$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64223dd2-111e-39ee-8c2e-c0348ec78c18.roa File: 64223dd2-111e-39ee-8c2e-c0348ec78c18.roa (raw, json) Hash identifier: lXFlSOLkfRzI3R5RfK9eMkcqWpHOr3RPXkyxduMOtR8= Subject key identifier: 51:E3:10:DB:48:9B:AE:3C:E4:98:46:33:FF:BF:05:43:17:D6:A8:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CDE4DBF48F38A896FA680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64223dd2-111e-39ee-8c2e-c0348ec78c18.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:de:4d:bf:48:f3:8a:89:6f:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=63223af9-072c-48a5-85c6-c1c4a46b7454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:eb:e1:4a:fa:e0:93:58:2c:57:5c:88:07: dc:b1:99:bd:d8:81:92:05:7a:fb:ba:e9:74:ad:9d: a5:18:7f:8c:b1:52:33:83:3d:61:43:61:dc:79:53: b5:cf:d3:3e:18:8b:06:10:ac:d2:bf:4e:bf:96:33: bd:ff:ac:be:8a:b1:d8:2b:62:7a:84:a6:12:7f:0f: 6b:62:2d:79:8a:c2:26:7f:6c:b8:2e:9a:aa:88:b6: 41:ef:52:71:a1:53:34:23:fd:03:b1:39:a5:7a:c8: 91:9d:ad:62:d5:ec:f5:a4:7c:6f:7c:9c:57:27:f2: 9c:9b:35:9b:b4:b7:f6:0b:ef:a4:32:8c:61:46:37: 98:56:73:c8:c2:5f:c6:2d:84:42:90:54:b5:d1:5d: e6:85:64:b8:c3:ef:2a:99:89:72:8d:4d:1b:f9:42: a3:40:26:4d:60:2f:c1:89:26:85:c2:ba:dd:5a:a3: 4a:24:51:a5:3c:c0:db:95:c0:ad:bd:37:80:b9:74: 2b:56:bc:3f:1d:65:ad:ac:63:a4:cf:b5:90:e5:ef: 37:98:91:1d:3a:b8:92:01:c1:18:ea:67:7c:90:06: 2b:85:81:b3:96:5e:89:61:38:fb:9d:78:51:4f:a9: cf:5e:a4:a2:a5:eb:c9:a2:e9:81:57:08:ff:23:1a: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:10:DB:48:9B:AE:3C:E4:98:46:33:FF:BF:05:43:17:D6:A8:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/64223dd2-111e-39ee-8c2e-c0348ec78c18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:98:00:22:1e:5b:c2:66:cd:d7:3a:80:e3:3a:a7:55:4b:d9: 44:13:5c:06:ad:e3:3a:c3:cc:d0:eb:31:87:6c:bc:68:60:0e: 11:b4:26:23:7e:bd:e9:65:e9:7d:11:2d:f5:81:83:49:ee:e3: ca:37:89:4f:7c:61:46:5a:93:43:6a:00:98:b0:2e:9d:2c:d6: eb:13:7b:bc:9b:be:a6:80:d8:83:80:e2:3e:37:01:65:bf:da: c9:3c:6d:60:aa:c6:e1:ba:10:87:6a:a7:82:cd:fc:2a:e5:37: 96:3e:e6:f7:d1:ca:3a:ad:e9:65:6f:11:6e:29:fa:af:24:5c: a3:74:52:de:ea:06:2e:45:85:f7:83:67:08:c2:ae:05:45:51: 47:51:b7:04:e8:e0:42:d8:1a:6a:87:c9:07:e8:99:f9:d9:28: 46:1a:bd:42:67:7c:0d:e9:60:56:05:ad:07:dc:07:66:77:4e: a6:82:9f:cd:45:a4:8e:05:57:f6:be:12:cd:bc:b7:6b:f3:16: df:6e:5e:a6:ba:07:59:2c:9d:44:85:b0:71:0e:32:7b:49:7e: 37:f8:f4:ab:78:7d:ba:b0:02:46:04:57:06:ec:e2:fa:9b:e8: fa:d8:15:83:40:34:e5:57:49:c9:5d:2c:1d:87:c0:0a:5b:d1: 1d:07:c8:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfN5Nv0jziolvpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjMyMjNhZjktMDcyYy00OGE1LTg1YzYtYzFjNGE0NmI3NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKfr4Ur64JNYLFdciAfcsZm92IGSBXr7uul0 rZ2lGH+MsVIzgz1hQ2HceVO1z9M+GIsGEKzSv06/ljO9/6y+irHYK2J6hKYSfw9r Yi15isImf2y4LpqqiLZB71JxoVM0I/0DsTmlesiRna1i1ez1pHxvfJxXJ/KcmzWb tLf2C++kMoxhRjeYVnPIwl/GLYRCkFS10V3mhWS4w+8qmYlyjU0b+UKjQCZNYC/B iSaFwrrdWqNKJFGlPMDblcCtvTeAuXQrVrw/HWWtrGOkz7WQ5e83mJEdOriSAcEY 6md8kAYrhYGzll6JYTj7nXhRT6nPXqSipevJoumBVwj/IxplCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHjENtIm6485JhGM/+/BUMX1qgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQyMjNkZDItMTExZS0z OWVlLThjMmUtYzAzNDhlYzc4YzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCYACIeW8Jmzdc6gOM6p1VL2UQTXAat4zrDzNDrMYdsvGhgDhG0JiN+ vell6X0RLfWBg0nu48o3iU98YUZak0NqAJiwLp0s1usTe7ybvqaA2IOA4j43AWW/ 2sk8bWCqxuG6EIdqp4LN/CrlN5Y+5vfRyjqt6WVvEW4p+q8kXKN0Ut7qBi5FhfeD ZwjCrgVFUUdRtwTo4ELYGmqHyQfomfnZKEYavUJnfA3pYFYFrQfcB2Z3TqaCn81F pI4FV/a+Es28t2vzFt9uXqa6B1ksnUSFsHEOMntJfjf49Kt4fbqwAkYEVwbs4vqb 6PrYFYNANOVXScldLB2HwApb0R0HyEU= -----END CERTIFICATE-----Generated at Fri Sep 25 14:52:13 2026 by rpki-client