$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa File: 574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa (raw, json) Hash identifier: 4dyXUplh+8IP97lLwYkRlmymzLfaU5DVQurbE28an9E= Subject key identifier: AF:58:DB:43:03:78:E0:30:FF:1B:06:21:A6:CC:70:E9:23:AE:F0:D2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F46A7EDFA58E1B60045F84800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 142.251.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:ed:fa:58:e1:b6:00:45:f8:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=5b4eb1aa-ad3a-4a3d-8318-630d1cb84621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bc:71:83:0a:a2:63:49:5d:97:bd:14:ee:92: d7:fc:4c:0f:c3:a8:ee:ae:07:d6:53:1a:7b:99:7b: 53:d8:12:83:7d:74:45:53:7a:86:bd:eb:89:c0:c2: fe:05:83:4f:b7:65:95:8f:29:f9:7d:7f:22:57:a3: 8d:57:f1:b3:6b:5f:71:99:37:3d:79:3c:c8:04:d4: ee:eb:57:24:f5:ed:18:5f:cd:20:91:15:0f:39:92: e5:1e:be:ff:9f:83:af:65:5d:92:69:3a:67:40:20: d4:5c:6f:8a:47:60:36:86:eb:a7:f4:ac:4e:0e:a4: 3b:7a:53:37:e6:4c:68:ce:56:9f:29:90:75:bb:ec: 06:2b:c3:61:78:a0:71:a0:6c:65:c7:63:7e:a0:25: 1f:28:97:79:ce:59:78:05:d1:8d:e8:9d:4e:11:fc: 53:ec:4f:fa:30:8a:4f:9c:f8:d9:12:8e:1a:a3:db: d5:72:8f:24:d4:ab:e4:0b:36:b5:84:55:57:63:5c: e3:8a:d4:e8:a7:23:1c:25:d4:af:62:80:75:7b:f5: d5:06:a8:6e:70:f8:bf:a3:3e:c8:ce:73:ac:26:a9: 8b:0a:56:24:ac:89:b6:93:78:e9:89:6c:65:31:2e: 61:d2:66:f6:00:0f:6e:cd:d1:a5:1f:41:a5:61:ce: 07:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:58:DB:43:03:78:E0:30:FF:1B:06:21:A6:CC:70:E9:23:AE:F0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:5b:45:4f:14:92:56:81:c8:1c:5e:7f:29:4a:1c:23:39:4d: 66:72:4b:c5:66:76:7e:7c:c6:7f:2d:5a:02:1b:87:08:5e:4d: 09:85:a3:cb:e6:57:e5:80:ba:ea:33:98:22:d3:33:51:ec:16: 75:ab:a5:0d:a9:80:95:71:e9:5d:20:98:11:12:e0:b5:b2:ae: 1f:29:53:9c:0d:da:b3:c0:26:58:2a:02:e3:51:62:43:72:8f: 5b:29:96:f9:3d:3c:56:f1:bd:ee:aa:c8:41:f4:f3:73:6d:2d: c2:95:8b:2d:63:cd:b3:c5:2e:77:76:e7:c9:94:99:05:47:f5: 36:71:60:50:3f:c2:1b:8a:bc:ed:ae:c9:eb:2e:74:a3:3d:3c: 76:5c:1e:d5:db:90:28:74:ce:d5:59:8f:d4:43:23:44:82:b4: 5f:47:32:a3:5c:d6:ef:c7:80:97:15:16:af:86:8c:fb:3f:a3: 87:fc:a0:e1:58:d4:cf:16:7d:10:99:d6:01:34:49:34:06:55: cf:83:c8:a0:72:84:8d:b1:7f:53:c8:fe:7a:75:d1:7f:78:c9: fb:d1:b9:cd:ac:e8:a7:f2:69:03:cf:10:4d:bd:7b:dc:60:7c: 75:65:90:28:d3:10:f4:84:23:3a:05:59:a8:e9:f8:97:37:1b: 94:02:76:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+36WOG2AEX4SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NWI0ZWIxYWEtYWQzYS00YTNkLTgzMTgtNjMwZDFjYjg0NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLxxgwqiY0ldl70U7pLX/EwPw6jurgfWUxp7 mXtT2BKDfXRFU3qGveuJwML+BYNPt2WVjyn5fX8iV6ONV/Gza19xmTc9eTzIBNTu 61ck9e0YX80gkRUPOZLlHr7/n4OvZV2SaTpnQCDUXG+KR2A2huun9KxODqQ7elM3 5kxozlafKZB1u+wGK8NheKBxoGxlx2N+oCUfKJd5zll4BdGN6J1OEfxT7E/6MIpP nPjZEo4ao9vVco8k1KvkCza1hFVXY1zjitTopyMcJdSvYoB1e/XVBqhucPi/oz7I znOsJqmLClYkrIm2k3jpiWxlMS5h0mb2AA9uzdGlH0GlYc4HYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9Y20MDeOAw/xsGIabMcOkjrvDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTc0ZDQyYjgtNmJhNi0z ZDI4LThiZmEtM2IxOGE4ZTkxMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvu/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFbRU8UklaByBxefylKHCM5TWZyS8Vmdn58xn8tWgIbhwheTQmFo8vm V+WAuuozmCLTM1HsFnWrpQ2pgJVx6V0gmBES4LWyrh8pU5wN2rPAJlgqAuNRYkNy j1splvk9PFbxve6qyEH083NtLcKViy1jzbPFLnd258mUmQVH9TZxYFA/whuKvO2u yesudKM9PHZcHtXbkCh0ztVZj9RDI0SCtF9HMqNc1u/HgJcVFq+GjPs/o4f8oOFY 1M8WfRCZ1gE0STQGVc+DyKByhI2xf1PI/np10X94yfvRuc2s6KfyaQPPEE29e9xg fHVlkCjTEPSEIzoFWajp+Jc3G5QCdo4= -----END CERTIFICATE-----Generated at Thu Sep 24 20:57:57 2026 by rpki-client