$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa File: 967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa (raw, json) Hash identifier: DhvTHRLyzWEk6GjXeUZr4yN4jTZFjWTnOGEAnKYgW44= Subject key identifier: A1:81:61:3A:7D:7B:FE:11:44:98:E4:8E:23:FC:7E:EF:0F:FB:E6:19 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629307D28760B76F5C79AAC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.251.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:d2:87:60:b7:6f:5c:79:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=306e9dfe-15eb-442a-96d9-16e55695745e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:bf:72:09:5c:b1:90:10:55:36:36:27:20: 14:14:a9:b2:54:f7:1d:53:79:2f:f0:89:73:25:07: e4:3a:4c:5d:cd:35:62:f6:91:a7:f1:ad:5d:7c:4f: d9:64:68:de:20:f5:48:c6:b4:89:17:f6:f0:aa:7e: 97:28:38:f2:4d:58:84:bd:96:fc:b5:33:1a:8e:50: 7b:8e:20:3a:3a:83:fd:96:32:42:a4:68:5a:fe:f7: ea:93:fa:3d:7c:90:d3:a3:d7:d6:b7:eb:1d:61:2e: ee:c6:9b:19:ad:31:f2:03:4e:29:43:a3:ea:b6:6b: a8:bb:b3:f9:92:66:36:c1:e1:5a:bb:88:49:c4:21: 95:2a:c9:97:98:6b:1e:d1:c2:f6:a2:b8:08:6e:ba: 55:a4:78:66:fb:a0:c5:63:c4:7d:c3:66:c7:3a:37: df:86:bd:ef:e9:a3:42:b4:33:0e:0e:33:6e:d5:70: 19:e0:a0:3f:aa:a3:66:b1:d7:f7:f1:0f:27:20:10: ef:dd:87:c6:bf:67:49:11:a3:d2:3e:d8:7a:b7:df: 5f:f7:8c:dc:b4:34:38:d0:d3:80:37:83:b4:2c:cb: e3:53:6c:18:b8:1f:1f:eb:7f:c0:9a:6e:24:48:3a: bb:89:6a:89:3c:e3:21:c8:41:c3:ec:84:8d:ad:3f: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:81:61:3A:7D:7B:FE:11:44:98:E4:8E:23:FC:7E:EF:0F:FB:E6:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:0b:e8:cb:8b:a8:8e:3b:1c:0e:4d:54:e5:45:f8:b5:00:4f: 3f:28:fd:5d:3b:1b:64:40:84:91:65:0b:8e:d4:96:dd:2a:10: 1a:3e:e0:6c:34:72:0a:52:3a:14:39:e2:29:3c:00:2c:52:c9: 40:0d:bc:7c:b7:6e:ba:b4:cb:a0:83:2d:35:3c:53:2a:45:b0: 52:aa:ad:3a:15:9a:ea:44:72:68:bc:13:29:29:c0:32:38:eb: ad:12:c6:f3:8f:26:12:bb:9d:0f:4c:77:be:2e:52:0c:99:00: f0:40:a5:d8:b4:2f:1d:ea:a0:74:57:89:78:d9:2e:b6:7e:17: 85:84:23:9e:22:5e:7b:49:20:2d:25:c5:57:1b:51:1e:57:64: 14:36:8b:b0:2d:20:89:44:ef:21:7b:fb:39:4c:62:0b:9f:06: 49:83:32:46:eb:1e:a0:82:e4:1a:2f:95:80:0d:dc:6b:7e:3d: d3:78:90:59:ae:b5:53:b5:9b:3d:92:7c:e9:fe:e3:a9:1c:9d: bd:16:85:c7:ab:94:21:55:3a:fe:72:bf:b4:02:89:17:53:42: 05:dc:0d:26:bd:09:87:22:0e:e8:50:ce:46:ce:25:51:c7:a9: 2c:bd:d8:8c:b9:25:95:c5:b6:47:37:ae:ef:80:a6:e0:50:e5: e2:b5:52:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwfSh2C3b1x5qsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MzA2ZTlkZmUtMTVlYi00NDJhLTk2ZDktMTZlNTU2OTU3NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y+/cglcsZAQVTY2JyAUFKmyVPcdU3kv8Ilz JQfkOkxdzTVi9pGn8a1dfE/ZZGjeIPVIxrSJF/bwqn6XKDjyTViEvZb8tTMajlB7 jiA6OoP9ljJCpGha/vfqk/o9fJDTo9fWt+sdYS7uxpsZrTHyA04pQ6Pqtmuou7P5 kmY2weFau4hJxCGVKsmXmGse0cL2orgIbrpVpHhm+6DFY8R9w2bHOjffhr3v6aNC tDMODjNu1XAZ4KA/qqNmsdf38Q8nIBDv3YfGv2dJEaPSPth6t99f94zctDQ40NOA N4O0LMvjU2wYuB8f63/Amm4kSDq7iWqJPOMhyEHD7ISNrT9R6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGBYTp9e/4RRJjkjiP8fu8P++YZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTY3ZTk5MmMtMzZmNS0z MmQ1LWFlNWEtODJhNTJiOWY2YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYL6MuLqI47HA5NVOVF+LUATz8o/V07G2RAhJFlC47Ult0qEBo+4Gw0 cgpSOhQ54ik8ACxSyUANvHy3brq0y6CDLTU8UypFsFKqrToVmupEcmi8EykpwDI4 660SxvOPJhK7nQ9Md74uUgyZAPBApdi0Lx3qoHRXiXjZLrZ+F4WEI54iXntJIC0l xVcbUR5XZBQ2i7AtIIlE7yF7+zlMYgufBkmDMkbrHqCC5BovlYAN3Gt+PdN4kFmu tVO1mz2SfOn+46kcnb0WhcerlCFVOv5yv7QCiRdTQgXcDSa9CYciDuhQzkbOJVHH qSy92Iy5JZXFtkc3ru+ApuBQ5eK1UqU= -----END CERTIFICATE-----Generated at Sun Nov 15 10:26:29 2026 by rpki-client