$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa File: f3bba627-40b1-380e-8d96-0765b451c30c.roa (raw, json) Hash identifier: OJ07AA44dSGdjHo5X7GBHVqxu6sWDnQqHGy9X8UhntE= Subject key identifier: 0C:3B:15:74:88:21:19:40:B0:6F:19:B0:F7:48:EE:BE:DD:89:75:10 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3E0004C5C11FABA670BC18B0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:04:c5:c1:1f:ab:a6:70:bc:18:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=406d46a0-5dcc-44f2-aedc-cbc27cff7176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:94:12:8d:66:ba:da:ab:b1:1e:99:0b:14: 0e:25:f4:7a:b3:51:62:5f:57:12:30:02:d6:4e:fe: 73:51:8d:d9:65:e1:49:ad:09:6e:7e:c9:2e:e2:76: b1:22:5b:70:5f:03:ab:b1:e2:f1:a6:29:0e:05:cc: cb:9d:51:4b:49:64:78:35:9e:31:45:ce:21:e9:85: 8a:2c:90:77:d8:55:ec:76:88:57:ab:97:7a:95:09: bd:3c:bf:10:ef:27:49:cc:c3:d2:27:50:6a:0d:91: 12:f7:df:b9:0d:47:9e:df:77:45:a8:7e:ad:77:38: a8:e0:cc:13:fd:ff:34:82:b3:97:21:36:e6:21:89: 2b:52:bf:3c:98:19:bc:40:6a:62:88:7a:df:55:a9: 44:69:e4:da:69:5a:d0:e4:af:c5:22:0e:00:2a:1c: 77:ce:2b:6d:85:d4:29:d6:89:4a:08:d9:67:ad:b0: 59:96:77:ab:fa:dc:8e:01:57:be:93:02:7c:00:bb: 1c:4d:c2:13:75:20:14:ab:1e:80:90:98:76:8d:fe: 18:00:c6:85:a8:14:29:8d:f4:11:3d:b6:01:07:8f: b1:de:83:8f:d4:fa:56:a6:d6:41:ae:2f:a6:2a:a0: be:f0:d8:ae:94:d2:14:4f:72:04:78:dd:7a:8a:04: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3B:15:74:88:21:19:40:B0:6F:19:B0:F7:48:EE:BE:DD:89:75:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f3bba627-40b1-380e-8d96-0765b451c30c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e5:cf:46:e1:c8:53:b1:a7:12:51:0e:ba:5f:9b:96:3f:3a: aa:03:57:c3:b5:91:f6:0b:fc:1e:5c:5d:8e:25:98:9b:dd:22: 9c:1f:52:ab:ce:57:61:41:1e:28:ed:45:02:83:41:6c:7c:d3: ba:bf:f1:66:b0:50:c0:8d:56:61:ae:52:52:fe:7b:f7:9a:fe: df:60:6b:8e:a9:6c:d0:a6:26:ca:98:9f:9c:c3:82:d8:73:74: 37:4b:34:10:cb:60:86:94:80:ac:8b:83:79:40:1d:87:b8:e8: b3:3e:b9:cb:26:9a:e0:8d:2f:67:11:fd:e1:a7:1a:78:b6:96: de:3a:d9:b1:fe:58:af:ec:ed:54:01:43:4e:c4:f2:81:dd:b6: d5:5f:e6:a6:f8:dd:20:0f:51:1f:7d:07:7d:58:e4:e1:60:15: c5:84:d1:cc:a4:52:0a:34:10:1d:e2:d7:99:15:ca:e5:e6:6b: f1:b2:47:61:64:89:f2:61:1d:74:66:94:40:9b:ce:3d:4d:a9: 32:97:a8:60:b1:fa:92:0e:ae:05:f4:e7:71:9f:20:67:72:22: 16:0d:90:e0:be:c8:38:05:20:f6:0f:38:70:0c:ad:83:02:4c: f1:51:f1:0a:ca:9a:85:1a:f1:03:5a:ee:be:f9:5b:08:09:07: 69:97:c2:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AATFwR+rpnC8GLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDA2ZDQ2YTAtNWRjYy00NGYyLWFlZGMtY2JjMjdjZmY3MTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshOUEo1mutqrsR6ZCxQOJfR6s1FiX1cSMALW Tv5zUY3ZZeFJrQlufsku4naxIltwXwOrseLxpikOBczLnVFLSWR4NZ4xRc4h6YWK LJB32FXsdohXq5d6lQm9PL8Q7ydJzMPSJ1BqDZES99+5DUee33dFqH6tdzio4MwT /f80grOXITbmIYkrUr88mBm8QGpiiHrfValEaeTaaVrQ5K/FIg4AKhx3zitthdQp 1olKCNlnrbBZlner+tyOAVe+kwJ8ALscTcITdSAUqx6AkJh2jf4YAMaFqBQpjfQR PbYBB4+x3oOP1PpWptZBri+mKqC+8NiulNIUT3IEeN16igShMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw7FXSIIRlAsG8ZsPdI7r7diXUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjNiYmE2MjctNDBiMS0z ODBlLThkOTYtMDc2NWI0NTFjMzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrlz0bhyFOxpxJRDrpfm5Y/OqoDV8O1kfYL/B5cXY4lmJvdIpwfUqvO V2FBHijtRQKDQWx807q/8WawUMCNVmGuUlL+e/ea/t9ga46pbNCmJsqYn5zDgthz dDdLNBDLYIaUgKyLg3lAHYe46LM+ucsmmuCNL2cR/eGnGni2lt462bH+WK/s7VQB Q07E8oHdttVf5qb43SAPUR99B31Y5OFgFcWE0cykUgo0EB3i15kVyuXma/GyR2Fk ifJhHXRmlECbzj1NqTKXqGCx+pIOrgX053GfIGdyIhYNkOC+yDgFIPYPOHAMrYMC TPFR8QrKmoUa8QNa7r75WwgJB2mXwsE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:58 2026 by rpki-client