$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28c7c8ca-d7bc-3903-a998-fd73afa3060b.roa File: 28c7c8ca-d7bc-3903-a998-fd73afa3060b.roa (raw, json) Hash identifier: vxCyq2oaIl1XxEZBXfXgxf+HhmXEqDN0c52Dfgovu1g= Subject key identifier: 1B:A2:E1:99:49:83:DF:BB:6B:BF:D2:0B:79:B2:32:60:24:7E:FA:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4985400F7BB53D0A4DEC7180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28c7c8ca-d7bc-3903-a998-fd73afa3060b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:40:0f:7b:b5:3d:0a:4d:ec:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2cc4f684-0bd4-48cd-883d-71b30cd9e6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:3d:0d:64:97:cd:b2:1a:63:76:42:00:8e: 4d:50:66:08:63:b2:a6:ce:54:a0:e7:6e:77:5e:9a: 1d:4a:79:5d:f7:3a:5c:2f:68:e5:89:25:60:e1:e1: f4:6c:32:ac:2b:b2:a4:e1:31:d5:ec:62:d5:b7:6d: 48:da:5e:68:11:4a:89:86:94:fc:ae:27:bc:4b:ed: 91:1b:f8:c4:37:c9:e0:cd:f4:6b:c5:a0:dd:10:4c: 3a:ef:28:3f:a7:e3:b6:59:7b:fd:3d:8a:a4:42:50: 61:d9:02:ea:63:65:10:45:d1:53:09:22:9e:96:bb: cc:e6:01:88:77:2a:c4:4a:44:e1:77:f2:16:ce:df: 6c:77:ba:10:0f:3f:b8:ea:2c:72:3a:fc:3b:90:c6: ca:48:45:1a:cd:3e:27:88:79:84:e4:82:e2:85:d0: ce:bd:8e:25:3d:0d:fa:37:46:ac:14:f8:5a:e0:8d: 34:d4:d6:f4:36:2f:87:28:1e:2d:90:b4:6a:a3:68: 21:fe:e3:ab:60:4a:49:47:ba:b7:65:5f:c2:73:df: 38:b2:ba:b8:c1:9d:d6:ac:84:e1:16:5c:87:7e:22: 44:38:e4:af:bd:da:5f:cb:af:60:d5:17:0c:4a:8f: 4c:61:69:d1:1d:c0:0b:5d:b7:6e:c4:27:07:aa:92: 37:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A2:E1:99:49:83:DF:BB:6B:BF:D2:0B:79:B2:32:60:24:7E:FA:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28c7c8ca-d7bc-3903-a998-fd73afa3060b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:34:ea:b0:7e:4c:33:2b:8e:7e:39:12:15:80:17:87:a0:30: 23:71:26:f8:e2:79:3d:08:a5:92:6a:1a:10:91:17:99:22:e9: f1:36:ab:bd:ac:0d:c4:17:b3:35:ae:a0:b3:bd:42:bc:da:bf: ff:1b:74:a3:c0:74:6a:70:a9:e3:54:82:57:cd:8e:9f:85:04: 92:19:c1:84:ce:8c:3a:ad:54:4d:24:d1:20:65:00:10:0b:19: fa:99:af:b4:01:42:21:de:cf:5f:7a:a9:d0:7e:0a:07:34:0c: e2:da:d6:d5:c0:f4:de:fa:b1:ae:93:7b:65:f8:78:ce:41:6f: df:87:38:10:60:83:44:75:2c:48:58:a4:47:83:ac:98:15:41: 16:37:d2:5a:33:1d:63:5f:c1:c1:71:9b:24:fa:06:99:ad:2c: 0e:95:87:43:9c:35:47:74:2b:74:01:80:69:5a:42:1f:83:0a: ef:fd:7b:53:8c:e4:3a:cb:ce:91:29:92:69:8e:89:19:a3:9f: ab:c7:7b:d9:45:3f:7b:1f:0a:82:55:30:88:b1:ea:74:e8:f1: 47:95:e1:af:2d:ea:e3:b8:86:7b:96:da:6d:f3:a0:8b:e0:a2: f0:17:33:67:32:05:6f:13:5c:5f:5e:97:7a:4c:56:82:3e:a8: 79:e0:b6:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhUAPe7U9Ck3scYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmNjNGY2ODQtMGJkNC00OGNkLTg4M2QtNzFiMzBjZDllNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfY9DWSXzbIaY3ZCAI5NUGYIY7KmzlSg5253 XpodSnld9zpcL2jliSVg4eH0bDKsK7Kk4THV7GLVt21I2l5oEUqJhpT8rie8S+2R G/jEN8ngzfRrxaDdEEw67yg/p+O2WXv9PYqkQlBh2QLqY2UQRdFTCSKelrvM5gGI dyrESkThd/IWzt9sd7oQDz+46ixyOvw7kMbKSEUazT4niHmE5ILihdDOvY4lPQ36 N0asFPha4I001Nb0Ni+HKB4tkLRqo2gh/uOrYEpJR7q3ZV/Cc984srq4wZ3WrITh FlyHfiJEOOSvvdpfy69g1RcMSo9MYWnRHcALXbduxCcHqpI3HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBui4ZlJg9+7a7/SC3myMmAkfvqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjhjN2M4Y2EtZDdiYy0z OTAzLWE5OTgtZmQ3M2FmYTMwNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvunMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM06rB+TDMrjn45EhWAF4egMCNxJvjieT0IpZJqGhCRF5ki6fE2q72s DcQXszWuoLO9Qrzav/8bdKPAdGpwqeNUglfNjp+FBJIZwYTOjDqtVE0k0SBlABAL GfqZr7QBQiHez196qdB+Cgc0DOLa1tXA9N76sa6Te2X4eM5Bb9+HOBBgg0R1LEhY pEeDrJgVQRY30lozHWNfwcFxmyT6BpmtLA6Vh0OcNUd0K3QBgGlaQh+DCu/9e1OM 5DrLzpEpkmmOiRmjn6vHe9lFP3sfCoJVMIix6nTo8UeV4a8t6uO4hnuW2m3zoIvg ovAXM2cyBW8TXF9el3pMVoI+qHngttU= -----END CERTIFICATE-----Generated at Fri Sep 25 19:52:19 2026 by rpki-client