$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7c89b4e-6f44-3076-836e-32f12467ca0b.roa File: e7c89b4e-6f44-3076-836e-32f12467ca0b.roa (raw, json) Hash identifier: eJP108fr77PIzBeB0FO9dikW757NT3PN6oiqpvC/3Oo= Subject key identifier: B0:F0:9F:65:3A:D7:09:99:D4:62:7E:C6:EB:1C:FC:D2:D7:11:CE:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0EBB1FF0EC9496181DC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7c89b4e-6f44-3076-836e-32f12467ca0b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:eb:b1:ff:0e:c9:49:61:81:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=870d0dd8-14f7-4fdb-aa0a-34115f45440c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:37:1a:f8:de:5d:ea:fe:fc:e8:85:88:8d:a2: 16:9f:86:bc:e1:86:64:70:90:c3:58:27:c3:85:36: 7c:a5:0e:5a:3b:8a:43:bb:0b:f8:2a:b7:a5:77:41: 75:af:69:63:3b:6f:e7:24:07:be:6b:ed:00:c7:6b: f5:6d:10:cd:d3:9f:0d:7c:2f:06:bb:cf:6b:73:bb: 76:2f:6e:e5:8d:c9:4a:b6:ad:fb:38:60:bd:ea:6f: 55:ee:13:68:6f:7f:b4:20:2a:8b:0f:05:13:c6:24: af:1e:8a:40:a0:fc:b0:05:9e:d0:ec:f5:ca:a4:05: ea:22:10:82:54:d6:36:26:e5:f6:cd:79:49:a0:32: a5:f9:68:1a:50:8f:77:20:c3:0a:fb:03:f6:2e:3a: 7d:d6:91:7e:9d:a8:3a:79:ac:4f:78:bd:25:22:62: 22:3a:27:39:5c:1e:d3:5d:63:bb:b8:7f:90:71:98: f0:81:3c:56:6d:7f:82:9d:13:04:6f:a8:0a:00:03: b3:92:35:c7:05:c3:02:1f:50:1e:0b:a1:57:58:05: fa:e6:62:e8:64:29:25:cf:23:a8:b0:eb:00:ae:68: 2e:c8:28:5a:0e:7f:eb:38:e1:8e:9b:18:be:1f:fc: ef:5b:e6:3b:ee:40:ae:93:f4:9c:1a:83:15:22:f9: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F0:9F:65:3A:D7:09:99:D4:62:7E:C6:EB:1C:FC:D2:D7:11:CE:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7c89b4e-6f44-3076-836e-32f12467ca0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e5:df:57:f0:4c:28:66:bf:65:bb:5f:8e:da:ec:9a:4b:ed: 72:37:a4:b9:28:14:6b:5d:9d:76:20:b9:ef:69:cc:fc:09:a9: ba:d5:ad:67:d3:92:08:2e:5a:4d:3a:fc:cc:01:78:db:65:38: 8d:bc:73:af:cb:66:00:83:7b:7f:5a:6a:b8:75:19:9f:f2:cd: d6:39:c3:8f:14:c2:2e:09:ea:c3:61:da:b4:69:d4:9b:12:bb: b0:42:a0:21:0f:d7:a5:76:6d:ab:2f:e1:4b:5b:7b:5b:f5:f7: 54:f6:9b:48:11:f0:0a:fa:41:26:d0:71:af:7b:af:d2:3d:43: e1:39:fc:b3:18:a5:5a:2b:e2:81:d9:e1:5a:45:a4:51:31:4f: 23:fc:bb:e2:03:73:7c:f4:23:46:58:cc:17:9a:b7:76:07:a8: e2:f6:87:1a:a1:81:b0:31:da:3f:c8:9e:b7:20:21:1d:5c:bf: ce:24:c0:f9:45:1f:ca:58:a8:83:a5:3c:1a:9d:cc:d1:12:86: 21:ae:07:11:0f:b3:58:b6:fc:d9:39:14:d1:0e:02:72:6a:0c: c4:c9:08:c9:4d:02:5b:15:f8:ee:af:e3:25:72:69:9e:e3:53: 0a:aa:1f:e1:cc:3f:f3:1c:fb:d4:66:5c:d7:c8:6e:e6:d9:11: 5e:b3:c0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Oux/w7JSWGB3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODcwZDBkZDgtMTRmNy00ZmRiLWFhMGEtMzQxMTVmNDU0NDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTca+N5d6v786IWIjaIWn4a84YZkcJDDWCfD hTZ8pQ5aO4pDuwv4Kreld0F1r2ljO2/nJAe+a+0Ax2v1bRDN058NfC8Gu89rc7t2 L27ljclKtq37OGC96m9V7hNob3+0ICqLDwUTxiSvHopAoPywBZ7Q7PXKpAXqIhCC VNY2JuX2zXlJoDKl+WgaUI93IMMK+wP2Ljp91pF+nag6eaxPeL0lImIiOic5XB7T XWO7uH+QcZjwgTxWbX+CnRMEb6gKAAOzkjXHBcMCH1AeC6FXWAX65mLoZCklzyOo sOsArmguyChaDn/rOOGOmxi+H/zvW+Y77kCuk/ScGoMVIvnN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDwn2U61wmZ1GJ+xusc/NLXEc54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdjODliNGUtNmY0NC0z MDc2LTgzNmUtMzJmMTI0NjdjYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvubMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbl31fwTChmv2W7X47a7JpL7XI3pLkoFGtdnXYgue9pzPwJqbrVrWfT kgguWk06/MwBeNtlOI28c6/LZgCDe39aarh1GZ/yzdY5w48Uwi4J6sNh2rRp1JsS u7BCoCEP16V2basv4Utbe1v191T2m0gR8Ar6QSbQca97r9I9Q+E5/LMYpVor4oHZ 4VpFpFExTyP8u+IDc3z0I0ZYzBeat3YHqOL2hxqhgbAx2j/InrcgIR1cv84kwPlF H8pYqIOlPBqdzNEShiGuBxEPs1i2/Nk5FNEOAnJqDMTJCMlNAlsV+O6v4yVyaZ7j UwqqH+HMP/Mc+9RmXNfIbubZEV6zwHE= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:10 2026 by rpki-client