$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa File: 4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa (raw, json) Hash identifier: MFfa1nMs0rL67eVw6GB4YHeN8yKyfkW1lO1cUs9/Fb0= Subject key identifier: 0E:4B:F5:23:BE:75:69:C2:B9:00:F3:D0:59:EA:09:BE:C4:F5:FF:92 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BC64476672C12BA83C900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.251.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:c6:44:76:67:2c:12:ba:83:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=479b8e59-989b-4b0b-94e1-f1661dc18d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2f:68:c3:4d:59:ba:bc:72:88:d8:09:73:ea: 01:c3:c0:9a:28:75:e2:d4:65:14:dd:ca:fd:20:7f: e6:44:82:af:fa:bd:1f:91:7a:c1:1a:e9:6c:af:07: 89:d6:ef:22:a2:a0:6d:69:47:06:38:d5:d4:e9:53: 3d:76:cc:77:bb:7d:e7:26:13:97:4c:ed:9b:1e:63: 01:ab:4f:2a:ce:fb:95:20:a9:10:85:e8:5f:f6:0c: f8:98:dd:2b:7c:78:1e:4d:b8:05:37:be:7a:69:a7: a5:ad:56:18:ff:76:91:6a:58:35:f8:2b:f6:1f:42: c1:99:6e:01:dc:8a:f5:85:f0:0b:ee:de:89:b8:62: 09:de:b7:42:1e:5f:55:ba:da:1d:0c:87:b6:2b:02: 5b:d7:40:51:96:c9:bd:3e:fe:6a:b1:77:24:81:be: e4:43:ee:80:00:e5:a9:23:10:7f:96:a2:31:4c:f3: 9d:eb:6b:be:d1:82:99:c7:7f:0f:29:f2:10:63:61: 2b:a6:bf:60:a8:70:6f:9e:1b:18:1e:6e:69:38:d4: 7f:e0:dd:2e:1d:49:74:53:e7:2b:07:95:3b:78:28: 50:5d:25:cc:3b:80:75:f5:8f:25:e8:5c:46:3b:e4: fc:08:89:3e:4b:e4:30:5a:b4:22:26:b0:4a:60:fe: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4B:F5:23:BE:75:69:C2:B9:00:F3:D0:59:EA:09:BE:C4:F5:FF:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b037f8d-d148-3ff7-9be7-30c4a4ff5729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d1:33:d1:05:8a:69:fa:e1:12:52:28:4d:ff:46:7e:96:0a: 28:aa:50:94:e7:95:47:71:2a:0d:c1:49:57:f6:ba:f6:8a:0d: 26:34:08:73:a1:5c:1c:2d:58:c0:b9:b8:b4:5c:b2:f0:a7:e6: 4d:d4:3a:fb:fd:e6:9a:99:33:c9:f3:e1:33:8f:d0:89:9e:92: be:23:37:df:95:6b:14:33:8a:d9:0b:7e:23:9d:57:0d:6b:05: 13:af:cc:da:ef:02:0d:8b:69:61:f0:91:9a:f6:79:68:6a:a5: 67:cd:23:be:48:37:f1:eb:87:bc:b1:17:6c:e0:21:2d:15:de: eb:09:a7:69:f1:a1:69:ca:6f:05:27:aa:e7:b7:6f:7c:72:b4: 7c:bf:e2:a1:fa:f0:d9:66:7c:51:bd:78:3f:34:58:3e:f2:68: 17:e1:a0:0a:b7:1e:ae:a2:53:96:ba:49:2a:59:ee:0a:b0:c0: 70:13:60:4c:1d:40:42:fd:59:77:76:91:ea:92:1a:0e:a9:5a: 87:53:f2:41:a7:b9:10:95:ed:0a:cb:17:1b:4b:08:57:86:6c: df:97:74:7a:a9:f7:ee:a2:81:cc:9e:6a:b9:37:88:48:81:9a: b7:4e:e5:44:1b:5f:d8:ce:f8:43:7e:ea:8d:5a:20:18:3e:ae: 8f:e6:91:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm8ZEdmcsErqDyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDc5YjhlNTktOTg5Yi00YjBiLTk0ZTEtZjE2NjFkYzE4ZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i9ow01ZurxyiNgJc+oBw8CaKHXi1GUU3cr9 IH/mRIKv+r0fkXrBGulsrweJ1u8ioqBtaUcGONXU6VM9dsx3u33nJhOXTO2bHmMB q08qzvuVIKkQhehf9gz4mN0rfHgeTbgFN756aaelrVYY/3aRalg1+Cv2H0LBmW4B 3Ir1hfAL7t6JuGIJ3rdCHl9VutodDIe2KwJb10BRlsm9Pv5qsXckgb7kQ+6AAOWp IxB/lqIxTPOd62u+0YKZx38PKfIQY2Erpr9gqHBvnhsYHm5pONR/4N0uHUl0U+cr B5U7eChQXSXMO4B19Y8l6FxGO+T8CIk+S+QwWrQiJrBKYP7jHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5L9SO+dWnCuQDz0FnqCb7E9f+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGIwMzdmOGQtZDE0OC0z ZmY3LTliZTctMzBjNGE0ZmY1NzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3RM9EFimn64RJSKE3/Rn6WCiiqUJTnlUdxKg3BSVf2uvaKDSY0CHOh XBwtWMC5uLRcsvCn5k3UOvv95pqZM8nz4TOP0Imekr4jN9+VaxQzitkLfiOdVw1r BROvzNrvAg2LaWHwkZr2eWhqpWfNI75IN/Hrh7yxF2zgIS0V3usJp2nxoWnKbwUn que3b3xytHy/4qH68NlmfFG9eD80WD7yaBfhoAq3Hq6iU5a6SSpZ7gqwwHATYEwd QEL9WXd2keqSGg6pWodT8kGnuRCV7QrLFxtLCFeGbN+XdHqp9+6igcyeark3iEiB mrdO5UQbX9jO+EN+6o1aIBg+ro/mkb0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:21 2026 by rpki-client