$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa File: a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa (raw, json) Hash identifier: hn4gyyxP87+3r8hBYTI456haUXWxkZfdBpg45ckAQIc= Subject key identifier: 6D:8F:3C:B4:49:2B:CA:FF:19:3C:1B:40:D2:A8:09:0F:26:0A:C4:A8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD00F40883A541247CB80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d0:0f:40:88:3a:54:12:47:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=021817ee-9ffb-4596-95ae-c6a387c3056c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:07:2d:64:1e:97:7f:96:e2:0c:f8:73:13:ff: ea:7d:f3:33:d0:16:4f:3b:66:fb:50:a8:32:46:64: 8e:ff:03:92:bd:7e:b5:02:25:a3:ed:2d:0d:73:20: 6b:23:12:fb:ff:95:5d:a7:5e:bf:cd:3b:cf:71:ef: a5:5e:eb:e3:cf:ec:ec:80:06:84:f1:c6:54:3f:cb: 32:8b:1b:34:a0:15:91:0e:7f:d9:65:1a:4f:78:01: 4c:c7:ac:13:e5:52:48:e4:7d:a2:de:14:90:f5:9e: 70:3c:fc:4d:83:01:d6:80:d4:e1:33:93:13:3c:17: 5e:f5:3b:6c:f8:5e:8f:51:75:e5:ea:1d:32:c7:fe: a5:19:43:23:d7:8a:2e:00:ac:ac:b5:1b:7e:a9:52: 07:a9:d0:96:6e:ce:95:61:28:ea:f1:c9:69:61:7f: f0:88:19:d3:5b:a8:26:bb:63:78:0b:f5:61:e1:a2: ea:34:e8:9e:d5:10:ae:73:99:f4:9f:36:2e:46:3a: 22:68:b4:8a:df:a8:37:3e:ce:e6:90:b4:67:fe:d3: f1:c7:3f:f9:c1:b3:40:0f:41:3f:ad:92:9b:be:b8: 73:79:4e:c1:ba:34:f8:8e:1e:2d:ac:74:8f:25:d9: 54:9b:48:8b:c0:88:f9:96:ea:74:58:43:83:81:9d: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8F:3C:B4:49:2B:CA:FF:19:3C:1B:40:D2:A8:09:0F:26:0A:C4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a8d65ae1-8622-3f9a-95e1-d4ba26f2ab6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:48:d4:14:95:2f:94:4e:59:ff:9e:37:0a:5b:b0:a7:7e:bb: 46:2c:af:31:fa:69:a1:ce:0d:2f:2e:49:5e:3b:86:e5:72:c0: d5:30:a2:4e:e8:6c:5c:8a:a4:f9:43:fe:87:0a:49:d4:cd:15: 51:83:85:49:77:26:69:6b:96:c4:44:0b:f8:d9:e0:ef:57:2a: f2:35:36:b7:e6:c3:6f:95:1f:17:cd:0a:02:fa:f6:50:ab:aa: 15:01:ec:4a:47:89:d4:39:5e:91:0a:3a:aa:4a:c0:f1:db:17: 3d:14:a3:c8:73:11:75:52:f2:91:79:99:fb:4f:e0:d3:55:57: df:55:10:75:19:05:90:e6:d8:e7:40:50:30:34:2e:32:e0:f7: dc:18:cd:09:86:30:16:74:44:19:77:49:ae:1a:41:ca:4f:bb: 12:32:97:b2:46:ba:d1:55:f0:2f:52:f6:06:9c:ec:ae:a4:15: a2:af:c2:40:95:dd:98:0c:98:68:0c:e4:9e:62:f9:0d:67:4e: fa:58:82:87:3c:19:2a:9a:f5:b5:9c:1b:0b:a1:ef:8b:2f:61: b1:c2:96:78:09:c8:fa:23:a0:77:50:78:41:a8:35:57:95:38: a0:6c:09:54:b1:a0:b3:08:28:41:f6:89:5c:36:38:61:d1:cf: a2:57:22:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9APQIg6VBJHy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MDIxODE3ZWUtOWZmYi00NTk2LTk1YWUtYzZhMzg3YzMwNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQctZB6Xf5biDPhzE//qffMz0BZPO2b7UKgy RmSO/wOSvX61AiWj7S0NcyBrIxL7/5Vdp16/zTvPce+lXuvjz+zsgAaE8cZUP8sy ixs0oBWRDn/ZZRpPeAFMx6wT5VJI5H2i3hSQ9Z5wPPxNgwHWgNThM5MTPBde9Tts +F6PUXXl6h0yx/6lGUMj14ouAKystRt+qVIHqdCWbs6VYSjq8clpYX/wiBnTW6gm u2N4C/Vh4aLqNOie1RCuc5n0nzYuRjoiaLSK36g3Ps7mkLRn/tPxxz/5wbNAD0E/ rZKbvrhzeU7BujT4jh4trHSPJdlUm0iLwIj5lup0WEODgZ05dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2PPLRJK8r/GTwbQNKoCQ8mCsSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYThkNjVhZTEtODYyMi0z ZjlhLTk1ZTEtZDRiYTI2ZjJhYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlI1BSVL5ROWf+eNwpbsKd+u0YsrzH6aaHODS8uSV47huVywNUwok7o bFyKpPlD/ocKSdTNFVGDhUl3JmlrlsREC/jZ4O9XKvI1Nrfmw2+VHxfNCgL69lCr qhUB7EpHidQ5XpEKOqpKwPHbFz0Uo8hzEXVS8pF5mftP4NNVV99VEHUZBZDm2OdA UDA0LjLg99wYzQmGMBZ0RBl3Sa4aQcpPuxIyl7JGutFV8C9S9gac7K6kFaKvwkCV 3ZgMmGgM5J5i+Q1nTvpYgoc8GSqa9bWcGwuh74svYbHClngJyPojoHdQeEGoNVeV OKBsCVSxoLMIKEH2iVw2OGHRz6JXIl8= -----END CERTIFICATE-----Generated at Thu Mar 26 20:58:27 2026 by rpki-client