$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa File: 574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa (raw, json) Hash identifier: Q+Dz1cDD5n5GgeWHNG1o18qUVRkx1WMIjajoee94h/M= Subject key identifier: 08:9E:10:04:E7:42:38:B0:44:CB:FE:3B:23:06:E9:94:86:9A:90:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DC4005AFE2F784A8A4B60B400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 15169 IP address blocks: 142.251.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:5a:fe:2f:78:4a:8a:4b:60:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=3de688bb-6919-4162-8209-e8ce7a8e9716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:50:d1:05:f7:6e:26:54:5e:2f:31:a0:4d: aa:1d:0b:dc:7c:05:0f:86:94:14:e3:47:d4:46:32: d6:7f:8e:5d:72:1b:ed:86:cc:b7:dc:19:23:c7:42: ed:db:32:75:16:eb:94:5a:08:1e:b3:73:5b:3c:c5: 08:f2:37:03:0b:f7:ff:ef:84:e6:47:cf:e4:be:07: 45:8b:61:2f:55:d7:4e:99:07:ea:0d:24:c4:ac:cd: 2a:92:ca:6e:1a:a7:56:ac:ec:66:e2:c4:e5:77:53: 5b:0a:9b:50:70:8f:40:6b:be:aa:bd:24:6c:d6:df: 5e:a7:e2:45:a9:df:30:df:d8:fa:25:f8:f5:e6:45: 95:b7:83:92:88:27:08:65:29:a7:2d:5c:0d:3b:a9: 5d:67:eb:55:23:38:66:8e:0f:00:22:18:ec:5c:08: 82:d3:27:3f:0e:5f:0b:40:74:a7:fd:e1:b3:8f:92: 3d:36:60:40:87:24:7a:7f:a9:d8:55:b9:82:a8:e9: 19:40:4d:e3:d2:75:b3:f3:32:c0:80:fa:45:1b:fe: 11:5a:80:58:d3:15:12:1f:41:e1:63:01:e5:bd:33: 53:c5:b4:57:ff:3f:00:59:e8:09:45:a2:a7:46:9f: 44:5e:84:dc:3d:2b:6d:b7:9c:c9:02:b0:d5:b6:c2: 91:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9E:10:04:E7:42:38:B0:44:CB:FE:3B:23:06:E9:94:86:9A:90:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:5d:92:59:74:67:bc:73:37:96:65:05:23:4b:a7:0f:9a:8f: 9c:4d:6a:50:2b:e6:3b:3b:5e:38:2f:ea:1e:52:55:f6:2e:54: e1:06:90:a9:da:02:df:03:ef:a9:51:fd:77:11:9f:9f:d3:56: d2:3b:2a:7c:89:54:80:d0:f8:4d:e2:75:6d:3c:0f:47:6d:10: 14:c2:ab:d3:9d:e0:c2:bf:f1:d4:d8:70:53:9a:ed:ab:24:dd: 6d:49:e7:29:3e:6e:a1:59:dc:b7:43:4a:72:f3:82:93:ab:a3: e7:ae:9d:04:52:33:ea:a8:09:90:b8:e6:72:d2:fb:ef:d7:b1: 08:5b:42:0c:7e:e3:0f:f7:b3:6a:fc:d2:74:1b:a3:34:27:93: c2:50:38:bb:6c:e3:a7:76:f9:3a:80:34:17:1a:40:28:08:d5: 9b:c3:3c:b0:59:ae:9a:91:b7:a4:7a:8b:57:c4:db:2b:51:fe: 39:f6:f0:80:3e:c6:6b:a9:59:be:bf:d8:32:b9:54:34:16:98: f0:0c:1d:0a:5e:14:2a:16:40:8e:3e:2b:1b:0a:07:e8:94:3d: 0d:53:fe:87:b6:92:58:3d:c1:c3:9e:07:24:39:4f:02:4b:ff: 4f:48:46:ec:3d:56:09:07:57:2c:ff:cc:4a:45:0c:62:da:63: c3:99:51:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAFr+L3hKiktgtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk M2RlNjg4YmItNjkxOS00MTYyLTgyMDktZThjZTdhOGU5NzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtilQ0QX3biZUXi8xoE2qHQvcfAUPhpQU40fU RjLWf45dchvthsy33Bkjx0Lt2zJ1FuuUWgges3NbPMUI8jcDC/f/74TmR8/kvgdF i2EvVddOmQfqDSTErM0qkspuGqdWrOxm4sTld1NbCptQcI9Aa76qvSRs1t9ep+JF qd8w39j6Jfj15kWVt4OSiCcIZSmnLVwNO6ldZ+tVIzhmjg8AIhjsXAiC0yc/Dl8L QHSn/eGzj5I9NmBAhyR6f6nYVbmCqOkZQE3j0nWz8zLAgPpFG/4RWoBY0xUSH0Hh YwHlvTNTxbRX/z8AWegJRaKnRp9EXoTcPSttt5zJArDVtsKRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAieEATnQjiwRMv+OyMG6ZSGmpDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTc0ZDQyYjgtNmJhNi0z ZDI4LThiZmEtM2IxOGE4ZTkxMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvu/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpdkll0Z7xzN5ZlBSNLpw+aj5xNalAr5js7Xjgv6h5SVfYuVOEGkKna At8D76lR/XcRn5/TVtI7KnyJVIDQ+E3idW08D0dtEBTCq9Od4MK/8dTYcFOa7ask 3W1J5yk+bqFZ3LdDSnLzgpOro+eunQRSM+qoCZC45nLS++/XsQhbQgx+4w/3s2r8 0nQbozQnk8JQOLts46d2+TqANBcaQCgI1ZvDPLBZrpqRt6R6i1fE2ytR/jn28IA+ xmupWb6/2DK5VDQWmPAMHQpeFCoWQI4+KxsKB+iUPQ1T/oe2klg9wcOeByQ5TwJL /09IRuw9VgkHVyz/zEpFDGLaY8OZUVc= -----END CERTIFICATE-----Generated at Wed May 13 04:08:25 2026 by rpki-client