$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/664ede03-b682-3e63-bb5b-87bb02f55a2e.roa File: 664ede03-b682-3e63-bb5b-87bb02f55a2e.roa (raw, json) Hash identifier: GD+oGUixfYilcDUfi/xpGk+W3esSSeMyc6q4GYSDvmg= Subject key identifier: F6:EB:A2:F6:AF:7B:45:B9:45:68:66:E9:16:D0:21:16:31:27:5E:C7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4F08113EA7E2723C5BEE0700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/664ede03-b682-3e63-bb5b-87bb02f55a2e.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:11:3e:a7:e2:72:3c:5b:ee:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=6de48d17-8fc2-4517-ba26-0b26c38934ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5e:4b:34:dc:c8:a6:9f:70:d8:f8:95:a1:26: 03:85:93:15:ea:b0:c2:5f:8a:5f:c0:87:43:a4:dc: e8:e7:f4:88:f8:f0:6e:b3:ac:82:7a:32:7d:e3:54: b4:b4:33:1d:47:3b:3b:ae:12:bd:99:9c:5b:38:e1: 01:71:97:48:26:c9:cc:dd:60:80:03:bd:9f:c9:fe: d5:68:8c:43:4a:c6:f1:86:ad:8c:cb:4d:3e:f7:c8: f8:75:08:e9:7a:04:9b:89:84:f6:b2:05:dc:96:f4: 05:03:24:f7:55:5c:5a:3d:37:88:37:d6:fb:e9:ca: d4:7f:4d:4e:98:0c:ac:60:fd:56:8c:10:7e:47:5a: c4:1f:44:17:6c:ea:be:e6:28:c0:8c:01:fc:c8:1a: 3f:b0:2a:82:9f:0b:90:39:77:e3:4f:e4:1a:ed:e4: 30:64:8a:c2:2f:d6:a2:2c:dc:b9:1b:86:6e:5c:83: e5:e3:a0:08:2b:06:74:6a:1f:03:9f:c9:2c:e9:ae: 4c:80:52:80:56:01:56:8d:2d:ab:f0:ca:9e:96:51: 76:14:18:69:54:30:77:51:cf:49:7a:4f:bb:4d:ad: 54:71:3c:dd:f2:d7:c0:b6:c4:d5:cf:e2:83:b3:2b: 13:a0:96:58:f5:69:a7:7b:84:23:e9:e6:a3:c6:ae: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EB:A2:F6:AF:7B:45:B9:45:68:66:E9:16:D0:21:16:31:27:5E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/664ede03-b682-3e63-bb5b-87bb02f55a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:74:28:87:ad:cd:c0:31:4c:ae:db:47:c7:40:f8:4e:be:1b: a2:ed:99:e0:ca:36:ee:61:8f:78:44:4c:eb:ce:8d:c7:79:14: 30:f2:a5:91:c9:a9:c0:a6:a9:f3:49:1d:e7:9c:99:53:d1:08: d0:33:c6:c9:ac:08:42:53:ff:6e:5c:53:fe:20:b6:92:13:74: b7:f1:ee:7a:f1:d8:3f:76:85:68:b6:72:d5:4a:e9:ca:62:f9: 28:34:85:bc:7e:7e:ce:a2:a0:98:fb:90:7d:fd:09:64:7b:68: 46:df:e5:56:85:73:0e:b1:9c:11:a8:1b:33:c8:b0:89:9f:c4: 6b:33:55:b8:74:48:b6:dc:ac:f2:53:1e:cd:0a:e1:8a:7f:85: 8e:19:ad:cd:f4:1e:41:ee:01:4a:9b:67:db:02:00:c2:ad:84: a3:90:03:de:42:2c:76:02:77:3a:09:79:13:f9:96:25:6e:62: d8:2b:7f:61:6f:ca:23:25:27:0a:27:10:bf:13:6d:f7:23:cd: d9:be:55:29:9d:7d:9e:57:0b:32:2d:60:09:33:53:c8:c2:b6: e4:27:5b:15:0c:8e:da:86:89:aa:66:6e:7c:53:d3:f1:8a:06: db:e5:73:8c:b3:26:93:f8:37:4b:23:39:35:ad:01:45:e3:9b: 1d:1a:11:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBE+p+JyPFvuBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk NmRlNDhkMTctOGZjMi00NTE3LWJhMjYtMGIyNmMzODkzNGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl5LNNzIpp9w2PiVoSYDhZMV6rDCX4pfwIdD pNzo5/SI+PBus6yCejJ941S0tDMdRzs7rhK9mZxbOOEBcZdIJsnM3WCAA72fyf7V aIxDSsbxhq2My00+98j4dQjpegSbiYT2sgXclvQFAyT3VVxaPTeIN9b76crUf01O mAysYP1WjBB+R1rEH0QXbOq+5ijAjAH8yBo/sCqCnwuQOXfjT+Qa7eQwZIrCL9ai LNy5G4ZuXIPl46AIKwZ0ah8Dn8ks6a5MgFKAVgFWjS2r8MqellF2FBhpVDB3Uc9J ek+7Ta1UcTzd8tfAtsTVz+KDsysToJZY9Wmne4Qj6eajxq4ynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbrovave0W5RWhm6RbQIRYxJ17HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjY0ZWRlMDMtYjY4Mi0z ZTYzLWJiNWItODdiYjAyZjU1YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB0KIetzcAxTK7bR8dA+E6+G6LtmeDKNu5hj3hETOvOjcd5FDDypZHJ qcCmqfNJHeecmVPRCNAzxsmsCEJT/25cU/4gtpITdLfx7nrx2D92hWi2ctVK6cpi +Sg0hbx+fs6ioJj7kH39CWR7aEbf5VaFcw6xnBGoGzPIsImfxGszVbh0SLbcrPJT Hs0K4Yp/hY4Zrc30HkHuAUqbZ9sCAMKthKOQA95CLHYCdzoJeRP5liVuYtgrf2Fv yiMlJwonEL8Tbfcjzdm+VSmdfZ5XCzItYAkzU8jCtuQnWxUMjtqGiapmbnxT0/GK Btvlc4yzJpP4N0sjOTWtAUXjmx0aEas= -----END CERTIFICATE-----Generated at Tue Nov 10 22:49:50 2026 by rpki-client