$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f524b4b0-5c67-361f-ac6e-a5dac08382f8.roa File: f524b4b0-5c67-361f-ac6e-a5dac08382f8.roa (raw, json) Hash identifier: T0hZJlz1/3spw4b5d4pn+8B6CwrhtTLGau7PEhM9N2g= Subject key identifier: A2:CA:36:F7:B1:16:6F:3A:5D:C9:09:72:1A:26:83:A2:82:6C:EE:2B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D3DFFD030539C6A11F19E76C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f524b4b0-5c67-361f-ac6e-a5dac08382f8.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 15169 IP address blocks: 142.251.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:d0:30:53:9c:6a:11:f1:9e:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=530aac6a-1aa4-4132-97a3-727672c38819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:41:ab:15:84:9a:b1:72:71:23:cd:eb:dd: b4:81:e5:62:90:30:75:e9:77:a3:42:9f:5a:75:4e: e6:a2:73:47:39:fd:d5:d4:db:fd:98:4f:45:aa:0e: 4e:06:bb:9e:4f:bf:2e:7a:3c:35:03:47:32:98:4e: 67:2d:41:b3:fc:7d:98:1c:f2:59:0c:06:2e:58:43: d8:01:91:80:75:1c:7b:d0:30:36:e7:c3:ab:cd:b1: 50:ed:92:fc:7a:87:9c:62:ab:cc:29:66:be:8f:95: 19:58:5d:10:61:03:10:68:3a:44:37:94:ac:15:40: ae:3b:a8:b5:38:45:d8:99:47:40:fe:cc:24:4b:b5: ef:e6:81:89:f6:05:c6:29:fb:fa:eb:72:d0:ab:f7: 5c:6e:fb:53:74:5d:e3:6f:8b:ab:d1:0a:22:52:08: 03:2d:a7:4b:3f:d8:e6:2f:f0:30:c3:2c:69:be:e5: 93:59:aa:9a:49:a7:1a:3b:78:b3:36:72:46:41:73: 9b:21:e8:66:d3:0a:89:af:b5:34:05:73:fc:0a:68: 3f:cc:66:87:47:a8:4f:60:61:a4:67:55:d2:02:48: 4f:f7:af:a0:ff:d3:10:64:e5:8a:c7:a1:c8:02:4e: 8e:78:8e:fb:bc:fc:9f:cb:7d:de:a6:8f:cc:cc:d0: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CA:36:F7:B1:16:6F:3A:5D:C9:09:72:1A:26:83:A2:82:6C:EE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f524b4b0-5c67-361f-ac6e-a5dac08382f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3d:a4:4b:02:d2:78:04:0b:27:fe:4d:a9:14:7e:6c:db:e8: e4:3a:37:69:e6:91:66:bc:a3:a7:e3:ac:45:e6:87:47:a5:34: 5a:07:73:62:eb:b8:de:e4:91:83:26:2e:82:20:4a:d0:05:58: 07:9d:71:1d:ae:a6:d5:06:ca:25:8a:17:6a:7a:56:32:c4:07: 3d:b3:89:26:be:0e:88:6c:47:4d:7c:34:73:46:b5:1f:e4:12: 78:d5:c3:3f:52:87:15:8a:e1:69:63:9a:27:4c:20:04:b7:94: 3d:cf:2f:0c:95:34:10:da:f9:3a:cf:3c:32:2f:ec:1a:67:5f: 3f:ca:e4:8a:71:5e:c4:e8:25:26:37:cd:a1:30:ec:04:48:7d: 2a:ee:fc:1a:7e:a4:27:df:2f:8e:a7:e0:21:1b:d3:56:1e:3a: e9:f8:14:63:54:95:00:c7:37:19:63:2a:6f:9c:1d:9d:78:08: 3a:69:0d:c6:f4:b6:fc:f3:5a:db:45:7a:3a:01:2f:01:6c:9f: 07:6e:1e:69:3b:25:94:31:d0:70:d0:66:97:f4:d9:5e:31:bb: 0a:01:55:6b:bc:ab:55:1c:86:27:51:c8:bf:cc:65:77:05:ca: f8:1f:1b:f8:97:64:95:09:13:73:2a:0a:c6:00:06:dd:16:5e: b2:37:1f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/9AwU5xqEfGedsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NTMwYWFjNmEtMWFhNC00MTMyLTk3YTMtNzI3NjcyYzM4ODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gNBqxWEmrFycSPN6920geVikDB16XejQp9a dU7monNHOf3V1Nv9mE9Fqg5OBrueT78uejw1A0cymE5nLUGz/H2YHPJZDAYuWEPY AZGAdRx70DA258OrzbFQ7ZL8eoecYqvMKWa+j5UZWF0QYQMQaDpEN5SsFUCuO6i1 OEXYmUdA/swkS7Xv5oGJ9gXGKfv663LQq/dcbvtTdF3jb4ur0QoiUggDLadLP9jm L/AwwyxpvuWTWaqaSacaO3izNnJGQXObIehm0wqJr7U0BXP8Cmg/zGaHR6hPYGGk Z1XSAkhP96+g/9MQZOWKx6HIAk6OeI77vPyfy33epo/MzNCqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLKNvexFm86XckJchomg6KCbO4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjUyNGI0YjAtNWM2Ny0z NjFmLWFjNmUtYTVkYWMwODM4MmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvseMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY9pEsC0ngECyf+TakUfmzb6OQ6N2nmkWa8o6fjrEXmh0elNFoHc2Lr uN7kkYMmLoIgStAFWAedcR2uptUGyiWKF2p6VjLEBz2ziSa+DohsR018NHNGtR/k EnjVwz9ShxWK4WljmidMIAS3lD3PLwyVNBDa+TrPPDIv7BpnXz/K5IpxXsToJSY3 zaEw7ARIfSru/Bp+pCffL46n4CEb01YeOun4FGNUlQDHNxljKm+cHZ14CDppDcb0 tvzzWttFejoBLwFsnwduHmk7JZQx0HDQZpf02V4xuwoBVWu8q1UchidRyL/MZXcF yvgfG/iXZJUJE3MqCsYABt0WXrI3HyM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:16:30 2026 by rpki-client