$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/682f5889-368b-3ba4-ac1f-61c10958ebc3.roa File: 682f5889-368b-3ba4-ac1f-61c10958ebc3.roa (raw, json) Hash identifier: vcN6dSBOQ6TP3OyvjQjlYepcuFtRA1Y6JKc77oaa3OQ= Subject key identifier: 42:34:C6:14:AF:E1:EC:C5:BF:A5:00:FD:4F:C9:49:9A:EF:04:8D:F7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D1FC5E006E3F36E2303A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/682f5889-368b-3ba4-ac1f-61c10958ebc3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:1f:c5:e0:06:e3:f3:6e:23:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b8c1829a-a9e0-479d-a3e3-5005fa96c375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:16:96:74:64:36:d4:ff:25:7e:9a:f4:f5:92: 1a:e7:94:d1:93:8c:4b:64:0b:91:35:f4:83:46:6d: 0f:4d:f7:db:7b:3b:54:6a:e8:9a:04:9c:74:36:c6: 3f:e4:af:fa:f2:5c:7b:bb:73:87:18:2e:01:22:61: cd:74:03:f6:b7:55:7b:2e:ec:ac:47:51:84:30:9e: 49:50:6f:86:6e:5f:70:f3:e4:40:26:82:48:71:f5: 9c:4b:0c:12:ee:bf:1f:9d:20:e7:b4:df:18:a5:4e: a9:23:40:7e:c9:a0:6a:6e:b8:82:b7:8f:8e:cb:02: e5:99:39:23:48:cb:18:db:0e:6e:1a:5b:f9:2b:96: e7:a9:14:3f:16:e3:41:da:75:36:4d:2b:3c:e7:e9: 11:60:d9:a6:96:a9:62:db:40:e7:0d:ee:71:81:86: 80:a4:4a:de:88:86:a4:37:14:0e:32:98:a0:1c:7d: c4:28:3e:1d:c5:92:9d:a3:62:f1:d1:79:a3:12:76: c6:64:d2:7e:37:18:cf:78:7a:37:ee:b9:f2:80:23: 4f:0c:45:81:93:23:77:3a:cc:ad:89:3a:20:cf:41: 3d:43:66:98:ac:14:c9:4c:94:1f:97:34:d7:56:e8: c1:2c:a6:75:f9:2e:d8:3e:bf:4b:b6:07:e9:3f:67: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:34:C6:14:AF:E1:EC:C5:BF:A5:00:FD:4F:C9:49:9A:EF:04:8D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/682f5889-368b-3ba4-ac1f-61c10958ebc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f8:ac:8a:4a:5b:24:83:bf:f5:d3:35:55:5f:74:94:e8:03: 0b:bd:19:7d:fb:10:6b:8e:97:ad:35:09:ff:0f:8a:f6:8c:8b: 35:92:d4:cb:9f:71:53:ee:c2:8a:8c:de:24:f6:2a:cb:dd:7d: 9b:2d:0b:16:3f:f1:8b:ee:7e:67:d7:a6:d8:63:1a:38:16:75: 41:73:83:6d:3c:0a:9f:27:f6:ce:96:69:dd:b7:05:83:59:d6: fe:3c:46:b1:6f:02:81:50:dc:e0:7f:6d:f0:1a:23:a7:93:5f: 6b:51:3a:69:1e:25:87:a3:bc:2e:88:40:00:de:e7:4f:3f:40: 0a:a1:df:ed:c0:59:e0:87:32:90:84:6f:d6:1b:97:c1:20:45: 54:d9:07:26:24:91:a4:3a:0c:c3:d2:32:30:bd:81:5f:10:b8: 74:4b:62:2b:f0:14:74:9d:78:c3:5c:59:a7:51:2b:35:49:f0: d3:c9:b3:02:d5:e7:50:1f:4c:97:14:e9:ed:5a:c2:56:c2:c2: 7b:04:ce:fe:25:88:85:f2:cc:79:6a:32:99:f2:10:27:30:a5: 9e:44:7c:7d:82:14:f9:de:b5:32:91:78:3a:ff:64:20:5b:ec: 5f:45:0d:40:23:60:09:4f:4e:64:ea:74:60:ef:7f:35:f9:f1: b2:c7:8e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfR/F4Abj824jA6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjhjMTgyOWEtYTllMC00NzlkLWEzZTMtNTAwNWZhOTZjMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRaWdGQ21P8lfpr09ZIa55TRk4xLZAuRNfSD Rm0PTffbeztUauiaBJx0NsY/5K/68lx7u3OHGC4BImHNdAP2t1V7LuysR1GEMJ5J UG+Gbl9w8+RAJoJIcfWcSwwS7r8fnSDntN8YpU6pI0B+yaBqbriCt4+OywLlmTkj SMsY2w5uGlv5K5bnqRQ/FuNB2nU2TSs85+kRYNmmlqli20DnDe5xgYaApEreiIak NxQOMpigHH3EKD4dxZKdo2Lx0XmjEnbGZNJ+NxjPeHo37rnygCNPDEWBkyN3Osyt iTogz0E9Q2aYrBTJTJQflzTXVujBLKZ1+S7YPr9LtgfpP2cr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI0xhSv4ezFv6UA/U/JSZrvBI33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjgyZjU4ODktMzY4Yi0z YmE0LWFjMWYtNjFjMTA5NThlYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD4rIpKWySDv/XTNVVfdJToAwu9GX37EGuOl601Cf8PivaMizWS1Muf cVPuwoqM3iT2KsvdfZstCxY/8YvufmfXpthjGjgWdUFzg208Cp8n9s6Wad23BYNZ 1v48RrFvAoFQ3OB/bfAaI6eTX2tROmkeJYejvC6IQADe508/QAqh3+3AWeCHMpCE b9Ybl8EgRVTZByYkkaQ6DMPSMjC9gV8QuHRLYivwFHSdeMNcWadRKzVJ8NPJswLV 51AfTJcU6e1awlbCwnsEzv4liIXyzHlqMpnyECcwpZ5EfH2CFPnetTKReDr/ZCBb 7F9FDUAjYAlPTmTqdGDvfzX58bLHjks= -----END CERTIFICATE-----Generated at Fri Sep 25 16:26:56 2026 by rpki-client