$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f340479d-992c-3020-9b89-7b2c0474b6f0.roa File: f340479d-992c-3020-9b89-7b2c0474b6f0.roa (raw, json) Hash identifier: yu3gtG3NcpeJ0XaXVT7VNlDcQT4OplGmBqOFZqZpvio= Subject key identifier: 89:15:4E:54:86:81:A1:F2:82:59:00:53:D1:32:CA:67:FD:84:8A:C6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EBAA318D4F2F9D0BB610 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f340479d-992c-3020-9b89-7b2c0474b6f0.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.251.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:eb:aa:31:8d:4f:2f:9d:0b:b6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b6149c36-c52c-47df-ab0b-e5f2e7146351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:42:ec:ed:e5:cc:6d:54:15:d6:c9:a9:96:d0: 25:0c:0c:cd:ed:8c:53:09:fa:10:d0:b3:cd:a3:e0: 75:30:19:c1:a9:dc:f3:a7:bd:cf:80:6c:0a:bf:9f: 2f:68:84:0f:66:d7:e1:0a:e2:a1:e2:87:3a:ab:2f: d1:7c:3c:62:f5:cf:4e:d7:7f:82:c2:90:f3:28:0f: dc:95:03:b6:03:a1:29:ac:55:0d:72:8b:68:bf:3e: ab:8b:3a:d8:be:2d:7b:13:cb:2a:e4:da:27:93:4b: e3:22:b7:0c:64:f0:2e:7c:ed:e5:ed:b4:84:e7:4c: a1:c7:1d:ab:6f:31:7f:ea:64:73:84:06:d5:39:49: ad:af:a5:64:d3:3e:21:55:e9:a8:75:fe:07:b1:f5: 13:89:54:6f:59:41:07:d4:53:eb:29:bb:b4:06:40: e4:b5:35:6d:7c:f6:23:46:59:bd:f2:d8:8a:c9:4f: 16:68:64:8b:55:9c:07:ae:26:b8:fa:5a:1d:a1:3e: 86:83:91:95:53:a9:eb:9a:25:25:39:c3:9f:87:f8: 81:15:e4:1b:6d:72:36:97:b6:c1:be:4d:70:59:f8: 1c:ae:39:3d:4e:99:64:7f:c4:bb:e7:07:8a:4f:a7: 09:5e:bc:cf:66:16:79:c2:f7:2c:cd:f0:81:f8:e5: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:15:4E:54:86:81:A1:F2:82:59:00:53:D1:32:CA:67:FD:84:8A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f340479d-992c-3020-9b89-7b2c0474b6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:97:d9:01:90:c2:45:fe:06:14:b9:b2:63:6b:ed:1c:9c:ae: 67:0f:29:54:41:31:28:b8:c8:93:6d:47:86:ec:64:66:61:cd: 88:6d:3b:11:1d:ad:49:f0:c5:52:f3:08:2b:aa:19:14:c2:b6: 27:03:67:9c:6b:8b:99:c7:51:4c:cc:20:16:5a:eb:56:8d:b4: 7e:eb:79:71:61:52:87:96:db:3f:09:1f:90:b2:a8:ee:4d:c0: c0:8f:3a:ac:29:4d:d1:33:ea:71:ac:ab:60:9f:67:73:c2:e8: ec:da:91:a9:49:0b:7b:96:fd:e1:4b:49:45:78:06:34:97:3a: 42:e1:46:8b:d7:b5:60:48:a5:cd:14:50:29:7c:b9:d7:0a:57: 75:d0:f1:54:fd:dc:f6:d7:02:c5:69:c2:14:e9:27:2d:1e:fa: 99:a6:71:8e:0c:39:a9:d4:18:d2:a6:6c:ce:c9:e5:53:27:95: 08:56:bc:11:4d:21:05:1b:29:f4:d1:0a:de:e5:29:47:53:6b: 10:a2:06:57:1b:54:fd:26:fa:64:d0:b3:55:d4:d7:9e:60:4f: 04:c6:fa:d7:72:2a:81:eb:20:82:ad:ca:89:7c:3c:c5:c2:9f: 60:66:fe:3b:48:40:b4:18:99:59:a8:19:81:80:96:f1:d4:07: ff:32:1f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuuqMY1PL50LthAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjYxNDljMzYtYzUyYy00N2RmLWFiMGItZTVmMmU3MTQ2MzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0Ls7eXMbVQV1smpltAlDAzN7YxTCfoQ0LPN o+B1MBnBqdzzp73PgGwKv58vaIQPZtfhCuKh4oc6qy/RfDxi9c9O13+CwpDzKA/c lQO2A6EprFUNcotovz6rizrYvi17E8sq5Nonk0vjIrcMZPAufO3l7bSE50yhxx2r bzF/6mRzhAbVOUmtr6Vk0z4hVemodf4HsfUTiVRvWUEH1FPrKbu0BkDktTVtfPYj Rlm98tiKyU8WaGSLVZwHria4+lodoT6Gg5GVU6nrmiUlOcOfh/iBFeQbbXI2l7bB vk1wWfgcrjk9Tplkf8S75weKT6cJXrzPZhZ5wvcszfCB+OUpTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkVTlSGgaHyglkAU9Eyymf9hIrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjM0MDQ3OWQtOTkyYy0z MDIwLTliODktN2IyYzA0NzRiNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaX2QGQwkX+BhS5smNr7RycrmcPKVRBMSi4yJNtR4bsZGZhzYhtOxEd rUnwxVLzCCuqGRTCticDZ5xri5nHUUzMIBZa61aNtH7reXFhUoeW2z8JH5CyqO5N wMCPOqwpTdEz6nGsq2CfZ3PC6OzakalJC3uW/eFLSUV4BjSXOkLhRovXtWBIpc0U UCl8udcKV3XQ8VT93PbXAsVpwhTpJy0e+pmmcY4MOanUGNKmbM7J5VMnlQhWvBFN IQUbKfTRCt7lKUdTaxCiBlcbVP0m+mTQs1XU155gTwTG+tdyKoHrIIKtyol8PMXC n2Bm/jtIQLQYmVmoGYGAlvHUB/8yH3w= -----END CERTIFICATE-----Generated at Sun Nov 15 17:42:13 2026 by rpki-client