$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa File: 6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa (raw, json) Hash identifier: saCxp1gWOK0cGx/5ofV0VyYSlamte/7ZY8trK/XadrA= Subject key identifier: E4:DC:96:9A:2E:BC:19:89:E8:0E:7A:3B:E5:52:45:E7:7D:FB:FD:4A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D1E6B82A32E9C8A6E4F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:1e:6b:82:a3:2e:9c:8a:6e:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ad5256de-eeb5-4c17-815e-538992180b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:41:5a:28:21:d8:91:d8:a5:01:18:af:af: 8d:4b:de:33:ff:83:39:b0:17:c2:a3:b1:31:f6:0a: cc:f6:2b:50:7d:7d:fe:90:69:31:bd:e1:7e:17:57: 0d:eb:37:1e:55:1d:d7:b5:58:1f:ce:2a:3d:be:87: 61:23:10:50:12:c1:a5:4d:f9:0c:52:79:90:c6:95: e4:a5:b9:45:9d:48:82:41:da:53:14:ec:ad:bf:e0: 2b:50:ca:eb:f7:1c:dd:1e:cd:e4:ab:c9:f3:4e:29: 63:c6:e5:5e:ff:7c:77:d1:5b:8f:51:cc:47:a3:9b: ce:4b:08:72:bb:0a:27:4c:ce:9b:a3:10:ae:ac:19: 8a:25:77:52:91:6c:27:5e:25:64:6d:8a:ea:74:c6: d5:21:c2:53:22:86:1c:1f:02:96:12:70:7c:8c:ce: b5:33:49:3a:36:09:33:c9:0b:70:36:29:60:a7:85: 73:e3:10:85:28:99:94:af:14:db:84:c2:57:9f:06: 8f:43:09:42:cb:d9:b1:23:f1:cf:76:87:8c:f8:f3: 49:d2:c8:0f:c0:94:db:38:0b:d8:94:49:6c:85:3b: f6:6c:ec:e0:7c:ff:a4:54:ab:4c:ba:81:bc:68:8a: d4:07:39:54:88:2b:e5:4c:6d:10:c4:b8:0e:b2:7e: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DC:96:9A:2E:BC:19:89:E8:0E:7A:3B:E5:52:45:E7:7D:FB:FD:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c5ea99e-a097-353b-a1e2-faef45c4e15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9d:78:39:5b:fd:5b:4d:bc:02:71:5b:04:2a:f7:91:2c:26: 35:bc:82:c1:fb:84:38:53:ba:01:5d:31:9b:e9:38:11:6c:1f: 00:d5:87:6e:77:84:b3:d6:88:84:59:14:80:0a:65:37:84:b5: b8:8c:de:dd:e3:84:c5:a2:45:0c:17:9b:0b:88:7e:92:f4:dd: 13:68:4f:99:25:15:c8:47:b9:51:1c:de:a6:9a:04:f6:73:a9: 75:9e:b8:b9:60:2e:33:41:23:ad:93:7e:2f:b7:56:5b:e5:92: ee:62:cc:11:d3:b4:12:bf:0a:1b:0e:52:66:4a:17:35:0f:86: df:cb:5d:8d:ba:1a:14:bf:1e:9c:8d:52:50:00:18:c0:86:86: 49:a9:ca:64:e8:f9:b4:78:e0:4a:9a:56:d8:ca:64:a2:9d:45: bb:72:4b:0a:5a:09:9e:8c:93:33:bc:12:f0:c3:fb:29:a2:6f: c3:da:a1:12:a4:aa:e8:4a:8d:00:2a:f3:d5:38:39:32:08:24: 27:4e:e1:51:c2:ce:60:ed:bb:5e:c8:e6:ec:20:93:03:3d:e3: 12:61:82:36:18:0a:35:62:f8:e2:9d:3e:fa:1c:67:6d:da:82: ea:a0:3e:e3:7b:fd:38:9e:94:89:04:22:9c:02:e5:c3:f8:2a: 08:cd:8b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfR5rgqMunIpuT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWQ1MjU2ZGUtZWViNS00YzE3LTgxNWUtNTM4OTkyMTgwYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobJBWigh2JHYpQEYr6+NS94z/4M5sBfCo7Ex 9grM9itQfX3+kGkxveF+F1cN6zceVR3XtVgfzio9vodhIxBQEsGlTfkMUnmQxpXk pblFnUiCQdpTFOytv+ArUMrr9xzdHs3kq8nzTiljxuVe/3x30VuPUcxHo5vOSwhy uwonTM6boxCurBmKJXdSkWwnXiVkbYrqdMbVIcJTIoYcHwKWEnB8jM61M0k6Ngkz yQtwNilgp4Vz4xCFKJmUrxTbhMJXnwaPQwlCy9mxI/HPdoeM+PNJ0sgPwJTbOAvY lElshTv2bOzgfP+kVKtMuoG8aIrUBzlUiCvlTG0QxLgOsn65eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTclpouvBmJ6A56O+VSRed9+/1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmM1ZWE5OWUtYTA5Ny0z NTNiLWExZTItZmFlZjQ1YzRlMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2deDlb/VtNvAJxWwQq95EsJjW8gsH7hDhTugFdMZvpOBFsHwDVh253 hLPWiIRZFIAKZTeEtbiM3t3jhMWiRQwXmwuIfpL03RNoT5klFchHuVEc3qaaBPZz qXWeuLlgLjNBI62Tfi+3Vlvlku5izBHTtBK/ChsOUmZKFzUPht/LXY26GhS/HpyN UlAAGMCGhkmpymTo+bR44EqaVtjKZKKdRbtySwpaCZ6MkzO8EvDD+ymib8PaoRKk quhKjQAq89U4OTIIJCdO4VHCzmDtu17I5uwgkwM94xJhgjYYCjVi+OKdPvocZ23a guqgPuN7/TielIkEIpwC5cP4KgjNi1c= -----END CERTIFICATE-----Generated at Fri Sep 25 14:45:24 2026 by rpki-client