$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa File: bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa (raw, json) Hash identifier: /HTgLT0CRINGjsZOJ3IduXDbyuJmXV24BcG8rzUW9W8= Subject key identifier: CF:6B:F4:2D:D5:07:21:6E:12:26:D5:F6:B9:0D:44:D1:65:35:F4:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E000283E8822366EF76FA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:02:83:e8:82:23:66:ef:76:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=a7e7a95b-257b-4857-8cf0-c3eeccf268d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:c3:83:14:b8:a2:31:0b:c3:1a:12:32:65: 35:a5:5d:5d:4d:52:a0:ab:08:01:fd:ac:51:3f:a3: 55:73:07:49:5a:bd:59:86:d2:a4:bb:07:16:55:70: 4f:e7:97:5a:e5:78:8c:e0:69:c0:dc:7f:8e:bf:d5: 96:3b:72:57:cb:c2:ac:a9:67:5e:3d:a3:7b:d7:19: 5a:05:99:11:14:49:8a:00:a3:db:6c:a7:05:20:db: 8e:2d:5b:9b:ee:23:ac:64:0f:07:c0:c1:8b:20:29: ff:5d:76:97:89:be:d5:17:0b:d1:e5:5c:9c:0c:a2: 38:7a:b2:8f:88:7e:bc:f4:d9:e5:b3:eb:1a:cd:4f: fa:80:be:46:47:12:6e:32:53:17:43:82:22:7f:17: 00:f9:f6:7a:9b:39:0d:ae:df:73:ed:a5:bb:51:06: 79:5f:e7:9c:08:9b:39:00:94:7f:df:84:87:f1:bb: 22:d0:ea:db:e3:bd:62:a8:12:d5:7e:5f:ef:25:d3: 4e:2c:51:22:b8:47:94:c5:8d:00:c2:1a:84:42:2b: 7f:89:1a:a0:db:f3:f7:e8:5b:c7:3d:a7:19:89:95: b1:31:6d:44:5c:02:26:5a:59:31:3a:ea:7d:da:b1: 47:a0:1e:51:6f:8f:02:10:c6:88:e3:67:32:c3:43: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:F4:2D:D5:07:21:6E:12:26:D5:F6:B9:0D:44:D1:65:35:F4:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4e:b3:b6:97:83:6b:9a:00:0b:38:ab:28:0d:dd:ce:ac:64: 6d:60:fa:2b:d1:c3:74:85:3f:d6:e1:ef:de:c6:7b:01:b2:04: ef:1a:4a:ad:32:cf:ce:1a:b1:27:eb:c8:b9:4b:95:ed:15:87: 6a:d3:1a:72:0d:a1:85:8f:87:58:72:3a:c0:07:2d:18:89:8e: ce:a4:0d:cf:8d:5f:20:5d:cd:c7:7a:e1:88:74:bc:aa:74:ae: dd:8b:3f:61:c3:4e:3e:5c:4a:79:09:0f:05:7f:53:ae:5b:75: 85:8b:6f:9b:ea:0f:f2:51:09:1c:06:a9:97:77:67:35:7f:dd: 5c:f5:c5:56:8f:c4:02:a5:69:a1:52:4b:72:75:65:bd:0c:18: f1:3d:c7:37:25:6a:8e:d8:de:ad:78:b3:2c:8e:d1:85:db:c6: 96:71:49:08:c2:ea:27:f7:54:ae:7d:07:45:b2:72:45:00:ff: 19:00:a8:71:4a:29:a5:96:25:ce:22:f5:d9:e4:d4:80:69:bc: 5d:ef:7e:fc:ca:da:35:43:a8:9f:02:5b:bf:60:27:ff:28:6b: c1:9d:fd:a0:d8:6c:23:22:e5:da:32:0e:19:14:d0:05:94:0f: 56:a7:ca:14:6c:fc:2a:b4:eb:b2:27:b5:4a:9d:e2:26:91:62: a7:dd:61:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAKD6IIjZu92+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YTdlN2E5NWItMjU3Yi00ODU3LThjZjAtYzNlZWNjZjI2OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCnDgxS4ojELwxoSMmU1pV1dTVKgqwgB/axR P6NVcwdJWr1ZhtKkuwcWVXBP55da5XiM4GnA3H+Ov9WWO3JXy8KsqWdePaN71xla BZkRFEmKAKPbbKcFINuOLVub7iOsZA8HwMGLICn/XXaXib7VFwvR5VycDKI4erKP iH689Nnls+sazU/6gL5GRxJuMlMXQ4IifxcA+fZ6mzkNrt9z7aW7UQZ5X+ecCJs5 AJR/34SH8bsi0Orb471iqBLVfl/vJdNOLFEiuEeUxY0AwhqEQit/iRqg2/P36FvH PacZiZWxMW1EXAImWlkxOup92rFHoB5Rb48CEMaI42cyw0N5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9r9C3VByFuEibV9rkNRNFlNfR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmNiZjBhNDItYjAwNS0z ZDlmLWI0NmMtZjZjMzJjYjQ0NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpOs7aXg2uaAAs4qygN3c6sZG1g+ivRw3SFP9bh797GewGyBO8aSq0y z84asSfryLlLle0Vh2rTGnINoYWPh1hyOsAHLRiJjs6kDc+NXyBdzcd64Yh0vKp0 rt2LP2HDTj5cSnkJDwV/U65bdYWLb5vqD/JRCRwGqZd3ZzV/3Vz1xVaPxAKlaaFS S3J1Zb0MGPE9xzclao7Y3q14syyO0YXbxpZxSQjC6if3VK59B0WyckUA/xkAqHFK KaWWJc4i9dnk1IBpvF3vfvzK2jVDqJ8CW79gJ/8oa8Gd/aDYbCMi5doyDhkU0AWU D1anyhRs/Cq067IntUqd4iaRYqfdYUU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:17:30 2026 by rpki-client