$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa File: f3bba627-40b1-380e-8d96-0765b451c30c.roa (raw, json) Hash identifier: nVAnAZnNBuS8OhUcrGj8IMIGPM1c1vH+4XPYM19U7BI= Subject key identifier: 04:33:35:36:F2:77:2B:6D:E2:67:F2:00:A7:22:F1:75:8F:34:E7:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6293079AB8142796C7D95500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.251.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:9a:b8:14:27:96:c7:d9:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ff7265c9-5f5c-4add-b81e-63bd1bab3127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:33:a4:e0:7a:9d:6f:55:2e:ed:4e:b2:08: 5f:19:01:88:74:d5:a1:0a:11:55:c1:6f:da:1c:17: 11:be:84:84:f9:90:3c:01:4d:44:73:00:fa:f9:cd: 2c:88:b2:19:72:50:a7:f0:19:80:75:96:e8:6e:f7: 4d:e4:85:d5:77:8d:d2:d4:03:e6:68:9a:62:51:ec: 62:07:bb:d5:60:c5:a5:0b:98:c8:51:33:4d:ee:ce: 59:4a:05:1e:7c:35:48:fd:b2:16:9b:e8:35:40:5f: ab:d3:e8:17:ca:2d:20:5c:80:37:1f:22:1c:2d:83: b6:97:ad:e6:1f:4c:10:d2:1f:cb:b3:a9:3d:6c:9f: c2:08:3e:4b:17:10:fe:9a:69:a9:0e:a3:e9:90:ef: 6c:04:c1:01:17:6b:9e:42:6e:87:39:81:7d:09:f3: 32:7c:32:94:7e:42:59:e4:61:fc:1c:31:29:f0:b1: d9:7b:f5:f3:ee:a0:69:8b:49:f7:7e:3b:a4:f4:ab: 66:ae:75:4a:bc:6a:9e:a8:ae:76:85:1f:96:28:98: a2:36:24:ed:75:84:ca:6b:c4:1b:26:4a:83:e8:5f: 05:ec:1e:63:99:fb:28:a9:c2:ae:90:e9:13:be:21: 67:a5:c2:3e:ae:5d:aa:e6:78:95:5f:31:74:b8:ad: 9f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:35:36:F2:77:2B:6D:E2:67:F2:00:A7:22:F1:75:8F:34:E7:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1c:53:d9:24:f8:78:7e:97:af:cc:3f:73:32:5d:10:af:89: 02:cd:a4:16:4d:13:15:40:85:99:0a:32:86:e2:66:a2:da:b4: 63:5f:94:97:d4:4d:2c:d0:28:f9:7c:5a:08:10:8d:c4:da:70: bc:2e:f3:e4:29:3a:de:5d:11:ee:1e:b2:4d:08:f6:8b:67:ba: 9e:18:71:77:f5:39:79:21:6c:3d:61:2d:69:0e:04:eb:77:99: 00:b0:65:54:95:b1:f1:2b:e9:33:c6:ca:5b:63:d2:9e:12:f5: f3:6d:53:f3:97:19:56:18:71:b2:dd:a2:25:fb:44:dc:21:61: 6f:b9:7c:c2:bb:1d:ef:aa:9c:12:8e:f3:9d:3c:62:ee:1e:2c: 43:e1:34:e2:3b:79:8c:af:64:fc:77:f0:17:2c:d2:e3:7f:10: 27:4c:89:b7:ab:75:7f:0e:f0:b3:26:91:a1:a5:56:9c:8e:73: a2:02:95:71:00:26:ec:c3:89:58:da:c3:07:f4:89:72:73:37: 2d:58:a0:23:63:69:c3:78:ba:a0:aa:07:65:d2:35:2f:c7:12: 3c:9f:74:a2:0b:c2:fd:19:d8:7b:39:e9:5e:67:16:4a:80:f0: 24:b2:a1:6c:87:09:7d:44:92:54:63:b9:60:10:d6:f9:fb:f2: 72:bf:c8:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikweauBQnlsfZVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZmY3MjY1YzktNWY1Yy00YWRkLWI4MWUtNjNiZDFiYWIzMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNUzpOB6nW9VLu1OsghfGQGIdNWhChFVwW/a HBcRvoSE+ZA8AU1EcwD6+c0siLIZclCn8BmAdZbobvdN5IXVd43S1APmaJpiUexi B7vVYMWlC5jIUTNN7s5ZSgUefDVI/bIWm+g1QF+r0+gXyi0gXIA3HyIcLYO2l63m H0wQ0h/Ls6k9bJ/CCD5LFxD+mmmpDqPpkO9sBMEBF2ueQm6HOYF9CfMyfDKUfkJZ 5GH8HDEp8LHZe/Xz7qBpi0n3fjuk9KtmrnVKvGqeqK52hR+WKJiiNiTtdYTKa8Qb JkqD6F8F7B5jmfsoqcKukOkTviFnpcI+rl2q5niVXzF0uK2fIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQzNTbydytt4mfyAKci8XWPNOd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjNiYmE2MjctNDBiMS0z ODBlLThkOTYtMDc2NWI0NTFjMzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkcU9kk+Hh+l6/MP3MyXRCviQLNpBZNExVAhZkKMobiZqLatGNflJfU TSzQKPl8WggQjcTacLwu8+QpOt5dEe4esk0I9otnup4YcXf1OXkhbD1hLWkOBOt3 mQCwZVSVsfEr6TPGyltj0p4S9fNtU/OXGVYYcbLdoiX7RNwhYW+5fMK7He+qnBKO 8508Yu4eLEPhNOI7eYyvZPx38Bcs0uN/ECdMiberdX8O8LMmkaGlVpyOc6IClXEA JuzDiVjawwf0iXJzNy1YoCNjacN4uqCqB2XSNS/HEjyfdKILwv0Z2Hs56V5nFkqA 8CSyoWyHCX1EklRjuWAQ1vn78nK/yP8= -----END CERTIFICATE-----Generated at Sun Nov 15 13:17:22 2026 by rpki-client