$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa File: c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa (raw, json) Hash identifier: e1VWbdRRr4EnXfk+uVF1nm/G+OIiVqohsuRU3+Aw6jg= Subject key identifier: A9:03:A8:2E:A6:86:C2:DC:55:0D:81:ED:A0:14:75:9F:1A:D2:6E:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0004F7AA6F6568A5665980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:04:f7:aa:6f:65:68:a5:66:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1684f930-09b0-4f1a-94c4-588cc9fb6407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:e3:61:3d:58:d9:c4:27:1e:31:6f:0c:fc: 13:6b:f6:8a:15:cb:98:9f:89:e6:0a:c9:43:f4:69: 15:0b:6d:b0:4f:b5:47:92:30:da:b7:04:0d:79:69: 3f:81:87:5d:6d:76:16:a9:59:c2:cc:8f:1c:26:70: f0:99:5c:48:34:b4:74:03:69:35:ab:a5:cc:a2:3d: c6:49:fe:85:05:6c:e1:3b:a8:8a:f2:38:c2:dd:4b: 6a:9b:52:ca:69:2c:73:99:d3:a7:7c:0a:4c:9e:ec: c1:5a:29:95:1b:3d:b7:56:7c:c8:dd:fa:0d:cd:4c: 89:5d:dc:5c:48:f0:e3:47:55:57:ed:48:74:e6:03: ca:f9:31:9a:4a:94:54:5b:09:28:f0:1b:06:19:9c: d7:54:54:4f:13:5c:e3:b3:9f:0e:b6:5f:26:61:e7: bb:68:68:a1:5c:81:93:6d:d7:66:ff:09:03:a6:96: de:9f:37:53:f8:de:8c:51:ea:e6:fd:8b:29:b9:3e: 45:0d:07:0f:70:08:12:05:8e:e5:a3:14:97:85:f2: a7:52:2f:76:72:0e:d2:c1:c0:ba:38:cd:6b:b3:18: ff:9c:df:39:9f:e9:c3:ff:d8:c4:63:b4:83:83:a9: f4:79:b4:b5:62:47:26:d3:b8:81:d9:98:80:a8:ca: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:03:A8:2E:A6:86:C2:DC:55:0D:81:ED:A0:14:75:9F:1A:D2:6E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:68:07:8b:4f:ce:77:cb:d1:b3:cf:86:12:0d:b4:f9:84:d1: d2:cd:96:24:da:09:ad:5b:ac:36:5d:8a:1c:17:52:d7:8c:e4: fe:7b:ee:63:b4:ee:c1:61:7b:c1:36:16:a6:e0:f6:4a:60:25: b8:5f:16:7a:dc:c7:00:d8:f2:14:f3:fe:ff:d0:0a:e2:3a:d1: 0d:05:11:af:b3:0f:23:1f:0a:fa:35:96:2f:e4:e1:d8:df:4b: e5:27:5b:eb:98:dd:52:9d:ac:1a:c6:7b:a3:1e:be:6a:62:be: 7c:d0:4f:96:fc:a6:c2:b5:eb:5a:41:1b:70:80:15:4f:6b:1f: e5:64:d9:a5:fd:09:b7:e6:4f:fa:14:9c:9d:77:c5:79:63:07: 29:1c:ea:f8:bd:bb:48:55:ee:fb:d4:b2:d2:b4:35:a2:26:e7: f6:14:66:0d:cf:9e:5e:4f:fa:3f:ec:b0:ee:e6:24:88:10:82: c9:93:08:e9:8c:09:b4:ff:51:a6:19:36:ec:7c:6b:e5:48:08: 57:b3:8b:07:18:89:6f:d9:45:9d:bf:31:b7:db:a5:86:8f:45: 81:90:89:9e:2b:0d:c9:1b:20:19:e1:c2:94:cb:00:9b:f6:c4: e5:bc:bf:bd:f6:db:2b:3a:29:a3:00:c3:01:de:b2:46:8e:d7: 49:f5:53:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAT3qm9laKVmWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTY4NGY5MzAtMDliMC00ZjFhLTk0YzQtNTg4Y2M5ZmI2NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPDjYT1Y2cQnHjFvDPwTa/aKFcuYn4nmCslD 9GkVC22wT7VHkjDatwQNeWk/gYddbXYWqVnCzI8cJnDwmVxINLR0A2k1q6XMoj3G Sf6FBWzhO6iK8jjC3Utqm1LKaSxzmdOnfApMnuzBWimVGz23VnzI3foNzUyJXdxc SPDjR1VX7Uh05gPK+TGaSpRUWwko8BsGGZzXVFRPE1zjs58Otl8mYee7aGihXIGT bddm/wkDppbenzdT+N6MUerm/YspuT5FDQcPcAgSBY7loxSXhfKnUi92cg7SwcC6 OM1rsxj/nN85n+nD/9jEY7SDg6n0ebS1Ykcm07iB2ZiAqMpqAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkDqC6mhsLcVQ2B7aAUdZ8a0m7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzlkODFjM2QtYWVjNS0z ODgxLWE3ZTMtNTcxZmRiNjE1ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxoB4tPznfL0bPPhhINtPmE0dLNliTaCa1brDZdihwXUteM5P577mO0 7sFhe8E2Fqbg9kpgJbhfFnrcxwDY8hTz/v/QCuI60Q0FEa+zDyMfCvo1li/k4djf S+UnW+uY3VKdrBrGe6MevmpivnzQT5b8psK161pBG3CAFU9rH+Vk2aX9CbfmT/oU nJ13xXljBykc6vi9u0hV7vvUstK0NaIm5/YUZg3Pnl5P+j/ssO7mJIgQgsmTCOmM CbT/UaYZNux8a+VICFeziwcYiW/ZRZ2/MbfbpYaPRYGQiZ4rDckbIBnhwpTLAJv2 xOW8v7322ys6KaMAwwHeskaO10n1UwI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:50 2026 by rpki-client