$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa File: 0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa (raw, json) Hash identifier: upYs/jkYas0zWzbsNEbLFskoOq8RU3W57yVcKJ0omy8= Subject key identifier: 71:2D:8F:25:9E:72:77:BC:8E:96:5C:1E:75:94:A1:B2:42:AC:EB:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0003A33CEB40E81BB20280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:03:a3:3c:eb:40:e8:1b:b2:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=c674b3d3-ef3c-45c8-ab81-35fa08af3509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:63:75:fb:19:5e:8b:a0:60:e7:16:7c:d8:eb: 04:76:2f:ce:94:f6:c8:a8:26:9e:03:b1:48:4a:47: bd:69:c2:88:8a:73:bd:50:a1:2b:7a:2d:2d:34:9b: 7b:d6:4e:89:01:2a:d4:85:42:58:c7:45:4c:f7:3a: df:e6:83:7d:ed:c3:3a:11:49:ff:c4:3f:68:ac:fe: 18:aa:fe:73:a4:eb:4e:7f:73:1c:46:d5:d4:cb:e1: f0:f6:37:dd:ad:3f:15:d6:66:b1:a4:c4:f7:87:a8: 0d:f3:a0:90:69:ad:86:e6:bf:1d:7a:96:21:22:cd: 81:a6:19:70:e7:d9:b9:84:a8:6f:7d:c8:d3:27:e8: 76:fe:d8:27:f0:32:79:30:bc:a0:b7:23:35:a3:bf: 34:fe:3b:c1:3e:3e:5b:99:06:e0:fd:2d:4d:c4:8a: 26:bb:ea:bd:d8:b4:2a:91:ca:1f:6a:ea:ef:06:f4: e8:56:09:b9:55:84:ad:eb:b6:ab:e6:68:2f:60:ee: 72:17:44:95:d2:f9:dc:40:e7:8d:f9:c6:3a:79:bd: bd:72:e0:dd:55:ca:8b:6e:06:fc:74:19:94:15:6c: 32:62:bd:4c:6c:11:d9:38:de:06:11:d4:06:96:5f: 7a:4f:d6:04:65:7c:d5:21:03:09:3e:8e:30:7a:94: 6c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2D:8F:25:9E:72:77:BC:8E:96:5C:1E:75:94:A1:B2:42:AC:EB:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0eb85a70-ef40-39e4-8ec5-6951d6c2ee0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2f:9b:2d:37:02:63:ad:b6:fb:16:6e:ce:04:98:bc:d1:cc: 8f:6d:41:c8:da:af:8c:59:2d:09:e7:4a:57:a3:1c:36:0b:5a: f7:4d:04:ff:eb:1e:b7:8b:07:08:76:e6:eb:12:41:27:ee:cd: be:82:97:4b:fa:03:a1:08:25:23:69:93:91:8e:4c:07:8d:5b: 1e:43:61:27:11:fc:55:3e:f2:5d:1f:d6:5a:ea:4d:1d:2e:f2: a6:85:d7:d3:bf:4e:d5:e8:d7:87:71:9b:bd:86:0b:f6:c3:31: 48:a1:7a:ed:90:fd:24:42:f3:c9:69:4f:4c:c5:85:6e:09:44: 82:a7:eb:52:64:52:bc:2e:69:37:83:a6:c4:8b:3c:c0:ca:10: 49:f4:aa:69:44:f0:75:e6:31:14:ed:7b:fb:2b:89:f9:bf:c6: 19:ee:9c:bb:db:6a:b4:ad:8b:5a:84:ba:d3:bc:95:92:84:bd: d8:fc:e9:dc:b3:9e:a9:ec:68:8c:e1:87:a8:57:5f:0c:30:a2: 13:12:23:43:9d:08:13:a5:8f:24:59:17:62:f2:ba:8a:c1:f1: ea:d8:ac:64:8c:c0:8f:e7:bc:35:10:8d:bc:49:25:db:1b:b9: 68:42:36:c8:1b:9e:da:0a:ee:23:9a:33:b4:29:60:07:70:51: 27:6f:af:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAOjPOtA6BuyAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YzY3NGIzZDMtZWYzYy00NWM4LWFiODEtMzVmYTA4YWYzNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2N1+xlei6Bg5xZ82OsEdi/OlPbIqCaeA7FI Ske9acKIinO9UKErei0tNJt71k6JASrUhUJYx0VM9zrf5oN97cM6EUn/xD9orP4Y qv5zpOtOf3McRtXUy+Hw9jfdrT8V1maxpMT3h6gN86CQaa2G5r8depYhIs2Bphlw 59m5hKhvfcjTJ+h2/tgn8DJ5MLygtyM1o780/jvBPj5bmQbg/S1NxIomu+q92LQq kcofaurvBvToVgm5VYSt67ar5mgvYO5yF0SV0vncQOeN+cY6eb29cuDdVcqLbgb8 dBmUFWwyYr1MbBHZON4GEdQGll96T9YEZXzVIQMJPo4wepRs8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEtjyWecne8jpZcHnWUobJCrOtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGViODVhNzAtZWY0MC0z OWU0LThlYzUtNjk1MWQ2YzJlZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIvmy03AmOttvsWbs4EmLzRzI9tQcjar4xZLQnnSlejHDYLWvdNBP/r HreLBwh25usSQSfuzb6Cl0v6A6EIJSNpk5GOTAeNWx5DYScR/FU+8l0f1lrqTR0u 8qaF19O/TtXo14dxm72GC/bDMUiheu2Q/SRC88lpT0zFhW4JRIKn61JkUrwuaTeD psSLPMDKEEn0qmlE8HXmMRTte/srifm/xhnunLvbarSti1qEutO8lZKEvdj86dyz nqnsaIzhh6hXXwwwohMSI0OdCBOljyRZF2LyuorB8erYrGSMwI/nvDUQjbxJJdsb uWhCNsgbntoK7iOaM7QpYAdwUSdvr54= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:05 2026 by rpki-client