$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa File: 76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa (raw, json) Hash identifier: oLf+4Z8Y+DCD1Qyd8SC5juGOlLak2rljspMgXgHyOdM= Subject key identifier: 85:E3:72:47:2E:4F:F7:27:C3:B5:35:21:EA:A7:7E:14:16:F1:CF:47 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0004E6D65039640D546980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.250.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:04:e6:d6:50:39:64:0d:54:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=2cdcbe7c-927a-4a4c-9e29-aa6d81db587f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:85:dd:03:09:bd:bd:1d:cb:af:67:fc:9e: 57:5b:c0:cc:a6:f0:ce:87:9f:1d:27:8f:f2:fc:cf: dc:a1:44:a2:cd:cf:4e:73:3d:f2:9a:0f:0c:97:7a: 3f:45:07:7d:93:58:31:38:83:45:c0:41:37:9c:2f: cb:d0:3c:6d:14:a3:2b:f6:3b:d9:44:a0:7b:1c:0a: 2c:cf:6b:0e:fa:82:4e:64:15:3a:02:16:1d:46:7b: 8c:06:da:a4:a9:92:da:1b:d9:e2:31:ae:82:ac:cd: 70:8a:98:9e:a3:3a:ec:33:e6:61:6a:34:47:8b:2c: f1:3c:57:e9:7d:fa:73:4a:f3:94:b5:27:ef:00:5f: b6:56:25:9f:cc:22:23:36:7a:8c:4a:32:46:03:0c: d8:8b:3a:3c:7d:a8:60:89:95:ca:40:4f:3c:ed:9b: 77:6b:a7:1f:aa:d7:d6:54:3a:26:20:21:c5:b0:f5: 6d:c7:dc:2b:9a:e1:87:3c:10:20:bc:08:d1:64:43: 70:2d:7e:5f:c1:f4:2e:24:e1:7d:4d:d0:d2:5b:0a: f7:79:0d:ce:3c:18:1e:82:9b:70:e5:3d:80:eb:ce: 24:e7:90:37:7d:dc:8b:7c:b3:bb:6e:b1:73:3f:ea: 89:43:2f:66:9b:d8:8f:5c:4c:7d:fe:f6:4a:48:dc: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E3:72:47:2E:4F:F7:27:C3:B5:35:21:EA:A7:7E:14:16:F1:CF:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76897ae5-56e4-3d6d-8a09-5c88e5d5f1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.250.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:56:b2:4a:f8:16:a9:f9:eb:d3:c2:bf:4c:dc:c1:52:38:cb: 5e:a1:11:b9:5b:7e:29:f1:fb:81:f1:29:97:82:cc:30:97:ee: 77:65:63:e4:c7:f1:a1:98:6f:60:c7:5e:c3:c6:15:4b:8e:22: 1a:4e:16:99:db:78:fe:bf:7c:21:77:6d:91:96:26:7f:06:cd: 7c:99:78:0a:5a:e5:2d:19:a9:59:8f:34:94:e1:dc:84:7f:b5: e3:ef:ff:37:06:c0:4d:9b:ca:f8:b6:ab:e0:5b:eb:f6:2d:ad: cf:67:e1:8b:8e:1f:14:44:f6:6b:f6:28:a9:0c:40:65:e4:a4: 06:6d:85:9a:af:6f:0b:be:d9:1e:11:31:f0:67:73:45:0a:72: ff:52:9b:fe:f8:8c:b0:36:d5:e9:cf:8a:3a:23:e8:18:46:fa: 06:c3:e8:5f:9d:13:b7:b4:45:c3:3d:ce:3d:1f:1c:0a:38:97: 80:fb:eb:46:3e:5a:84:c7:58:19:25:0b:6a:dd:cd:43:91:f6: 75:32:e6:fc:d9:32:a3:dd:93:2f:09:0d:74:e1:62:ff:57:cd: 6a:84:80:f4:48:1c:a9:48:69:56:d6:7b:bf:69:61:7e:89:d0: fd:67:9a:9f:a1:89:5b:62:bf:6e:80:db:f4:b8:d4:94:9e:3a: 82:2e:12:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AATm1lA5ZA1UaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MmNkY2JlN2MtOTI3YS00YTRjLTllMjktYWE2ZDgxZGI1ODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnomF3QMJvb0dy69n/J5XW8DMpvDOh58dJ4/y /M/coUSizc9Ocz3ymg8Ml3o/RQd9k1gxOINFwEE3nC/L0DxtFKMr9jvZRKB7HAos z2sO+oJOZBU6AhYdRnuMBtqkqZLaG9niMa6CrM1wipieozrsM+ZhajRHiyzxPFfp ffpzSvOUtSfvAF+2ViWfzCIjNnqMSjJGAwzYizo8fahgiZXKQE887Zt3a6cfqtfW VDomICHFsPVtx9wrmuGHPBAgvAjRZENwLX5fwfQuJOF9TdDSWwr3eQ3OPBgegptw 5T2A684k55A3fdyLfLO7brFzP+qJQy9mm9iPXEx9/vZKSNygmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXjckcuT/cnw7U1IeqnfhQW8c9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzY4OTdhZTUtNTZlNC0z ZDZkLThhMDktNWM4OGU1ZDVmMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElWskr4Fqn569PCv0zcwVI4y16hEblbfinx+4HxKZeCzDCX7ndlY+TH 8aGYb2DHXsPGFUuOIhpOFpnbeP6/fCF3bZGWJn8GzXyZeApa5S0ZqVmPNJTh3IR/ tePv/zcGwE2byvi2q+Bb6/Ytrc9n4YuOHxRE9mv2KKkMQGXkpAZthZqvbwu+2R4R MfBnc0UKcv9Sm/74jLA21enPijoj6BhG+gbD6F+dE7e0RcM9zj0fHAo4l4D760Y+ WoTHWBklC2rdzUOR9nUy5vzZMqPdky8JDXThYv9XzWqEgPRIHKlIaVbWe79pYX6J 0P1nmp+hiVtiv26A2/S41JSeOoIuEkY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:54:02 2026 by rpki-client