFHIrUjBtPvuDwoCqs1bSJyXZtIVkq8YhZUNCMcg4u86rN/2wvE+UL zEVTJ5jP2RBRgIEqCyVKJw3U/Nnma6L9QZeSFlNOZgAQ+KQqn8UJgUdKHnbCwi7t ol64ReyJv2GpV/dVtxPjpEwbAGOP+cU= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:34 2026 by rpki-client