$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa File: 668ba1c5-3435-3ef3-a8d7-a353e6418069.roa (raw, json) Hash identifier: z0cunS3LRjn1tMMkaQkKAwQxq9bsQAk2A6ebGtjlbgc= Subject key identifier: 13:77:67:42:6C:58:A7:86:C6:5C:D7:14:1C:71:06:4B:DE:77:C0:A2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00030E1C8E65DC5F2A22F0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:03:0e:1c:8e:65:dc:5f:2a:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1720e35d-cdcf-4947-93a2-b40fcb48a37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:4a:71:fd:ff:83:15:1a:cf:ba:92:87:ff: bd:f7:49:97:6f:54:70:ed:64:1c:15:79:19:da:40: ac:e8:13:da:0c:00:48:d7:a9:c8:4a:e1:b7:28:67: 6d:d7:25:30:f4:94:6a:dd:55:06:58:1b:53:ff:e1: 7c:c1:85:33:38:11:fb:8a:bf:db:3e:10:eb:02:03: e2:a7:4b:53:f3:b6:77:ef:a8:d0:c1:25:e7:2b:ec: 27:7e:07:df:cd:18:3a:6d:7f:71:8e:0b:da:c4:c1: 45:e4:6a:8f:1e:b4:81:60:c9:a9:db:2e:a9:cd:94: 13:40:1c:cb:76:b6:03:0f:5c:ae:19:1c:a6:5d:fd: fc:d1:b8:d2:fc:92:84:5e:8b:14:ef:02:55:1c:4d: 85:41:a7:2a:da:15:31:94:a0:7b:1e:ad:06:65:bf: d0:43:2d:3e:cb:4f:cc:c4:61:7c:02:a9:ac:9c:75: d4:e7:7c:c9:e0:b0:6d:14:f0:c6:de:55:04:16:b4: fc:87:b2:9d:c9:3b:ed:27:da:f5:94:62:ba:ba:8a: 1b:ce:2b:e9:e2:fd:e2:7a:8f:c0:30:fe:c3:ee:71: 35:8f:05:68:9d:a6:06:2a:6d:ff:14:74:84:78:cb: 7b:68:6f:89:9e:13:ca:f1:62:3f:e8:a7:55:78:4a: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:77:67:42:6C:58:A7:86:C6:5C:D7:14:1C:71:06:4B:DE:77:C0:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4b:6b:1a:03:b8:35:72:34:be:cc:4d:06:4b:bc:ec:a5:67: 3f:54:a4:f3:94:84:82:67:28:e9:2d:2f:68:4e:0e:d0:57:8b: 68:00:47:7c:cf:c2:31:30:ec:21:d7:9f:8b:f5:67:3f:8a:89: 44:1c:69:7e:0b:a1:1d:0e:98:fa:c4:6f:2f:46:21:e6:e9:61: d6:4f:c3:25:dc:53:43:fb:6f:a1:39:12:51:0a:92:bf:4e:3a: 93:af:56:5d:c2:f1:ea:01:7c:52:45:00:d0:b4:7f:d8:f9:8f: 12:37:32:7d:36:13:7f:48:71:4e:16:ca:0a:d0:c9:fb:7c:23: a1:89:5a:a2:f6:26:db:76:e0:21:af:96:b7:f7:f5:9f:7a:2e: 67:2e:df:af:34:d4:65:7e:4c:e1:be:3a:32:83:3f:33:1b:4e: f4:bb:c6:16:c1:34:c2:ac:b1:9e:1b:e8:ef:b8:ca:6f:79:03: c7:9d:a2:24:b5:e9:53:44:55:d0:3b:22:2a:d6:f8:48:d1:f1: 8a:61:08:65:26:7a:1e:0f:a4:cf:29:27:9b:c7:22:13:4c:87: d7:44:8e:06:57:0c:6c:65:74:a1:92:d7:9d:51:02:7f:ed:8d: d9:87:b1:0d:a9:54:b1:8d:d0:ab:b1:93:bf:78:31:e4:f6:04: 22:7f:9a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAMOHI5l3F8qIvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTcyMGUzNWQtY2RjZi00OTQ3LTkzYTItYjQwZmNiNDhhMzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszpKcf3/gxUaz7qSh/+990mXb1Rw7WQcFXkZ 2kCs6BPaDABI16nISuG3KGdt1yUw9JRq3VUGWBtT/+F8wYUzOBH7ir/bPhDrAgPi p0tT87Z376jQwSXnK+wnfgffzRg6bX9xjgvaxMFF5GqPHrSBYMmp2y6pzZQTQBzL drYDD1yuGRymXf380bjS/JKEXosU7wJVHE2FQacq2hUxlKB7Hq0GZb/QQy0+y0/M xGF8AqmsnHXU53zJ4LBtFPDG3lUEFrT8h7KdyTvtJ9r1lGK6uoobzivp4v3ieo/A MP7D7nE1jwVonaYGKm3/FHSEeMt7aG+JnhPK8WI/6KdVeEruIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN3Z0JsWKeGxlzXFBxxBkved8CiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjY4YmExYzUtMzQzNS0z ZWYzLWE4ZDctYTM1M2U2NDE4MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENLaxoDuDVyNL7MTQZLvOylZz9UpPOUhIJnKOktL2hODtBXi2gAR3zP wjEw7CHXn4v1Zz+KiUQcaX4LoR0OmPrEby9GIebpYdZPwyXcU0P7b6E5ElEKkr9O OpOvVl3C8eoBfFJFANC0f9j5jxI3Mn02E39IcU4WygrQyft8I6GJWqL2Jtt24CGv lrf39Z96Lmcu36801GV+TOG+OjKDPzMbTvS7xhbBNMKssZ4b6O+4ym95A8edoiS1 6VNEVdA7IirW+EjR8YphCGUmeh4PpM8pJ5vHIhNMh9dEjgZXDGxldKGS151RAn/t jdmHsQ2pVLGN0Kuxk794MeT2BCJ/mig= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:41 2026 by rpki-client