$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa File: 308f5d06-7ebf-3daf-b45c-37864122c3d4.roa (raw, json) Hash identifier: k9eR8Zt8K0pBZ7TiVieBcyI1n0Fu1XHY+4Ofk39u8us= Subject key identifier: 4A:7B:85:85:CC:C1:E3:CF:4F:20:AC:4C:8C:B9:50:98:97:2F:37:73 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD31C718530D218018680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d3:1c:71:85:30:d2:18:01:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=572900b8-1fda-4899-bdbf-19717d3f5a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:82:be:a2:45:01:50:27:84:3d:4f:e4:d8: 49:d9:9e:7d:5b:72:75:da:10:44:e4:c1:fd:2a:1c: 17:b4:eb:64:15:4f:f8:35:c2:19:d6:7c:dd:80:fb: f0:68:30:a6:a9:13:b8:01:f3:41:78:e8:29:91:bb: a3:3b:2b:fb:75:35:5d:28:b3:b6:77:e6:28:d4:bb: 33:89:a5:6f:b0:49:c5:ad:76:8c:af:fe:de:9d:96: 87:7d:41:8e:ce:4a:f2:82:97:55:8c:4c:91:3a:a3: ce:67:92:ea:d8:7f:20:17:9b:54:e5:31:a0:50:d1: be:58:db:54:35:08:8a:7b:23:aa:8b:9e:fc:0f:21: e6:5f:eb:b5:84:8c:2b:a6:76:21:2f:9d:9c:6d:c4: b1:0c:45:7a:2f:2f:ba:a2:c8:a3:25:75:af:c8:8d: 23:2e:5f:57:9e:0e:db:bb:cb:36:76:aa:b7:f3:5f: ad:7c:aa:1e:f3:e7:d3:09:06:47:c0:45:6b:b2:4b: b6:36:5c:ad:82:8f:c6:b3:b1:e1:c8:4c:80:db:14: 9c:9d:35:7d:b0:b8:71:cc:7e:d5:09:cd:f3:fa:82: ca:f1:1f:e7:cb:7a:a5:e4:f6:b9:3c:a6:10:db:5c: 34:64:6f:a0:d3:2b:0f:d5:1e:1a:b0:a8:ff:90:10: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7B:85:85:CC:C1:E3:CF:4F:20:AC:4C:8C:B9:50:98:97:2F:37:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:39:4a:7e:a5:98:8c:48:f7:11:10:4f:c3:6a:7b:60:71:2d: ca:e9:ed:be:b5:66:29:34:6d:95:84:3f:9a:05:52:07:c2:a8: 6a:34:43:64:a4:25:25:d2:64:e5:db:ed:f6:12:63:17:4c:37: bb:94:19:8c:26:4f:9d:b2:dd:af:02:24:67:bc:cd:1f:b0:32: 61:75:c0:47:40:8f:33:c3:55:4a:e5:72:24:2d:30:14:80:47: e5:b6:31:22:ed:5b:c6:82:9f:53:e5:8f:5d:40:f7:47:7f:a0: 2c:68:ac:06:9b:d3:f3:b8:35:94:6a:81:5b:c1:20:04:86:2a: 20:b3:60:33:ad:43:cf:00:1a:9f:8c:8f:f7:bf:27:e5:4a:e3: 3d:eb:c9:e0:29:53:04:42:79:0a:c6:e7:3b:5f:77:44:ba:b8: 04:24:7e:8b:1e:a7:e2:69:86:29:62:2f:79:68:34:b9:18:11: 80:a2:a0:9a:99:7c:52:0b:cb:ad:e4:23:41:b2:ff:57:6b:12: 6b:5b:61:74:95:10:7d:5e:4f:a5:94:36:83:df:19:b6:a0:7c: 96:59:dc:f0:98:af:8c:14:b5:e1:22:1d:5c:98:bd:21:0b:f8: e8:4f:86:2b:04:bf:92:3c:9a:d2:db:6f:74:c7:48:81:64:28: cc:67:ad:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9MccYUw0hgBhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NTcyOTAwYjgtMWZkYS00ODk5LWJkYmYtMTk3MTdkM2Y1YTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklSCvqJFAVAnhD1P5NhJ2Z59W3J12hBE5MH9 KhwXtOtkFU/4NcIZ1nzdgPvwaDCmqRO4AfNBeOgpkbujOyv7dTVdKLO2d+Yo1Lsz iaVvsEnFrXaMr/7enZaHfUGOzkrygpdVjEyROqPOZ5Lq2H8gF5tU5TGgUNG+WNtU NQiKeyOqi578DyHmX+u1hIwrpnYhL52cbcSxDEV6Ly+6osijJXWvyI0jLl9Xng7b u8s2dqq381+tfKoe8+fTCQZHwEVrsku2Nlytgo/Gs7HhyEyA2xScnTV9sLhxzH7V Cc3z+oLK8R/ny3ql5Pa5PKYQ21w0ZG+g0ysP1R4asKj/kBBo+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp7hYXMwePPTyCsTIy5UJiXLzdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzA4ZjVkMDYtN2ViZi0z ZGFmLWI0NWMtMzc4NjQxMjJjM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM5Sn6lmIxI9xEQT8Nqe2BxLcrp7b61Zik0bZWEP5oFUgfCqGo0Q2Sk JSXSZOXb7fYSYxdMN7uUGYwmT52y3a8CJGe8zR+wMmF1wEdAjzPDVUrlciQtMBSA R+W2MSLtW8aCn1Plj11A90d/oCxorAab0/O4NZRqgVvBIASGKiCzYDOtQ88AGp+M j/e/J+VK4z3ryeApUwRCeQrG5ztfd0S6uAQkfosep+JphiliL3loNLkYEYCioJqZ fFILy63kI0Gy/1drEmtbYXSVEH1eT6WUNoPfGbagfJZZ3PCYr4wUteEiHVyYvSEL +OhPhisEv5I8mtLbb3THSIFkKMxnrXI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:29 2026 by rpki-client