$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa File: 5a720a5a-25e3-3747-9676-70856a8a9f69.roa (raw, json) Hash identifier: lfY4RubiTvcgXQ0MD0z/FNdp0hzDTeu2WPxvOIvxaGE= Subject key identifier: 98:A4:58:69:0D:9C:33:56:2F:67:06:01:49:A9:A3:22:A4:4A:FB:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984F52619BE7215589EC108 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f5:26:19:be:72:15:58:9e:c1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3bc0015c-6b4f-41a2-9d3f-32b9a26b7515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:1d:a0:7e:47:08:e2:0f:bb:64:42:e7:f6: a1:87:ca:3e:7a:88:92:76:f2:7e:5e:21:f9:84:c6: 70:8b:cc:21:c2:59:8e:1f:b6:ae:91:4b:cc:75:c3: 1a:0d:13:45:29:56:88:9c:9f:ff:52:02:b0:21:1a: c0:41:45:7f:ce:4d:20:5b:bb:dd:58:ed:15:1a:96: 62:5a:17:ae:96:49:e6:10:a0:6b:93:20:00:b2:75: 9d:f9:7a:29:84:df:80:ef:49:9d:0d:24:0f:ce:e5: 7d:93:05:8b:87:79:c9:0a:c1:11:83:95:06:8c:e8: b9:ad:96:4f:04:a1:68:43:9a:9d:46:9a:3e:92:cf: 11:f5:22:36:98:d5:14:5b:4a:6b:6f:c7:e1:8b:b2: 83:81:54:f9:db:79:c2:1b:b6:5a:68:17:c1:5c:01: a4:1e:d0:bd:00:78:ac:f0:29:a6:16:df:67:16:52: 12:a6:f7:7f:0e:ee:56:47:70:e4:c1:20:d5:56:61: 41:51:1c:70:7b:d0:55:8e:6d:90:3e:bc:6a:6d:fd: 63:4f:55:fc:e4:8a:bd:7d:d4:0e:08:c1:d5:16:56: d4:43:97:cc:bd:b9:64:dc:5f:d2:29:bf:a9:d9:14: 54:2e:7c:f8:e1:38:78:b4:53:c7:2c:da:8d:34:95: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A4:58:69:0D:9C:33:56:2F:67:06:01:49:A9:A3:22:A4:4A:FB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:50:3a:fa:67:5e:54:38:4a:7a:7d:20:71:06:67:3f:95:e7: af:20:14:b4:c9:e3:58:c3:d6:43:d8:71:75:70:33:68:2f:33: a3:11:d4:27:fe:e2:00:1d:c5:05:c2:23:31:e6:93:5e:e5:07: d7:49:07:d2:81:39:1c:99:32:ec:e3:06:40:ea:13:31:ed:2a: 8a:85:d2:d3:31:81:90:9e:c7:0d:96:0d:90:9d:89:ad:1a:1e: a7:e8:94:d2:57:9a:e9:cb:df:fc:94:42:a5:48:59:a6:a8:f7: bc:0e:c0:8f:1c:96:a4:d7:a3:c8:6d:79:58:54:e2:be:3e:34: 59:ba:c0:5b:1f:d0:ce:69:e0:25:f7:7c:90:c8:ec:fa:36:1a: 2a:d4:44:06:4a:67:1a:9e:94:11:ba:04:27:8a:2a:02:e4:df: bd:39:18:b9:c3:f1:4c:ea:ca:db:97:72:7e:9b:c4:a5:15:d8: 46:a6:43:77:9c:ed:84:df:55:ab:f7:52:68:fd:e8:a1:7d:43: b9:6b:06:ec:fe:8a:2c:9a:aa:c4:8a:b9:b1:a2:5f:4c:36:1f: 46:92:97:97:da:ac:1c:00:50:7d:25:5d:84:f6:f8:3c:a3:1b: 30:a3:66:4f:ed:86:1a:82:03:41:e9:fd:e9:59:8b:e5:59:f7: 2f:ea:13:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPUmGb5yFViewQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2JjMDAxNWMtNmI0Zi00MWEyLTlkM2YtMzJiOWEyNmI3NTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweUdoH5HCOIPu2RC5/ahh8o+eoiSdvJ+XiH5 hMZwi8whwlmOH7aukUvMdcMaDRNFKVaInJ//UgKwIRrAQUV/zk0gW7vdWO0VGpZi WheulknmEKBrkyAAsnWd+XophN+A70mdDSQPzuV9kwWLh3nJCsERg5UGjOi5rZZP BKFoQ5qdRpo+ks8R9SI2mNUUW0prb8fhi7KDgVT523nCG7ZaaBfBXAGkHtC9AHis 8CmmFt9nFlISpvd/Du5WR3DkwSDVVmFBURxwe9BVjm2QPrxqbf1jT1X85Iq9fdQO CMHVFlbUQ5fMvblk3F/SKb+p2RRULnz44Th4tFPHLNqNNJX7hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJikWGkNnDNWL2cGAUmpoyKkSvsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE3MjBhNWEtMjVlMy0z NzQ3LTk2NzYtNzA4NTZhOGE5ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZQOvpnXlQ4Snp9IHEGZz+V568gFLTJ41jD1kPYcXVwM2gvM6MR1Cf+ 4gAdxQXCIzHmk17lB9dJB9KBORyZMuzjBkDqEzHtKoqF0tMxgZCexw2WDZCdia0a HqfolNJXmunL3/yUQqVIWaao97wOwI8clqTXo8hteVhU4r4+NFm6wFsf0M5p4CX3 fJDI7Po2GirURAZKZxqelBG6BCeKKgLk3705GLnD8UzqytuXcn6bxKUV2EamQ3ec 7YTfVav3Umj96KF9Q7lrBuz+iiyaqsSKubGiX0w2H0aSl5farBwAUH0lXYT2+Dyj GzCjZk/thhqCA0Hp/elZi+VZ9y/qE/c= -----END CERTIFICATE-----Generated at Fri Sep 25 14:54:22 2026 by rpki-client