$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a7d18bc-d0c0-3849-9f70-dfd593fadd0d.roa File: 1a7d18bc-d0c0-3849-9f70-dfd593fadd0d.roa (raw, json) Hash identifier: ynpVAxXk+lF4gpWqvFvvUX2AqE45ISNOJQSmEXQTixc= Subject key identifier: B0:39:48:13:FF:22:53:83:AE:EE:BD:A6:F0:C8:66:50:A5:48:3B:42 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F498500F67EA1051682A88360 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a7d18bc-d0c0-3849-9f70-dfd593fadd0d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:00:f6:7e:a1:05:16:82:a8:83:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3317752c-0fa7-4e22-8320-74dca29da355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5f:b2:e4:97:55:d3:dc:a0:b3:12:c8:fc:b6: b1:c7:37:7a:22:bc:92:09:bd:1a:b4:65:c4:00:b3: 94:03:d3:3f:80:64:90:ea:02:89:26:98:96:1d:d4: 05:ef:64:2b:24:8e:bc:1a:0d:b3:60:9c:20:ae:9c: ac:4c:46:52:4b:99:bc:79:e6:43:65:7c:29:53:76: e1:6a:8a:7c:b5:bb:26:33:5d:43:dc:ae:7e:b6:62: d6:3b:37:57:5f:60:3e:d6:67:22:66:38:b1:0e:87: d2:9a:77:fb:24:4a:90:ff:4e:51:3d:f2:0b:81:f1: cd:a2:58:be:30:4e:2e:85:6c:21:e7:be:f9:0f:2a: 55:39:78:65:db:43:96:82:54:a4:4e:d8:c5:46:28: 7c:7c:97:9e:b8:85:bc:39:0c:53:2a:43:3b:0e:38: b7:58:4d:56:2f:65:08:db:4a:44:25:ea:34:b3:4c: d3:54:e0:d9:29:63:dc:80:93:23:a6:78:4e:d4:13: bb:f0:7f:f9:d3:b8:30:9c:ab:ea:ac:eb:2e:32:33: f3:c2:7d:8e:8d:26:26:3e:82:0a:62:7a:a9:db:a2: 9e:c8:33:20:d0:61:e0:93:0d:dd:5f:5b:b2:86:58: 26:b9:79:0c:09:27:82:5d:a1:eb:37:a8:7b:76:62: d0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:39:48:13:FF:22:53:83:AE:EE:BD:A6:F0:C8:66:50:A5:48:3B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1a7d18bc-d0c0-3849-9f70-dfd593fadd0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:c2:6e:fd:85:a8:83:ce:42:31:81:09:30:ae:1c:08:e4:ad: 1a:c2:5b:3a:67:7a:03:05:54:b9:f7:c3:8e:f4:f2:c5:db:c5: bb:16:b3:67:3f:d7:90:f6:85:62:1e:e3:99:8b:ac:43:a0:f8: ff:84:d5:77:19:dc:22:7a:a7:23:78:e6:f6:0e:3f:fd:e6:39: 1b:13:13:ae:cd:47:5c:fd:5c:e6:ee:ac:f6:7d:ff:d4:b1:5e: 61:a6:2b:34:f5:c7:3d:2d:c9:8f:a0:f5:c9:84:69:78:cc:30: a4:69:41:8c:39:b6:64:e8:ed:3c:c0:bc:70:38:20:44:76:9d: 1a:ff:a3:de:6e:7a:9b:0b:e7:c7:17:2c:74:a2:52:90:ca:53: 2d:36:ce:00:bd:5a:33:5d:6c:e5:68:61:0a:b1:8a:d9:38:06: 42:fa:0c:8c:23:9f:8f:2b:10:88:b3:6c:e5:61:82:97:4b:af: e0:d0:93:e3:75:41:ee:90:89:1d:aa:52:b2:9a:c9:0e:0a:a8: 78:93:bc:aa:24:a2:12:d6:4b:1b:e0:2a:dd:56:ef:61:86:57: 9b:ee:9d:de:18:d0:fd:55:40:e4:6e:05:28:2d:3c:c1:d4:63: 90:d8:99:30:74:a1:c1:49:e6:86:ed:72:02:65:77:ca:cc:cb: a3:35:0c:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhQD2fqEFFoKog2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzMxNzc1MmMtMGZhNy00ZTIyLTgzMjAtNzRkY2EyOWRhMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF+y5JdV09ygsxLI/Laxxzd6IrySCb0atGXE ALOUA9M/gGSQ6gKJJpiWHdQF72QrJI68Gg2zYJwgrpysTEZSS5m8eeZDZXwpU3bh aop8tbsmM11D3K5+tmLWOzdXX2A+1mciZjixDofSmnf7JEqQ/05RPfILgfHNoli+ ME4uhWwh5775DypVOXhl20OWglSkTtjFRih8fJeeuIW8OQxTKkM7Dji3WE1WL2UI 20pEJeo0s0zTVODZKWPcgJMjpnhO1BO78H/507gwnKvqrOsuMjPzwn2OjSYmPoIK Ynqp26KeyDMg0GHgkw3dX1uyhlgmuXkMCSeCXaHrN6h7dmLQewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA5SBP/IlODru69pvDIZlClSDtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWE3ZDE4YmMtZDBjMC0z ODQ5LTlmNzAtZGZkNTkzZmFkZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvueMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrCbv2FqIPOQjGBCTCuHAjkrRrCWzpnegMFVLn3w4708sXbxbsWs2c/ 15D2hWIe45mLrEOg+P+E1XcZ3CJ6pyN45vYOP/3mORsTE67NR1z9XOburPZ9/9Sx XmGmKzT1xz0tyY+g9cmEaXjMMKRpQYw5tmTo7TzAvHA4IER2nRr/o95uepsL58cX LHSiUpDKUy02zgC9WjNdbOVoYQqxitk4BkL6DIwjn48rEIizbOVhgpdLr+DQk+N1 Qe6QiR2qUrKayQ4KqHiTvKokohLWSxvgKt1W72GGV5vund4Y0P1VQORuBSgtPMHU Y5DYmTB0ocFJ5obtcgJld8rMy6M1DEU= -----END CERTIFICATE-----Generated at Fri Sep 25 16:25:50 2026 by rpki-client