$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa File: 23e558ef-b1ed-349b-bb7c-72c343e78b57.roa (raw, json) Hash identifier: NlS2q/JhQ2kNZ7QcQbKiCc0jeqvJhXGLtLkjFiIxMB8= Subject key identifier: C5:3D:C3:68:5F:23:2C:56:5D:A7:41:6E:F0:15:B8:8B:55:EF:47:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497CD8899B0D875A983DF740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:d8:89:9b:0d:87:5a:98:3d:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=39971d9d-f291-4bd4-b44f-ab96aed2391e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:bb:82:54:9e:d6:4b:9a:48:a2:3d:5e:50: 44:fb:f6:f5:a8:9a:71:ba:94:f5:d2:e3:4f:54:63: d5:47:2e:9e:18:52:fa:0c:26:37:68:a9:92:3f:b9: d7:72:aa:6e:cc:f7:f0:61:d1:60:98:9d:b8:fc:72: ef:2c:ba:03:0c:d6:19:a2:fb:96:b1:18:eb:ca:6b: 9b:b6:84:e3:b5:fa:34:85:9c:6f:12:cb:50:47:e1: af:65:98:8a:b8:4d:01:56:34:33:5d:00:6d:a3:b0: 5f:29:7c:a0:1d:0f:8d:6f:24:bb:20:56:64:3a:b2: 82:b2:57:42:22:3f:09:a8:20:f4:11:6d:e2:70:be: 08:60:70:9c:6f:f5:f3:ec:40:6a:76:dc:f6:f6:a7: b2:c0:49:51:8f:cb:85:0e:50:81:cc:2b:39:01:2a: b1:35:f0:00:df:ea:7d:74:ad:75:cb:36:c7:2f:99: d2:84:b4:88:6f:86:77:fa:17:f0:89:13:0b:08:51: 0c:a7:eb:27:68:32:27:75:51:01:f2:2f:c8:0b:e0: 30:57:19:df:ea:56:ff:20:6d:99:68:3a:de:4e:1b: 1b:a4:9b:9e:d9:d8:5c:45:86:d9:df:20:9a:b4:98: 73:1e:7c:8f:26:97:78:9f:bc:9f:29:45:f4:31:df: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3D:C3:68:5F:23:2C:56:5D:A7:41:6E:F0:15:B8:8B:55:EF:47:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:53:47:a8:74:00:7d:a9:f7:d2:c3:f3:24:7c:98:f8:89:42: 34:8d:79:35:5c:ca:ed:e8:fb:7d:a9:2d:77:5c:15:aa:8b:af: 87:a9:07:57:60:41:df:78:7a:53:54:67:94:86:6e:0d:41:e0: 15:ab:00:69:05:34:14:e4:5f:39:4a:86:1a:fc:df:e0:54:a1: ed:06:7c:ae:6c:35:34:67:2f:3f:43:87:49:71:0f:e0:9a:d0: a4:5e:e8:65:16:79:ed:85:16:1d:b3:14:d1:63:8b:fd:74:98: b0:d9:6f:43:5b:c9:bb:db:e6:a6:b7:86:62:94:e3:41:99:ec: 12:aa:4d:38:0a:3e:51:3e:62:c4:db:d6:fc:0d:2d:56:11:0a: 54:3a:e1:7a:4e:f4:1c:8c:37:01:a2:0b:6e:6c:c4:f9:48:2a: b9:fc:af:2f:d1:69:45:2b:60:0a:57:c7:0f:53:a3:65:5d:ff: 81:ee:79:82:d4:4f:d5:0b:c8:34:79:6d:b5:01:0b:36:75:2d: 10:67:77:fe:69:b8:4c:bc:39:89:7c:79:66:cc:a2:24:3c:c3: 2e:e4:b4:32:2f:ea:56:b6:75:5f:3d:39:e3:e0:d3:a3:7a:9b: d2:3d:3e:37:9e:4d:b2:e1:02:c6:31:94:ca:c0:78:62:70:54: 19:d9:8f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfNiJmw2HWpg990AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzk5NzFkOWQtZjI5MS00YmQ0LWI0NGYtYWI5NmFlZDIzOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBS7glSe1kuaSKI9XlBE+/b1qJpxupT10uNP VGPVRy6eGFL6DCY3aKmSP7nXcqpuzPfwYdFgmJ24/HLvLLoDDNYZovuWsRjrymub toTjtfo0hZxvEstQR+GvZZiKuE0BVjQzXQBto7BfKXygHQ+NbyS7IFZkOrKCsldC Ij8JqCD0EW3icL4IYHCcb/Xz7EBqdtz29qeywElRj8uFDlCBzCs5ASqxNfAA3+p9 dK11yzbHL5nShLSIb4Z3+hfwiRMLCFEMp+snaDIndVEB8i/IC+AwVxnf6lb/IG2Z aDreThsbpJue2dhcRYbZ3yCatJhzHnyPJpd4n7yfKUX0Md9jnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU9w2hfIyxWXadBbvAVuItV70eQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjNlNTU4ZWYtYjFlZC0z NDliLWJiN2MtNzJjMzQzZTc4YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZTR6h0AH2p99LD8yR8mPiJQjSNeTVcyu3o+32pLXdcFaqLr4epB1dg Qd94elNUZ5SGbg1B4BWrAGkFNBTkXzlKhhr83+BUoe0GfK5sNTRnLz9Dh0lxD+Ca 0KRe6GUWee2FFh2zFNFji/10mLDZb0Nbybvb5qa3hmKU40GZ7BKqTTgKPlE+YsTb 1vwNLVYRClQ64XpO9ByMNwGiC25sxPlIKrn8ry/RaUUrYApXxw9To2Vd/4HueYLU T9ULyDR5bbUBCzZ1LRBnd/5puEy8OYl8eWbMoiQ8wy7ktDIv6la2dV89OePg06N6 m9I9PjeeTbLhAsYxlMrAeGJwVBnZj9s= -----END CERTIFICATE-----Generated at Fri Sep 25 12:57:24 2026 by rpki-client