$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa File: 76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa (raw, json) Hash identifier: wQx/aST6CN0A9iJiRHiqA+uBM5nGk5+k181pimnc0TI= Subject key identifier: CF:AB:FB:44:D1:70:2A:D6:F7:F1:2E:74:43:F2:61:4D:AD:6F:58:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629307B063EC71518E03E800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.250.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:b0:63:ec:71:51:8e:03:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=239bbd6d-b043-4fc6-b77b-fb9f268bc73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bf:90:60:29:71:d5:49:8c:ab:09:d0:2b:51: fd:b8:13:ab:d2:55:1a:ee:f8:d3:21:0a:f0:8a:08: 20:d1:b9:f8:0d:e0:92:ef:0f:61:37:d8:a4:e2:be: 55:dc:29:54:2f:fd:86:d5:b1:c2:b4:03:73:55:57: f0:e2:9c:c8:3f:a3:51:a3:e9:e5:19:76:38:93:ef: eb:23:6c:a2:ce:dc:ee:2b:fd:50:b5:01:89:19:52: 99:d4:bc:4c:27:c2:ea:59:3d:79:eb:a6:c7:a3:25: 8f:6b:20:da:5c:96:8f:1a:ac:a6:63:56:67:35:d9: bc:60:0a:92:87:71:0f:e5:26:47:ee:c3:f0:de:11: 39:15:cf:9b:b4:5f:2b:f2:96:82:22:03:83:6c:f2: 05:30:1c:46:bc:b4:45:47:48:10:f7:c7:30:22:22: 3d:44:1d:ee:b8:3c:88:1e:de:85:b3:91:49:16:20: 58:5f:e0:87:b1:29:48:3d:ce:03:74:b2:b0:29:3e: 45:85:ab:4e:26:7b:a4:56:b5:28:67:16:c3:fd:ef: b4:af:ab:f5:f6:6e:da:84:fd:e1:d8:fd:b0:cc:55: 13:f8:8e:8e:c9:6a:91:15:7f:72:e1:0c:ae:12:68: 5b:3c:e3:cc:5a:ed:42:ad:31:b0:f9:cc:59:21:3a: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AB:FB:44:D1:70:2A:D6:F7:F1:2E:74:43:F2:61:4D:AD:6F:58:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:46:f4:b6:d8:7f:a2:0b:85:c9:dc:02:bb:1b:07:6b:d5:4b: 5f:d4:5c:af:94:60:21:dc:b5:02:48:82:dc:d9:51:41:58:c6: 1e:5b:67:06:89:3e:d0:c5:1a:d0:89:54:cd:c1:45:28:0c:e0: 9d:9e:32:d8:78:d9:eb:9f:dc:62:0c:ca:17:57:00:34:43:91: 34:be:cf:0f:6e:1a:a9:51:9d:e3:95:c2:2c:25:5e:36:7f:ae: 27:32:98:8f:2c:f4:a3:83:01:9d:42:94:20:83:77:93:34:48: 2c:33:e1:ff:04:21:18:32:2b:8e:5a:cb:45:ef:17:fa:c6:6c: f2:fa:a2:7e:84:ab:39:42:19:99:c3:80:9b:10:3d:c0:2d:3d: ef:37:75:25:81:6b:05:1c:13:93:08:0e:69:21:f3:a7:cd:1a: 74:5f:29:77:2f:d7:e8:e6:57:f6:b6:21:8b:f2:71:a5:66:a0: 42:d5:a8:94:56:cd:e2:c4:a1:8c:c3:63:92:c8:25:06:45:63: c5:5d:d3:17:b5:68:59:44:b0:0c:68:ab:91:18:7a:fe:d9:81: fc:61:6b:f8:48:50:bf:9b:cd:f4:b9:45:c2:22:96:f6:9e:74: 45:e9:da:19:81:0f:ca:c3:45:44:ca:9b:d6:c5:96:d4:71:38: 1f:58:66:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwewY+xxUY4D6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MjM5YmJkNmQtYjA0My00ZmM2LWI3N2ItZmI5ZjI2OGJjNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb+QYClx1UmMqwnQK1H9uBOr0lUa7vjTIQrw iggg0bn4DeCS7w9hN9ik4r5V3ClUL/2G1bHCtANzVVfw4pzIP6NRo+nlGXY4k+/r I2yiztzuK/1QtQGJGVKZ1LxMJ8LqWT1566bHoyWPayDaXJaPGqymY1ZnNdm8YAqS h3EP5SZH7sPw3hE5Fc+btF8r8paCIgODbPIFMBxGvLRFR0gQ98cwIiI9RB3uuDyI Ht6Fs5FJFiBYX+CHsSlIPc4DdLKwKT5FhatOJnukVrUoZxbD/e+0r6v19m7ahP3h 2P2wzFUT+I6OyWqRFX9y4QyuEmhbPOPMWu1CrTGw+cxZITqO1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+r+0TRcCrW9/EudEPyYU2tb1j+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzY4OTdhZTUtNTZlNC0z ZDZkLThhMDktNWM4OGU1ZDVmMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRG9LbYf6ILhcncArsbB2vVS1/UXK+UYCHctQJIgtzZUUFYxh5bZwaJ PtDFGtCJVM3BRSgM4J2eMth42euf3GIMyhdXADRDkTS+zw9uGqlRneOVwiwlXjZ/ ricymI8s9KODAZ1ClCCDd5M0SCwz4f8EIRgyK45ay0XvF/rGbPL6on6EqzlCGZnD gJsQPcAtPe83dSWBawUcE5MIDmkh86fNGnRfKXcv1+jmV/a2IYvycaVmoELVqJRW zeLEoYzDY5LIJQZFY8Vd0xe1aFlEsAxoq5EYev7Zgfxha/hIUL+bzfS5RcIilvae dEXp2hmBD8rDRUTKm9bFltRxOB9YZpw= -----END CERTIFICATE-----Generated at Tue Nov 10 22:55:14 2026 by rpki-client