$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa File: fa32539a-0dbd-3810-a010-b81c403c8b41.roa (raw, json) Hash identifier: BX4kmwUvEzGK3XuSEuk/5TZAUK3+iBNYsUmlJfepGoo= Subject key identifier: D3:B1:5F:B3:B3:17:AE:D5:A0:AE:FF:81:AB:E6:DF:69:BF:8C:2C:E2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E02F30AC95DA1434E9503C Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 142.251.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:2f:30:ac:95:da:14:34:e9:50:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fde14eb7-fe2e-45c8-9e74-047bb41ce4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dc:57:ac:98:78:db:e4:8b:bc:29:f4:fa:a2: 42:89:dc:2b:4a:4e:04:47:eb:01:a9:ca:d2:6f:1f: 84:28:7f:7e:4a:49:e9:f6:0a:06:4b:43:14:d0:b7: c6:01:19:5a:23:31:ed:e6:85:cf:bd:05:c6:c8:e7: b8:d7:17:d5:ea:fe:ff:15:13:d9:31:c1:40:30:bb: 77:e1:fc:35:3a:3d:25:66:ad:28:f2:d3:9e:89:d4: 7d:2e:56:90:13:98:bb:10:72:47:d8:e1:1c:5f:4d: 4f:15:85:fd:4e:e9:03:59:39:cc:b5:4a:24:fe:cc: 11:77:22:00:ef:2a:e9:1b:b4:0b:41:b1:70:4a:2e: bc:15:4a:ec:76:19:99:c6:96:de:09:c9:41:d5:81: fa:2d:46:1b:55:1d:23:d5:23:9d:90:74:45:dc:67: a2:47:19:a9:8d:c5:85:e7:d6:09:40:3a:d4:66:11: 5a:6f:ab:1c:ed:fd:0f:1b:0f:c2:38:0a:ea:ef:0b: 92:e8:77:34:8b:3b:59:c9:3b:11:57:62:be:8b:d6: 28:0c:48:5e:c7:f9:39:4f:9b:4d:a5:6b:1d:a1:2f: 23:0e:e7:e0:9d:f7:56:23:40:43:7a:da:77:55:af: 4e:aa:8d:fa:da:02:c4:f8:49:f1:6b:6a:85:4d:eb: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B1:5F:B3:B3:17:AE:D5:A0:AE:FF:81:AB:E6:DF:69:BF:8C:2C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fa32539a-0dbd-3810-a010-b81c403c8b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f0:64:d2:fe:d6:a6:39:b6:8b:fa:cb:13:3a:8d:ab:29:b3: e7:63:47:22:57:f7:a3:50:2f:df:e2:4d:7b:1d:58:13:89:2e: a0:fd:a6:e6:b8:3e:81:1a:9b:35:78:00:e7:ca:4e:ee:fa:11: a0:46:4e:56:ad:32:33:73:f2:08:e9:f4:a0:f3:ad:e6:e2:dd: 3a:e0:11:56:f0:81:12:fd:77:e7:c2:e1:60:31:77:aa:da:b1: 9a:70:73:45:3e:bd:01:9a:d7:2a:07:50:6f:d6:98:65:db:de: 78:39:d4:65:2a:5f:23:35:88:9f:ff:43:49:f5:c8:3b:9e:7a: 15:e1:aa:8c:06:dd:d2:fa:d8:cd:4e:1e:94:ec:44:60:26:62: fd:8c:27:28:c4:38:24:b6:5e:a3:0d:08:d6:ab:de:2c:1e:f8: 86:11:d3:55:95:23:12:89:ed:27:a1:79:8f:9d:d4:8d:b8:81: b7:4f:0d:97:23:4b:bd:1f:74:ba:a3:c1:2f:37:a4:e6:d0:c2: 93:46:02:c8:b4:0b:8c:60:d8:4f:33:46:83:1e:44:4c:46:a8: 2a:0b:f4:03:c7:cd:3d:86:39:d7:40:56:a1:86:47:d2:95:6d: fa:9d:62:07:c0:fc:21:c0:1d:a5:f5:73:5b:24:85:f6:15:37: 38:31:ed:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4C8wrJXaFDTpUDwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmRlMTRlYjctZmUyZS00NWM4LTllNzQtMDQ3YmI0MWNlNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNxXrJh42+SLvCn0+qJCidwrSk4ER+sBqcrS bx+EKH9+Sknp9goGS0MU0LfGARlaIzHt5oXPvQXGyOe41xfV6v7/FRPZMcFAMLt3 4fw1Oj0lZq0o8tOeidR9LlaQE5i7EHJH2OEcX01PFYX9TukDWTnMtUok/swRdyIA 7yrpG7QLQbFwSi68FUrsdhmZxpbeCclB1YH6LUYbVR0j1SOdkHRF3GeiRxmpjcWF 59YJQDrUZhFab6sc7f0PGw/COArq7wuS6Hc0iztZyTsRV2K+i9YoDEhex/k5T5tN pWsdoS8jDufgnfdWI0BDetp3Va9Oqo362gLE+Enxa2qFTetOcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOxX7OzF67VoK7/gavm32m/jCziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmEzMjUzOWEtMGRiZC0z ODEwLWEwMTAtYjgxYzQwM2M4YjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATwZNL+1qY5tov6yxM6jasps+djRyJX96NQL9/iTXsdWBOJLqD9pua4 PoEamzV4AOfKTu76EaBGTlatMjNz8gjp9KDzrebi3TrgEVbwgRL9d+fC4WAxd6ra sZpwc0U+vQGa1yoHUG/WmGXb3ng51GUqXyM1iJ//Q0n1yDueehXhqowG3dL62M1O HpTsRGAmYv2MJyjEOCS2XqMNCNar3iwe+IYR01WVIxKJ7SeheY+d1I24gbdPDZcj S70fdLqjwS83pObQwpNGAsi0C4xg2E8zRoMeRExGqCoL9APHzT2GOddAVqGGR9KV bfqdYgfA/CHAHaX1c1skhfYVNzgx7Qg= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:05 2026 by rpki-client