$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a6e1cd7-cde7-331d-b532-920657d287c0.roa File: 0a6e1cd7-cde7-331d-b532-920657d287c0.roa (raw, json) Hash identifier: fD6L9WS198WQpyvnNQWDGbVAGk+SYwA7pi+/BTWIQCg= Subject key identifier: 87:57:F0:3C:32:A3:17:ED:5B:2E:79:C2:15:76:9D:DC:92:E5:C1:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629308F3FF4936633CEFE180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a6e1cd7-cde7-331d-b532-920657d287c0.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.251.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:08:f3:ff:49:36:63:3c:ef:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9abf0408-d243-43a8-9418-73de015fc370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:87:b5:f4:97:8d:be:3a:b0:e3:31:c9:77: 59:52:e8:c5:df:48:70:9a:db:4d:32:fe:50:d5:ae: 14:4d:ba:9c:69:04:2a:45:55:54:a0:6a:60:93:f2: 0f:d6:a6:85:a6:bb:e1:d4:16:2a:86:6a:c7:5b:5d: 5a:a3:99:9d:72:23:82:5a:9b:5c:b1:83:a3:2b:3f: 99:d8:79:e9:b9:bb:01:84:98:cc:df:11:79:ed:de: 6b:43:ec:b0:60:60:63:ae:b7:f2:ad:f3:72:e5:0c: 85:ac:76:44:43:f9:db:6c:0f:e9:00:2d:15:0f:fa: 8e:4b:c1:41:93:e4:e6:05:4f:cb:1d:39:e4:9f:05: ca:83:67:4f:67:ee:26:da:ac:87:16:38:cf:40:42: 24:e8:b8:16:04:62:e4:92:9a:12:c9:be:73:42:3b: bd:1e:ab:a8:3d:ff:e1:a0:ea:9e:2c:8d:21:f0:01: 1a:af:59:69:16:67:3f:69:86:01:b0:d9:8a:78:1a: 78:0b:79:d7:9d:74:a2:51:01:33:f7:33:85:9e:22: d6:4c:1c:4e:08:30:e8:1d:7f:8c:71:ff:af:72:e5: 36:45:38:f2:6f:27:76:3f:15:d2:9a:34:19:9f:6d: 1f:2a:aa:19:30:7e:74:db:78:82:f0:06:4b:5a:50: a3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:57:F0:3C:32:A3:17:ED:5B:2E:79:C2:15:76:9D:DC:92:E5:C1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a6e1cd7-cde7-331d-b532-920657d287c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:08:56:f9:f1:b2:d6:78:1d:8b:e7:bc:0a:21:13:5d:74:66: 21:15:ab:aa:31:07:12:3b:63:38:dc:1b:66:47:8c:3f:3c:94: 69:02:69:18:c5:f6:95:a4:74:18:de:06:ea:e9:f3:c7:35:1f: a0:14:85:1c:61:6b:85:70:00:8d:7b:c4:01:b7:aa:1f:67:db: e3:fa:3e:11:ee:11:d1:5b:7b:01:1c:2f:8a:3f:a4:7f:63:e4: 99:e4:31:bd:26:7f:4d:28:ea:a5:99:63:cf:ef:dd:0d:d9:c2: 74:96:ee:ff:72:0b:4a:57:49:a6:87:8a:aa:38:11:ee:5c:ff: 48:56:e8:7f:2c:fe:ee:d6:e2:dd:39:ed:cd:e7:01:8d:29:71: 07:e6:76:ef:58:cf:5f:15:43:ac:cf:9a:ec:d3:b9:99:5d:eb: 25:cc:4d:5f:e5:92:07:19:6c:94:e7:c7:e1:8d:b8:df:75:fc: f8:c6:90:d1:24:ec:f5:37:8f:fb:f3:4c:d0:11:99:5a:b9:0b: aa:46:3a:d0:e8:04:b6:b2:81:70:d0:72:be:e3:13:7b:5e:96: b7:99:4a:f9:b1:6d:ba:9a:ee:02:16:b8:43:d8:72:4a:1a:4a: cd:69:48:ad:80:5a:67:8b:df:51:aa:57:5d:4c:c7:10:fc:f1: c5:5d:e4:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwjz/0k2Yzzv4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OWFiZjA0MDgtZDI0My00M2E4LTk0MTgtNzNkZTAxNWZjMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfeHtfSXjb46sOMxyXdZUujF30hwmttNMv5Q 1a4UTbqcaQQqRVVUoGpgk/IP1qaFprvh1BYqhmrHW11ao5mdciOCWptcsYOjKz+Z 2HnpubsBhJjM3xF57d5rQ+ywYGBjrrfyrfNy5QyFrHZEQ/nbbA/pAC0VD/qOS8FB k+TmBU/LHTnknwXKg2dPZ+4m2qyHFjjPQEIk6LgWBGLkkpoSyb5zQju9HquoPf/h oOqeLI0h8AEar1lpFmc/aYYBsNmKeBp4C3nXnXSiUQEz9zOFniLWTBxOCDDoHX+M cf+vcuU2RTjybyd2PxXSmjQZn20fKqoZMH5023iC8AZLWlCjuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdX8DwyoxftWy55whV2ndyS5cFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGE2ZTFjZDctY2RlNy0z MzFkLWI1MzItOTIwNjU3ZDI4N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQIVvnxstZ4HYvnvAohE110ZiEVq6oxBxI7YzjcG2ZHjD88lGkCaRjF 9pWkdBjeBurp88c1H6AUhRxha4VwAI17xAG3qh9n2+P6PhHuEdFbewEcL4o/pH9j 5JnkMb0mf00o6qWZY8/v3Q3ZwnSW7v9yC0pXSaaHiqo4Ee5c/0hW6H8s/u7W4t05 7c3nAY0pcQfmdu9Yz18VQ6zPmuzTuZld6yXMTV/lkgcZbJTnx+GNuN91/PjGkNEk 7PU3j/vzTNARmVq5C6pGOtDoBLaygXDQcr7jE3telreZSvmxbbqa7gIWuEPYckoa Ss1pSK2AWmeL31GqV11MxxD88cVd5Ks= -----END CERTIFICATE-----Generated at Tue Nov 10 20:36:43 2026 by rpki-client