$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa File: a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa (raw, json) Hash identifier: gr4q7skQ6Fikh6pq1oc+MfdXTnk7w0qEnJQtY89iqvg= Subject key identifier: 57:16:33:7C:BD:2D:2D:12:70:88:A9:69:17:A2:8F:1E:83:01:24:95 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00041A75A9C1B1B7C56F40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:04:1a:75:a9:c1:b1:b7:c5:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=dc99ade9-7a30-4ea4-ac72-7f5854b13f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:60:af:17:ed:e2:55:5f:47:e0:7c:6e:1e:af: d8:ce:8a:d3:fb:8a:3f:79:52:36:9e:35:d0:ed:d9: be:01:bc:bf:5e:d6:47:cf:33:36:11:93:98:05:5f: d5:87:09:23:8c:f5:14:da:fc:26:6f:54:c1:34:05: 7c:33:05:44:a9:13:9c:6e:a1:24:50:8e:e6:35:5d: 5e:8b:78:70:87:63:f2:21:e5:42:a8:52:d6:37:50: 70:fd:6c:df:1d:fa:62:ad:99:db:b3:f2:54:97:34: e9:54:bb:0b:14:76:53:5c:a4:40:b3:87:83:e8:90: 64:30:1b:b8:8f:c0:2a:97:bd:b3:ef:4c:ca:3f:0f: 9e:ce:76:67:f6:c4:78:f9:bc:a9:14:5f:eb:88:9a: bd:8a:64:bc:e1:ca:58:ff:80:dd:fb:68:43:e6:17: 39:88:7e:10:b0:9d:af:b8:d7:6c:b1:43:e3:35:3c: c6:a5:4d:55:10:97:d3:d6:9e:b7:d7:04:76:cc:35: 20:37:1d:a8:62:7c:5b:31:54:aa:32:38:72:2d:c3: 4f:8a:30:e6:87:05:da:71:27:74:e3:8b:52:9a:9f: 70:da:ca:f9:c0:8f:d4:70:18:d1:6d:1d:7c:16:d2: 0f:fe:d8:1f:87:f3:78:71:cb:93:e4:57:5f:5e:ac: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:16:33:7C:BD:2D:2D:12:70:88:A9:69:17:A2:8F:1E:83:01:24:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:41:6b:72:fe:cf:49:76:b6:47:0e:78:0a:2e:11:bc:f6:41: 85:1b:41:2d:7d:38:58:b2:1d:92:0e:c1:a8:91:c8:3c:28:cd: 92:bc:ff:fe:97:59:6f:e7:c7:35:19:c9:1d:c0:7d:a6:79:5d: 7c:78:e8:cc:7b:0a:65:47:20:94:3e:ed:45:40:08:23:1c:af: 81:75:a1:4e:2a:26:07:07:4a:44:c5:92:14:f7:65:4a:10:1c: 00:ad:20:7a:cd:d9:ea:72:0f:89:f9:eb:5b:6b:45:76:3e:84: 62:28:36:01:9b:ad:20:b1:27:14:03:ce:f4:98:7d:ca:b2:0b: 0a:df:45:3d:bc:41:25:43:72:a5:da:f2:78:e9:9f:c2:3e:d7: 0a:48:c1:90:00:4d:82:9c:73:a2:c2:73:63:1e:60:b8:dc:58: 2d:40:cf:e3:0e:dd:61:99:28:38:bc:e1:98:df:d9:7a:a8:5f: dc:8c:95:e6:f6:3d:da:2b:da:f3:44:f9:51:4b:93:6b:a7:dc: 55:6c:41:b9:b3:a6:4e:fb:13:41:51:34:bb:f4:0d:6e:2d:d8: 73:f5:85:01:fa:b9:74:88:ff:8d:96:23:37:b2:3f:d0:46:2d: 7c:67:ee:db:e5:de:e6:c0:60:24:e7:1f:c8:cb:c0:79:6d:30: 68:97:c0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAQadanBsbfFb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGM5OWFkZTktN2EzMC00ZWE0LWFjNzItN2Y1ODU0YjEzZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2CvF+3iVV9H4HxuHq/YzorT+4o/eVI2njXQ 7dm+Aby/XtZHzzM2EZOYBV/VhwkjjPUU2vwmb1TBNAV8MwVEqROcbqEkUI7mNV1e i3hwh2PyIeVCqFLWN1Bw/WzfHfpirZnbs/JUlzTpVLsLFHZTXKRAs4eD6JBkMBu4 j8Aql72z70zKPw+eznZn9sR4+bypFF/riJq9imS84cpY/4Dd+2hD5hc5iH4QsJ2v uNdssUPjNTzGpU1VEJfT1p631wR2zDUgNx2oYnxbMVSqMjhyLcNPijDmhwXacSd0 44tSmp9w2sr5wI/UcBjRbR18FtIP/tgfh/N4ccuT5FdfXqzXMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcWM3y9LS0ScIipaReijx6DASSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTU4MjNhMTYtYTBjOS0z ZDc5LWJhYzAtNTMwMDk5YmI1YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvthMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRBa3L+z0l2tkcOeAouEbz2QYUbQS19OFiyHZIOwaiRyDwozZK8//6X WW/nxzUZyR3AfaZ5XXx46Mx7CmVHIJQ+7UVACCMcr4F1oU4qJgcHSkTFkhT3ZUoQ HACtIHrN2epyD4n561trRXY+hGIoNgGbrSCxJxQDzvSYfcqyCwrfRT28QSVDcqXa 8njpn8I+1wpIwZAATYKcc6LCc2MeYLjcWC1Az+MO3WGZKDi84Zjf2XqoX9yMleb2 Pdor2vNE+VFLk2un3FVsQbmzpk77E0FRNLv0DW4t2HP1hQH6uXSI/42WIzeyP9BG LXxn7tvl3ubAYCTnH8jLwHltMGiXwBE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:59 2026 by rpki-client