$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67f9e0c0-efe8-3a78-b1b5-97ee8e77d3f8.roa File: 67f9e0c0-efe8-3a78-b1b5-97ee8e77d3f8.roa (raw, json) Hash identifier: jjSVpSduyBUCoCrUQwIAYEVHuGfD3QzZDT1jMUC8bTg= Subject key identifier: 7C:89:D3:65:04:CF:13:85:0D:C0:85:6A:7B:B0:CB:10:37:37:17:8F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4985150325C07CE74701C280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67f9e0c0-efe8-3a78-b1b5-97ee8e77d3f8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:15:03:25:c0:7c:e7:47:01:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b650596a-288e-4d7e-b2ad-63705c44823d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a1:e1:02:06:51:45:a1:15:38:9b:87:25:35: c4:f9:f1:b7:42:0a:9d:eb:15:d7:80:3b:4d:60:ea: d0:d8:7e:54:a2:11:f1:b7:31:6d:6f:d7:8f:21:cb: fa:b6:64:67:eb:cf:7a:01:0a:a9:e2:5a:75:99:b3: 32:d6:f7:73:f9:4b:bc:10:31:a5:9e:6f:24:77:fc: 7c:da:96:37:13:59:fa:c3:79:31:20:6b:a9:12:09: 67:80:6f:33:ee:d0:6f:d0:d2:3a:56:23:ef:75:94: fa:61:54:c8:a4:23:72:85:e6:00:d7:b3:c2:7e:17: 1c:da:ec:14:f3:eb:e2:73:5e:b2:8c:b2:a4:f5:61: 42:a8:79:a0:fc:07:6c:00:e4:64:08:e4:00:12:ae: d2:c4:7d:c1:ef:60:7d:f3:e0:18:5b:81:f5:54:07: 18:e1:df:87:3d:69:0e:a4:3f:8a:53:69:d2:a2:d5: 40:05:69:43:c8:07:5c:e6:e7:2d:e1:46:37:0d:cc: 22:90:3b:4c:39:04:b3:b9:a7:8d:aa:df:48:48:a7: 6a:d7:70:94:2b:66:e2:0f:93:88:e9:e5:91:c4:32: 2e:d7:bb:f8:28:d2:dd:17:fd:da:d9:1c:1b:33:17: 96:13:9f:f6:0a:93:e7:a5:5d:0b:96:77:eb:ca:e7: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:89:D3:65:04:CF:13:85:0D:C0:85:6A:7B:B0:CB:10:37:37:17:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/67f9e0c0-efe8-3a78-b1b5-97ee8e77d3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:9a:65:de:45:26:9c:0e:c9:f8:fb:62:b1:86:2f:05:27:5e: 8e:5a:d4:08:1b:f6:d0:23:d3:a3:f7:24:38:4b:f8:18:ee:48: 9e:92:8f:d2:46:a6:66:11:62:be:49:9e:e5:55:09:45:ca:3f: 45:ed:4f:04:99:22:0b:99:b0:23:f8:5b:b1:87:f5:8b:78:10: 1c:61:e8:38:6c:e3:7a:cf:23:3a:14:f6:1d:62:ae:31:0b:28: 35:b9:d5:51:7a:b8:06:c5:1c:33:90:27:89:8e:2b:5d:eb:ca: ec:18:03:8a:65:38:0b:7e:f6:9f:14:02:43:8b:e7:17:32:0d: 02:83:84:ff:a0:05:83:5d:a4:05:78:c1:a2:ef:a8:3d:84:8e: 13:8f:14:b4:99:b2:0d:b9:55:6d:ac:9e:dc:3a:05:fb:b5:9e: e6:c0:0f:f7:f0:7d:75:24:f2:93:37:ce:7f:28:6b:7d:1a:f9: 72:c5:0c:f5:8d:d8:24:2b:9e:78:55:33:4e:74:83:b0:94:87: 53:02:e7:c5:72:30:66:17:97:27:99:0e:b3:56:e2:2c:da:87: 2f:94:67:4a:98:d6:06:01:43:e6:7f:a9:ef:1c:95:89:88:7e: 35:46:47:e8:02:39:32:9c:d7:92:87:73:e9:9a:ed:ed:52:6f: ba:0e:58:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhRUDJcB850cBwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjY1MDU5NmEtMjg4ZS00ZDdlLWIyYWQtNjM3MDVjNDQ4MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaHhAgZRRaEVOJuHJTXE+fG3Qgqd6xXXgDtN YOrQ2H5UohHxtzFtb9ePIcv6tmRn6896AQqp4lp1mbMy1vdz+Uu8EDGlnm8kd/x8 2pY3E1n6w3kxIGupEglngG8z7tBv0NI6ViPvdZT6YVTIpCNyheYA17PCfhcc2uwU 8+vic16yjLKk9WFCqHmg/AdsAORkCOQAEq7SxH3B72B98+AYW4H1VAcY4d+HPWkO pD+KU2nSotVABWlDyAdc5uct4UY3DcwikDtMOQSzuaeNqt9ISKdq13CUK2biD5OI 6eWRxDIu17v4KNLdF/3a2RwbMxeWE5/2CpPnpV0LlnfryufFewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyJ02UEzxOFDcCFanuwyxA3NxePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjdmOWUwYzAtZWZlOC0z YTc4LWIxYjUtOTdlZThlNzdkM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeaZd5FJpwOyfj7YrGGLwUnXo5a1Agb9tAj06P3JDhL+BjuSJ6Sj9JG pmYRYr5JnuVVCUXKP0XtTwSZIguZsCP4W7GH9Yt4EBxh6Dhs43rPIzoU9h1irjEL KDW51VF6uAbFHDOQJ4mOK13ryuwYA4plOAt+9p8UAkOL5xcyDQKDhP+gBYNdpAV4 waLvqD2EjhOPFLSZsg25VW2sntw6Bfu1nubAD/fwfXUk8pM3zn8oa30a+XLFDPWN 2CQrnnhVM050g7CUh1MC58VyMGYXlyeZDrNW4izahy+UZ0qY1gYBQ+Z/qe8clYmI fjVGR+gCOTKc15KHc+ma7e1Sb7oOWBw= -----END CERTIFICATE-----Generated at Fri Sep 25 16:49:46 2026 by rpki-client