$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d295118f-b684-3470-ba2a-8cb115fab04a.roa File: d295118f-b684-3470-ba2a-8cb115fab04a.roa (raw, json) Hash identifier: vEF8HX8KaZXLpEdZn9qE2QW5vaVmVx3WHIekqer8oCM= Subject key identifier: 7E:B0:B5:12:64:0F:B6:E8:FE:87:63:34:A1:05:D1:16:FC:55:F9:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E00044CE183DD3FB4621F00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d295118f-b684-3470-ba2a-8cb115fab04a.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:04:4c:e1:83:dd:3f:b4:62:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=e315166b-418d-4def-bd14-8ed3283df7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:60:63:69:2e:10:9e:e9:bb:99:4d:b5:9a:b9: ba:8f:09:23:78:08:a4:1d:7d:49:e3:b8:d1:ac:74: 4b:a4:8b:61:bb:f5:63:30:d3:6f:ee:2b:52:45:51: ae:d1:9c:c1:80:55:57:67:9f:0a:87:65:b1:62:dc: d2:45:4a:81:e4:10:6d:b3:fa:be:f3:61:ef:63:15: 4c:ab:98:dc:da:76:04:2f:de:73:97:b9:26:e5:ad: 55:a1:17:b0:2f:eb:e8:5e:4c:0a:2f:cc:20:23:63: 42:a7:35:fb:21:cc:dd:38:8b:7e:11:c5:dc:73:08: f6:81:8c:45:f6:a4:f6:eb:d9:96:b5:09:21:3c:b9: a6:5f:02:99:17:25:6f:34:ab:e7:6a:66:a8:9f:a8: ec:ee:60:f0:32:db:a2:dc:76:8b:4a:c2:3b:44:f4: 59:46:06:37:4a:56:23:fb:6b:c5:d2:98:48:5a:88: 6e:45:0d:d6:48:2d:32:e0:4a:42:ae:ef:43:e7:e7: d9:4f:b6:a2:17:df:dd:a3:14:fb:70:56:99:2f:55: ce:44:4e:68:51:9a:95:bd:57:3b:7a:7b:cc:e1:4a: 0f:e5:12:46:81:5e:23:e6:9b:2d:cf:31:99:83:2f: 64:40:4e:84:95:4c:f7:2b:71:da:73:be:45:df:24: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B0:B5:12:64:0F:B6:E8:FE:87:63:34:A1:05:D1:16:FC:55:F9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d295118f-b684-3470-ba2a-8cb115fab04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:78:86:58:b2:04:13:7e:86:12:f7:35:43:cd:66:47:6c:82: 66:91:12:69:62:e3:e1:29:39:8b:e2:22:25:0a:a3:f4:7b:f6: 9a:1d:8e:dc:cb:6f:f7:08:60:00:cc:97:b2:32:0e:86:ff:23: e5:f4:a7:88:ff:d4:d2:6b:f8:7f:ba:3c:ee:2b:ac:8d:8b:01: ee:a3:ed:d5:0c:c7:52:ce:5a:38:81:9e:91:c8:98:66:d3:4b: c8:ab:94:38:61:be:04:6b:89:80:78:a1:0a:c2:c9:44:77:a3: 6d:63:9a:e9:e8:3a:93:1e:aa:44:eb:0b:25:ca:94:ab:8c:c7: ee:c6:4c:ed:d7:ec:d7:41:03:1a:53:da:a3:85:a0:e5:c7:ae: 44:75:2f:ee:bb:7e:28:a7:e8:c2:b8:c5:58:2f:40:06:5e:ea: 25:90:be:d2:5f:78:bb:d6:ff:ce:9e:f4:a7:23:d9:72:b2:0d: 59:24:dd:f6:1e:da:13:ee:41:4e:bf:c6:b5:d6:3e:2b:4e:a9: 7f:cb:f1:b5:00:18:fd:b4:f0:5b:c0:5d:5a:bd:da:e7:2d:14: 12:bd:65:9d:35:58:9b:c1:a9:a8:d1:34:5a:75:ba:62:8f:8b: 46:c5:7a:7a:11:99:f3:47:75:4e:19:f6:36:41:83:55:e3:e5: 05:7a:cd:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AARM4YPdP7RiHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTMxNTE2NmItNDE4ZC00ZGVmLWJkMTQtOGVkMzI4M2RmN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmBjaS4Qnum7mU21mrm6jwkjeAikHX1J47jR rHRLpIthu/VjMNNv7itSRVGu0ZzBgFVXZ58Kh2WxYtzSRUqB5BBts/q+82HvYxVM q5jc2nYEL95zl7km5a1VoRewL+voXkwKL8wgI2NCpzX7IczdOIt+EcXccwj2gYxF 9qT269mWtQkhPLmmXwKZFyVvNKvnamaon6js7mDwMtui3HaLSsI7RPRZRgY3SlYj +2vF0phIWohuRQ3WSC0y4EpCru9D5+fZT7aiF9/doxT7cFaZL1XORE5oUZqVvVc7 envM4UoP5RJGgV4j5pstzzGZgy9kQE6ElUz3K3Hac75F3yRgdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6wtRJkD7bo/odjNKEF0Rb8VfkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDI5NTExOGYtYjY4NC0z NDcwLWJhMmEtOGNiMTE1ZmFiMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd4hliyBBN+hhL3NUPNZkdsgmaREmli4+EpOYviIiUKo/R79podjtzL b/cIYADMl7IyDob/I+X0p4j/1NJr+H+6PO4rrI2LAe6j7dUMx1LOWjiBnpHImGbT S8irlDhhvgRriYB4oQrCyUR3o21jmunoOpMeqkTrCyXKlKuMx+7GTO3X7NdBAxpT 2qOFoOXHrkR1L+67fiin6MK4xVgvQAZe6iWQvtJfeLvW/86e9Kcj2XKyDVkk3fYe 2hPuQU6/xrXWPitOqX/L8bUAGP208FvAXVq92uctFBK9ZZ01WJvBqajRNFp1umKP i0bFenoRmfNHdU4Z9jZBg1Xj5QV6zY0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:24 2026 by rpki-client