$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7c89b4e-6f44-3076-836e-32f12467ca0b.roa File: e7c89b4e-6f44-3076-836e-32f12467ca0b.roa (raw, json) Hash identifier: KQKgkI7MfIhhRe2LxmFM6dwy/L4hw0PCQZnRkvAoA3Q= Subject key identifier: 8D:2D:E4:D1:5D:11:1D:54:62:10:73:EF:9D:22:F2:57:71:FB:8B:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4985045B7C6133E693D77700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7c89b4e-6f44-3076-836e-32f12467ca0b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:04:5b:7c:61:33:e6:93:d7:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=136dbfbb-8954-4020-b67a-ba7c9a2aa4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:05:6a:f4:6b:75:4b:f6:22:0a:89:d2:82:c3: 93:33:19:40:13:f1:8b:59:b8:34:ab:60:f4:81:a5: 0b:32:dc:6b:b6:1e:49:fd:91:88:19:5e:6b:2f:da: 93:09:99:95:c9:1a:66:a1:ad:c4:d6:64:f6:b9:fb: ec:d1:85:f6:d1:e1:44:4d:2a:bc:79:97:0c:a5:4f: 94:77:cc:e7:b5:6d:b6:dc:a7:ff:6f:b2:da:cc:25: 12:96:b4:b0:fc:81:11:79:24:d8:0e:56:d7:b6:82: d2:8c:77:e4:f4:1b:1b:82:7e:c2:55:5b:f6:56:e2: 72:a8:17:07:9c:a4:5e:20:eb:1b:36:35:a4:55:2f: b4:29:1c:aa:4a:5e:22:e1:af:05:7d:df:0e:16:c5: 6a:b3:15:44:c9:bf:6d:b7:03:7d:99:88:06:82:6d: 14:bb:fb:e5:55:38:d0:90:b1:ff:ee:47:a2:fb:52: dc:1d:83:d7:5a:db:3b:92:00:3b:39:dc:04:61:03: 86:e6:fc:f1:fa:64:93:6e:52:32:6f:99:54:75:51: 6f:d4:dc:8d:84:64:7e:5d:1b:ad:05:aa:84:0d:d9: b9:9e:69:4f:a2:14:35:71:21:20:b6:bb:e9:96:66: 3e:e0:d8:03:3b:56:b7:34:c4:07:42:8f:b7:4a:e1: dd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2D:E4:D1:5D:11:1D:54:62:10:73:EF:9D:22:F2:57:71:FB:8B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7c89b4e-6f44-3076-836e-32f12467ca0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:de:8e:1d:5d:b6:fa:8e:1f:ce:a0:04:d1:6c:7a:88:b0:37: 5a:61:0b:56:ae:22:f0:c5:e0:17:a5:34:d6:90:fc:37:1d:12: 0f:43:51:75:85:e9:8e:30:18:87:51:c6:4d:63:5f:4d:8f:15: c9:3b:78:98:9c:5c:72:be:a9:32:15:cf:8d:60:b3:a0:cf:e0: bd:35:e0:bd:5b:cb:08:95:48:87:01:45:3e:77:1a:64:d0:8c: 2c:b8:1f:ce:e6:35:2e:fd:90:50:2b:be:d9:8f:57:37:32:ec: d0:03:a7:2b:58:a3:11:07:d3:78:f8:bb:f4:6a:21:6e:11:32: 5a:2c:0d:49:da:b2:7a:a8:44:b0:93:69:a2:a4:1e:bb:eb:7a: 39:81:f2:df:36:8b:1c:05:b9:b5:8e:6d:72:80:ac:43:6e:60: a3:4b:d8:e6:b5:7b:92:c9:2b:8f:dc:16:42:ea:57:32:45:f2: 39:b5:80:91:22:9e:99:2d:da:8f:56:37:c9:bb:16:2d:f1:c8: a2:97:9a:38:34:6d:17:8c:16:b7:c0:a5:d0:25:78:d6:7d:13: 8a:fb:5d:c1:f4:ca:f6:d9:15:b9:40:54:ca:e1:f9:72:6f:a7: f7:55:4b:d9:f7:03:8d:3d:43:91:10:84:2d:ba:3b:88:68:24: b7:74:be:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQRbfGEz5pPXdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTM2ZGJmYmItODk1NC00MDIwLWI2N2EtYmE3YzlhMmFhNGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigVq9Gt1S/YiConSgsOTMxlAE/GLWbg0q2D0 gaULMtxrth5J/ZGIGV5rL9qTCZmVyRpmoa3E1mT2ufvs0YX20eFETSq8eZcMpU+U d8zntW223Kf/b7LazCUSlrSw/IEReSTYDlbXtoLSjHfk9Bsbgn7CVVv2VuJyqBcH nKReIOsbNjWkVS+0KRyqSl4i4a8Ffd8OFsVqsxVEyb9ttwN9mYgGgm0Uu/vlVTjQ kLH/7kei+1LcHYPXWts7kgA7OdwEYQOG5vzx+mSTblIyb5lUdVFv1NyNhGR+XRut BaqEDdm5nmlPohQ1cSEgtrvplmY+4NgDO1a3NMQHQo+3SuHdjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0t5NFdER1UYhBz750i8ldx+4sNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdjODliNGUtNmY0NC0z MDc2LTgzNmUtMzJmMTI0NjdjYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvubMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbejh1dtvqOH86gBNFseoiwN1phC1auIvDF4BelNNaQ/DcdEg9DUXWF 6Y4wGIdRxk1jX02PFck7eJicXHK+qTIVz41gs6DP4L014L1bywiVSIcBRT53GmTQ jCy4H87mNS79kFArvtmPVzcy7NADpytYoxEH03j4u/RqIW4RMlosDUnasnqoRLCT aaKkHrvrejmB8t82ixwFubWObXKArENuYKNL2Oa1e5LJK4/cFkLqVzJF8jm1gJEi npkt2o9WN8m7Fi3xyKKXmjg0bReMFrfApdAleNZ9E4r7XcH0yvbZFblAVMrh+XJv p/dVS9n3A409Q5EQhC26O4hoJLd0vhg= -----END CERTIFICATE-----Generated at Sat Sep 26 07:04:54 2026 by rpki-client