$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90b76b3a-599e-3e1e-a671-858d85a1beaa.roa File: 90b76b3a-599e-3e1e-a671-858d85a1beaa.roa (raw, json) Hash identifier: +Ijp8Ir4wuCPeJoUKr4dCPBAD+9Db04rrqMdCK+z3io= Subject key identifier: 46:DB:78:44:D8:F9:78:07:EA:71:63:45:C7:1B:48:8D:34:57:3A:A6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0006C58B9872BC27F74400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90b76b3a-599e-3e1e-a671-858d85a1beaa.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:06:c5:8b:98:72:bc:27:f7:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=3985ef8d-feb3-43ca-8fee-98521badbbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:d7:a2:8d:2f:51:61:93:c6:8d:90:92:7b: 32:61:38:3a:d8:17:ca:e4:26:27:2d:67:9b:a4:08: b5:2b:00:7b:3b:28:65:62:db:37:5f:c8:de:aa:69: ca:5d:cc:07:87:27:a9:2a:e3:71:c5:f3:47:f8:9a: a8:4c:b6:c1:67:d0:ca:87:a5:5b:b6:79:7c:64:f7: 97:61:53:78:dc:b1:15:e7:ac:1e:fd:dd:da:c6:f8: 76:14:02:6a:a8:ac:53:a8:96:78:1e:1a:bb:86:ef: f5:f0:e0:b8:30:4a:b0:b9:de:a1:fa:8e:3d:f1:00: 06:3d:fa:7e:49:7d:6a:4e:c0:60:07:b0:4d:15:68: 0e:04:3e:ec:0c:d5:82:a2:22:81:1c:a6:9d:61:a7: 09:03:96:1b:20:d0:82:f3:96:f3:64:d3:8e:46:07: 8a:7d:fa:09:95:3c:c3:51:3b:5c:f1:ad:e4:7e:b8: f3:36:e7:ce:7c:a4:48:9a:74:4f:b7:f3:2d:7a:41: c2:b7:e3:ca:1b:82:3e:7e:f9:eb:fa:50:e9:8f:65: ef:2b:62:e6:85:63:86:7a:33:cc:27:4a:60:5b:1a: 12:e9:a8:e6:9d:5d:10:ab:ab:26:37:e1:9e:8b:3a: e7:c9:22:fe:f5:2b:7e:8b:7c:51:a6:cb:41:b5:06: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DB:78:44:D8:F9:78:07:EA:71:63:45:C7:1B:48:8D:34:57:3A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90b76b3a-599e-3e1e-a671-858d85a1beaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b8:1b:b5:db:7f:de:ad:f1:4a:f9:3b:3c:ba:00:7b:13:91: 9d:00:89:96:b6:bd:f2:ce:43:47:c1:1e:d6:4a:40:af:ef:5b: 01:8e:50:0f:c8:59:26:98:b0:5e:17:42:13:9b:46:a8:36:d1: df:84:c6:b8:a4:c6:cc:f1:e9:1b:ae:a8:03:cb:46:d0:9f:f1: 71:d5:ec:35:30:d0:d3:27:a1:a8:b7:31:9c:24:14:c8:78:c1: 2d:ca:44:e2:9d:0d:6c:37:df:b1:90:45:7b:96:c0:63:7c:cb: 44:f7:15:b0:ce:d2:d6:21:56:e1:6f:55:da:0f:19:e5:cf:8f: 77:f7:5d:e7:de:88:f1:9c:bf:bb:9f:2b:62:48:ad:30:17:26: c2:c1:27:4f:e3:90:02:84:16:3d:66:77:c1:b4:3f:93:41:b0: e6:f6:87:98:59:6d:6f:cd:bc:60:5b:1f:d7:f3:80:de:7f:67: bf:19:88:3e:8c:ca:ee:e5:2b:ed:9c:89:a3:a0:d5:ce:72:9e: e6:ba:a2:ea:59:3a:71:4a:9a:0f:80:a1:e7:5f:4a:07:48:76: 5f:5d:97:61:d5:69:76:ce:84:06:b0:f8:af:97:b2:dd:12:6b: 25:c0:90:78:9e:a3:8d:11:9f:26:7a:9a:f3:f3:92:34:dc:fd: 7c:3f:57:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAbFi5hyvCf3RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk Mzk4NWVmOGQtZmViMy00M2NhLThmZWUtOTg1MjFiYWRiYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlLXoo0vUWGTxo2QknsyYTg62BfK5CYnLWeb pAi1KwB7OyhlYts3X8jeqmnKXcwHhyepKuNxxfNH+JqoTLbBZ9DKh6Vbtnl8ZPeX YVN43LEV56we/d3axvh2FAJqqKxTqJZ4Hhq7hu/18OC4MEqwud6h+o498QAGPfp+ SX1qTsBgB7BNFWgOBD7sDNWCoiKBHKadYacJA5YbINCC85bzZNOORgeKffoJlTzD UTtc8a3kfrjzNufOfKRImnRPt/MtekHCt+PKG4I+fvnr+lDpj2XvK2LmhWOGejPM J0pgWxoS6ajmnV0Qq6smN+GeizrnySL+9St+i3xRpstBtQZkrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbbeETY+XgH6nFjRccbSI00VzqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTBiNzZiM2EtNTk5ZS0z ZTFlLWE2NzEtODU4ZDg1YTFiZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+4G7Xbf96t8Ur5Ozy6AHsTkZ0AiZa2vfLOQ0fBHtZKQK/vWwGOUA/I WSaYsF4XQhObRqg20d+Exrikxszx6RuuqAPLRtCf8XHV7DUw0NMnoai3MZwkFMh4 wS3KROKdDWw337GQRXuWwGN8y0T3FbDO0tYhVuFvVdoPGeXPj3f3XefeiPGcv7uf K2JIrTAXJsLBJ0/jkAKEFj1md8G0P5NBsOb2h5hZbW/NvGBbH9fzgN5/Z78ZiD6M yu7lK+2ciaOg1c5ynua6oupZOnFKmg+AoedfSgdIdl9dl2HVaXbOhAaw+K+Xst0S ayXAkHieo40RnyZ6mvPzkjTc/Xw/V7M= -----END CERTIFICATE-----Generated at Thu Mar 26 18:54:05 2026 by rpki-client