$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa File: f957cfeb-5830-39ef-9099-bec5d5f55221.roa (raw, json) Hash identifier: xotVVo8Y+oFB8jzG00TjF/WjIyeC0Aw6i3LtAHsaz2Q= Subject key identifier: BD:E1:20:11:AE:CE:CB:C2:BC:43:3F:FE:E9:52:35:63:84:5A:83:59 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0EC29402071A556EBAD40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ec:29:40:20:71:a5:56:eb:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ca631686-648f-49ed-b323-4c15a4577621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:82:1a:89:be:79:ea:3b:5f:e6:17:ea:9e: 4f:c8:0d:32:a6:27:16:09:92:a8:e5:a9:bf:63:f3: 2f:5b:5b:e1:05:ec:57:24:ed:77:07:6f:56:82:e5: 73:d5:2e:ae:b0:fb:c9:a3:86:53:74:fd:56:1b:51: 4f:39:3c:9d:cf:f4:e1:f6:22:07:0f:4a:3e:bb:3c: ef:c5:81:b7:ba:70:e6:64:2b:7c:12:f5:74:3b:c7: e5:7e:b8:8a:4b:f8:1b:90:4c:12:d5:7c:dd:ad:8c: fc:9b:1d:07:eb:d6:37:1a:a4:60:45:06:fb:ac:e2: c4:0b:24:fd:da:b8:ea:04:50:04:8d:ef:e2:dc:df: 73:c7:14:a0:0b:f3:37:a5:3c:33:aa:5a:62:02:cc: 5c:95:bd:a6:82:38:fb:ed:58:a5:ef:ae:f7:f0:98: 88:5e:8b:be:d3:e2:9f:34:7b:80:ac:09:a0:e5:2b: 24:b2:50:03:e1:40:d2:5a:8d:27:27:20:ce:86:05: 34:54:54:10:c6:7b:ae:75:07:29:86:d8:5d:cc:66: 01:34:23:80:8b:e4:35:9b:ea:88:49:8a:aa:b4:30: 79:6c:2a:30:1c:97:b1:57:f6:47:20:ba:7d:05:a9: 70:0a:29:e7:35:c5:8a:f8:03:a8:c3:2b:24:6f:83: 3b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E1:20:11:AE:CE:CB:C2:BC:43:3F:FE:E9:52:35:63:84:5A:83:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f957cfeb-5830-39ef-9099-bec5d5f55221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:64:e7:a3:5d:b4:03:de:e4:2d:14:44:95:32:ce:df:82:8d: b2:c6:a5:66:fe:65:72:62:62:1e:ed:3f:90:13:87:4a:d7:b7: 6d:16:af:b4:2d:3a:07:44:96:87:61:df:b4:c2:7f:28:fe:a1: 10:a8:67:09:78:18:cb:f8:88:29:3b:ce:ba:ee:55:0c:9c:ec: 6b:6e:b1:d6:4c:04:f9:e4:24:86:d9:f7:48:67:43:81:42:10: 57:28:ac:68:7d:c8:a1:0b:2c:77:83:f8:cc:62:14:83:06:aa: ab:ae:cc:08:de:17:dd:c7:8e:bb:8f:86:6e:20:7c:42:ee:e0: 7f:05:15:45:80:6e:85:e4:07:fc:5c:60:68:5e:d1:9a:d0:81: 38:25:0b:cc:37:6b:a2:6e:ad:59:ee:1a:a3:dd:42:98:4b:df: 82:4f:7b:59:55:9a:af:7a:06:48:67:6c:e6:d9:1d:bd:15:da: db:04:28:76:1a:e6:c8:bd:4c:ca:4d:3b:fe:f0:db:f2:70:00: 62:94:f1:91:79:e4:a2:fc:fe:d1:23:3c:c0:0f:95:27:3e:e1: 7c:90:79:71:22:36:e4:56:45:79:60:a1:cb:ab:6f:a9:82:05: f7:91:4b:b2:87:2c:9f:c3:cc:44:6a:6a:22:90:d9:3f:39:0b: 25:90:ab:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OwpQCBxpVbrrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2E2MzE2ODYtNjQ4Zi00OWVkLWIzMjMtNGMxNWE0NTc3NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc2CGom+eeo7X+YX6p5PyA0ypicWCZKo5am/ Y/MvW1vhBexXJO13B29WguVz1S6usPvJo4ZTdP1WG1FPOTydz/Th9iIHD0o+uzzv xYG3unDmZCt8EvV0O8flfriKS/gbkEwS1XzdrYz8mx0H69Y3GqRgRQb7rOLECyT9 2rjqBFAEje/i3N9zxxSgC/M3pTwzqlpiAsxclb2mgjj77Vil76738JiIXou+0+Kf NHuArAmg5SskslAD4UDSWo0nJyDOhgU0VFQQxnuudQcphthdzGYBNCOAi+Q1m+qI SYqqtDB5bCowHJexV/ZHILp9BalwCinnNcWK+AOowyskb4M79QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3hIBGuzsvCvEM//ulSNWOEWoNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjk1N2NmZWItNTgzMC0z OWVmLTkwOTktYmVjNWQ1ZjU1MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBk56NdtAPe5C0URJUyzt+CjbLGpWb+ZXJiYh7tP5ATh0rXt20Wr7Qt OgdElodh37TCfyj+oRCoZwl4GMv4iCk7zrruVQyc7GtusdZMBPnkJIbZ90hnQ4FC EFcorGh9yKELLHeD+MxiFIMGqquuzAjeF93HjruPhm4gfELu4H8FFUWAboXkB/xc YGhe0ZrQgTglC8w3a6JurVnuGqPdQphL34JPe1lVmq96BkhnbObZHb0V2tsEKHYa 5si9TMpNO/7w2/JwAGKU8ZF55KL8/tEjPMAPlSc+4XyQeXEiNuRWRXlgocurb6mC BfeRS7KHLJ/DzERqaiKQ2T85CyWQqz4= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:52 2026 by rpki-client