$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa File: 7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa (raw, json) Hash identifier: W5bdaWfLPoxHQ45p3oEsQPd8VOYn1QbNv3xDj44Bshg= Subject key identifier: D3:E2:3A:BB:3C:C9:CC:0C:63:BA:14:D0:A7:86:CE:5F:28:36:E3:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD074A428289DDA4EE680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d0:74:a4:28:28:9d:da:4e:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=9c44c0a6-5e82-465a-bbe6-b322cee903e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d0:2d:49:ba:46:30:ea:ae:19:be:3b:03:fb: 87:f0:77:ec:e1:c8:a5:4f:40:4f:09:ab:ad:d5:31: 41:b3:59:ed:5c:6b:b0:6a:7a:cc:63:48:a9:fe:99: 73:43:a9:59:ac:87:1d:f8:00:3d:44:b4:27:e7:d2: 58:6f:e5:9b:23:c4:ac:79:07:17:d7:75:89:dc:54: 57:0a:3b:c0:ff:93:08:86:38:fc:7f:79:0a:2c:0f: b7:81:7c:f0:86:ff:cb:ca:b2:a7:43:42:0b:ca:b0: 79:1c:af:9a:5f:d0:62:d6:fd:17:11:3e:c5:85:df: 42:99:ec:0f:54:7e:e8:26:b1:04:9d:5c:01:20:12: 2d:c6:7c:39:27:81:cb:1c:bd:8d:4a:c3:16:1e:37: 42:24:eb:07:9c:23:a0:bf:2b:29:1d:9d:ba:cf:57: 3f:ec:e5:a7:5f:7d:b6:85:54:09:a0:b6:b1:bf:c6: 2f:65:64:4c:de:eb:84:a7:84:4d:33:c7:22:11:c4: f8:7a:52:6e:85:a3:33:4e:83:14:68:85:f2:d4:cc: 79:84:ec:3d:3a:61:62:95:b6:65:94:9b:cc:18:db: 72:f4:1b:0a:9b:04:02:33:fd:37:ea:e4:9e:21:7f: 3a:da:c9:5f:50:da:59:5c:b5:46:99:33:a6:0d:b9: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:3A:BB:3C:C9:CC:0C:63:BA:14:D0:A7:86:CE:5F:28:36:E3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7471b3a4-303f-3dd0-b211-94d9a0467e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:fd:31:ea:78:5d:0a:04:a8:ed:22:6c:a2:5f:68:dc:44:bb: d4:3b:91:c6:72:77:40:df:60:58:10:cd:20:4d:bc:dd:20:e5: 07:d8:30:a5:f8:66:12:a3:41:10:11:e7:38:c5:d8:d6:c3:ad: 46:4e:36:58:1b:e9:fd:1b:83:96:fb:e0:a5:df:d2:27:23:d0: 28:41:df:8d:9c:4c:81:2d:9a:c8:b0:d9:43:80:8f:1a:88:ce: 60:ce:eb:b1:a3:6f:06:12:b5:e9:05:70:db:f0:cf:c1:39:ed: d4:16:96:d1:e8:1b:c5:79:01:d9:01:75:e5:74:40:0d:f3:4b: 10:dd:fc:6c:82:65:c4:8d:33:f1:d6:75:34:17:db:fb:84:92: ae:56:ec:1a:b1:b5:34:9e:1d:af:3a:fd:50:35:42:51:74:4b: 76:2b:c8:53:ef:91:e5:2e:e8:60:e0:a4:c6:3e:db:09:7d:23: e2:b0:f1:c3:3d:69:c2:7e:08:03:40:39:a3:7a:f2:fb:d3:ad: 10:d6:00:84:6a:0f:87:b2:4c:89:27:63:17:53:4a:d8:9f:89: b0:a2:1d:ac:c7:83:c3:ad:fe:29:5f:47:6b:2b:fb:ee:86:e4: 54:b3:8c:d0:08:ad:4c:1a:20:c3:3b:de:98:98:e1:d9:03:77: 0b:2d:7d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9B0pCgondpO5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OWM0NGMwYTYtNWU4Mi00NjVhLWJiZTYtYjMyMmNlZTkwM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdAtSbpGMOquGb47A/uH8Hfs4cilT0BPCaut 1TFBs1ntXGuwanrMY0ip/plzQ6lZrIcd+AA9RLQn59JYb+WbI8SseQcX13WJ3FRX CjvA/5MIhjj8f3kKLA+3gXzwhv/LyrKnQ0ILyrB5HK+aX9Bi1v0XET7Fhd9CmewP VH7oJrEEnVwBIBItxnw5J4HLHL2NSsMWHjdCJOsHnCOgvyspHZ26z1c/7OWnX322 hVQJoLaxv8YvZWRM3uuEp4RNM8ciEcT4elJuhaMzToMUaIXy1Mx5hOw9OmFilbZl lJvMGNty9BsKmwQCM/036uSeIX862slfUNpZXLVGmTOmDbmDCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPiOrs8ycwMY7oU0KeGzl8oNuMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzQ3MWIzYTQtMzAzZi0z ZGQwLWIyMTEtOTRkOWEwNDY3ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz9Mep4XQoEqO0ibKJfaNxEu9Q7kcZyd0DfYFgQzSBNvN0g5QfYMKX4 ZhKjQRAR5zjF2NbDrUZONlgb6f0bg5b74KXf0icj0ChB342cTIEtmsiw2UOAjxqI zmDO67GjbwYStekFcNvwz8E57dQWltHoG8V5AdkBdeV0QA3zSxDd/GyCZcSNM/HW dTQX2/uEkq5W7BqxtTSeHa86/VA1QlF0S3YryFPvkeUu6GDgpMY+2wl9I+Kw8cM9 acJ+CANAOaN68vvTrRDWAIRqD4eyTIknYxdTStifibCiHazHg8Ot/ilfR2sr++6G 5FSzjNAIrUwaIMM73piY4dkDdwstfQk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:22 2026 by rpki-client