$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa File: 34c28d43-5060-326b-b054-88ca80c8af57.roa (raw, json) Hash identifier: 1QA3uSUOu3bt99ahe+0QJ2iX3JBdqG/cXP82L/AnsNc= Subject key identifier: 8D:90:A2:3C:24:9D:BF:6B:4D:2E:B1:DD:CE:6A:37:7B:E6:30:CF:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292ECD7A4DB2AB5DBDA7480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.251.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ec:d7:a4:db:2a:b5:db:da:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e9e2dca0-2d6f-4706-8a8a-2d5e818267d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:dc:4d:49:4e:aa:3b:29:2b:13:df:d1:ac: ce:3c:dd:9c:30:83:64:58:29:40:81:3a:1c:d1:5e: 45:ea:5f:95:f1:fb:c0:8e:23:ec:78:ab:52:06:73: 36:42:fc:22:9b:f4:cb:9b:fa:0a:f5:f6:40:e0:bf: 28:a8:2b:23:91:b3:cc:d3:5e:92:34:58:50:f9:da: 4a:22:5f:2b:9e:6e:07:3d:09:bf:9c:e2:e7:52:98: 7d:b4:f3:ec:a8:6b:57:24:07:2e:f1:a3:46:d0:51: e3:73:55:3f:1f:f1:50:99:e4:56:55:01:ee:98:12: 69:1f:22:bd:bd:ee:44:48:15:de:c0:72:d4:a9:ed: 24:72:42:96:f6:da:2c:48:1f:78:bb:ce:5c:cc:51: 83:fe:7b:d4:c0:c7:08:aa:a7:8b:b1:aa:f8:12:2d: d6:6b:74:6e:8b:e6:22:d3:44:50:2d:3d:14:6a:26: a0:e2:2e:de:68:91:71:f0:9f:07:af:1e:c6:c4:74: 26:02:e9:7d:d3:6e:d2:2c:97:ce:0a:ff:18:28:62: 1c:40:7b:2a:3d:a6:d0:e6:0e:f8:f0:dc:ef:00:f9: f5:1e:60:d2:da:bc:bd:9f:52:30:22:9d:cd:9b:1d: 2d:33:6c:9a:e6:f8:9d:95:a0:62:35:88:e2:6b:d8: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:90:A2:3C:24:9D:BF:6B:4D:2E:B1:DD:CE:6A:37:7B:E6:30:CF:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2f:8c:4e:3b:2b:d2:01:bb:95:6d:04:28:e9:34:e5:57:61: 51:5d:04:52:b0:54:40:13:85:ef:a1:b1:5d:ef:0d:7c:5f:ac: 99:ee:e0:19:a3:4b:ba:b0:9f:31:c2:bc:12:ad:5c:f2:eb:31: 39:b2:ef:ff:54:c3:17:4b:8f:d5:82:52:41:60:fb:f3:f4:e9: 91:66:44:bc:9b:cf:9c:1d:72:ac:ca:61:a0:71:e3:c8:96:a6: 95:e6:08:d7:10:8c:e7:9a:4a:61:e1:1f:3c:7a:36:b1:dd:9a: 02:cf:83:ae:b2:ff:8e:00:1f:fb:a3:74:30:19:8e:70:75:7c: e4:33:45:65:7f:ff:df:c9:a6:de:24:b2:8d:be:ab:93:80:16: f8:b7:11:4a:72:11:68:8e:1c:d9:14:c1:11:52:13:1e:c3:04: 66:e5:cd:3b:0a:a9:4f:a5:7f:12:4e:e7:3f:fb:5c:e0:11:eb: fd:90:d1:58:51:0d:6b:48:71:34:8e:eb:b5:b0:c6:d1:c5:36: 40:50:d8:43:76:52:83:7d:26:04:cf:60:a3:80:5d:cc:16:e9: e3:3c:31:0e:6a:7e:0f:77:d1:9e:78:5b:81:a6:0f:5d:c4:a2: cb:b7:80:80:00:18:d5:92:a8:a4:c9:8c:5c:29:d0:e9:89:f4: 10:cc:84:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuzXpNsqtdvadIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTllMmRjYTAtMmQ2Zi00NzA2LThhOGEtMmQ1ZTgxODI2N2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyojcTUlOqjspKxPf0azOPN2cMINkWClAgToc 0V5F6l+V8fvAjiPseKtSBnM2Qvwim/TLm/oK9fZA4L8oqCsjkbPM016SNFhQ+dpK Il8rnm4HPQm/nOLnUph9tPPsqGtXJAcu8aNG0FHjc1U/H/FQmeRWVQHumBJpHyK9 ve5ESBXewHLUqe0kckKW9tosSB94u85czFGD/nvUwMcIqqeLsar4Ei3Wa3Rui+Yi 00RQLT0Uaiag4i7eaJFx8J8Hrx7GxHQmAul9027SLJfOCv8YKGIcQHsqPabQ5g74 8NzvAPn1HmDS2ry9n1IwIp3Nmx0tM2ya5vidlaBiNYjia9i1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2Qojwknb9rTS6x3c5qN3vmMM+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzRjMjhkNDMtNTA2MC0z MjZiLWIwNTQtODhjYTgwYzhhZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMvjE47K9IBu5VtBCjpNOVXYVFdBFKwVEAThe+hsV3vDXxfrJnu4Bmj S7qwnzHCvBKtXPLrMTmy7/9UwxdLj9WCUkFg+/P06ZFmRLybz5wdcqzKYaBx48iW ppXmCNcQjOeaSmHhHzx6NrHdmgLPg66y/44AH/ujdDAZjnB1fOQzRWV//9/Jpt4k so2+q5OAFvi3EUpyEWiOHNkUwRFSEx7DBGblzTsKqU+lfxJO5z/7XOAR6/2Q0VhR DWtIcTSO67WwxtHFNkBQ2EN2UoN9JgTPYKOAXcwW6eM8MQ5qfg930Z54W4GmD13E osu3gIAAGNWSqKTJjFwp0OmJ9BDMhDo= -----END CERTIFICATE-----Generated at Tue Oct 6 08:24:09 2026 by rpki-client