$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa File: 647f9435-6948-34d1-9a8e-d32e6d7948c2.roa (raw, json) Hash identifier: EotPvsGmcHauMVw2KIs2JKIzGuKwrJxHVpmUCo8DL5U= Subject key identifier: 62:62:13:E4:DB:59:5E:E6:F6:F1:3C:05:62:CE:25:51:B1:C9:55:0B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6292EB84D342D81F6438AF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.251.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:eb:84:d3:42:d8:1f:64:38:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=aeb0e3f1-2731-4b04-b2ce-2acf6c806fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:4b:4c:97:91:81:de:81:63:ae:6c:76:73: 60:65:e5:b6:78:d3:b6:9e:07:91:1a:73:7a:0d:bb: 7c:28:55:86:6c:ca:23:f3:59:f5:fd:29:d7:77:96: f7:12:fd:ee:fc:49:3f:27:44:10:b1:66:8c:86:d3: b1:a5:09:22:b1:ef:63:96:85:b1:47:46:12:45:0a: d0:f7:82:96:51:54:a4:fc:c0:39:74:91:97:d4:e1: 90:19:93:67:e4:65:c4:88:be:82:ee:5c:05:0f:1e: 2d:85:e3:98:28:79:17:41:95:47:b8:a0:31:3a:0e: aa:a5:ad:bf:69:fa:8b:5c:1a:0a:77:8a:a3:de:08: 8a:f9:c9:a9:c3:5b:94:72:87:1f:9f:7e:81:1a:63: a9:45:ea:76:75:a8:77:6e:8b:b2:5d:53:79:bc:d2: 93:0e:8b:47:85:dd:f2:32:de:c8:9e:60:6a:b5:11: a2:46:b9:37:f8:bf:67:a5:60:32:70:f1:e5:90:f3: 2a:c6:81:5f:9b:da:ba:75:cf:44:c8:ad:df:44:6c: b8:f4:21:72:22:dc:cb:0f:9e:26:30:02:72:87:3d: fe:17:13:57:e3:61:44:47:5b:f3:09:2b:4a:8a:db: 3b:81:34:81:05:4f:be:58:e9:6c:c5:ab:43:01:56: f5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:62:13:E4:DB:59:5E:E6:F6:F1:3C:05:62:CE:25:51:B1:C9:55:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/647f9435-6948-34d1-9a8e-d32e6d7948c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ff:66:92:cd:1b:a3:6d:2b:d2:93:9a:fd:14:08:4c:a2:d8: ed:6e:fa:a4:74:98:29:df:d2:34:4f:78:e6:b3:ea:74:50:47: 73:cc:60:d7:27:80:f8:fb:59:0a:e3:da:f3:c2:43:64:4d:40: c9:33:00:af:8a:4d:b2:8d:19:92:0f:be:91:05:1b:12:c1:af: 6d:fe:36:93:b0:71:93:1e:31:b9:3a:41:e7:21:df:80:bd:f8: 21:03:c0:2d:24:13:e8:04:62:36:57:11:8a:c2:d6:5a:d7:38: 36:8f:a8:85:97:62:8a:98:0e:bb:04:24:ae:ce:2b:97:c0:75: 80:c0:dd:27:a4:37:5b:80:81:17:fe:12:53:72:be:e9:81:98: 14:7e:8b:3c:08:0c:b6:d7:84:a3:77:14:ee:e7:a3:c5:7f:ce: ee:e2:54:1c:f8:d5:9a:08:8b:e9:5c:7f:a1:ee:ed:4a:d6:ca: 50:5a:af:30:af:13:f7:d9:15:e0:04:12:12:25:ec:50:39:09: ad:a8:ba:1f:d8:d1:85:ec:41:ae:68:15:6f:2f:4b:6d:10:e1: 2e:76:86:97:49:e9:d3:43:5e:11:59:40:c6:08:bf:d4:f0:34: 47:2b:30:6f:cc:1c:21:2d:1d:10:bb:39:b9:2b:7f:6f:d3:0a: ea:1e:0f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuuE00LYH2Q4rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YWViMGUzZjEtMjczMS00YjA0LWIyY2UtMmFjZjZjODA2ZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KhLTJeRgd6BY65sdnNgZeW2eNO2ngeRGnN6 Dbt8KFWGbMoj81n1/SnXd5b3Ev3u/Ek/J0QQsWaMhtOxpQkise9jloWxR0YSRQrQ 94KWUVSk/MA5dJGX1OGQGZNn5GXEiL6C7lwFDx4theOYKHkXQZVHuKAxOg6qpa2/ afqLXBoKd4qj3giK+cmpw1uUcocfn36BGmOpRep2dah3bouyXVN5vNKTDotHhd3y Mt7InmBqtRGiRrk3+L9npWAycPHlkPMqxoFfm9q6dc9EyK3fRGy49CFyItzLD54m MAJyhz3+FxNX42FER1vzCStKits7gTSBBU++WOlsxatDAVb1wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJiE+TbWV7m9vE8BWLOJVGxyVULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjQ3Zjk0MzUtNjk0OC0z NGQxLTlhOGUtZDMyZTZkNzk0OGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKL/ZpLNG6NtK9KTmv0UCEyi2O1u+qR0mCnf0jRPeOaz6nRQR3PMYNcn gPj7WQrj2vPCQ2RNQMkzAK+KTbKNGZIPvpEFGxLBr23+NpOwcZMeMbk6Qech34C9 +CEDwC0kE+gEYjZXEYrC1lrXODaPqIWXYoqYDrsEJK7OK5fAdYDA3SekN1uAgRf+ ElNyvumBmBR+izwIDLbXhKN3FO7no8V/zu7iVBz41ZoIi+lcf6Hu7UrWylBarzCv E/fZFeAEEhIl7FA5Ca2ouh/Y0YXsQa5oFW8vS20Q4S52hpdJ6dNDXhFZQMYIv9Tw NEcrMG/MHCEtHRC7Obkrf2/TCuoeDxs= -----END CERTIFICATE-----Generated at Sun Nov 15 11:13:08 2026 by rpki-client