$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/575b4fd3-700b-363b-ae68-3021e2fa154a.roa File: 575b4fd3-700b-363b-ae68-3021e2fa154a.roa (raw, json) Hash identifier: NJjoXy8o0sDADdcSPgjbOs2lq41T/1hGlNDif/gf6Qo= Subject key identifier: 1A:F7:F6:11:8A:0D:CB:1F:6C:75:36:63:90:28:C8:98:F7:B1:0A:E1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BD019F51EA6D2CB3F51A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/575b4fd3-700b-363b-ae68-3021e2fa154a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.251.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d0:19:f5:1e:a6:d2:cb:3f:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=74efc7e2-d3b3-4df6-be05-85dadc2f6328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:52:c1:86:71:14:ef:61:8b:83:1d:f4:cd:b8: bc:4e:6b:d0:d6:73:93:3e:82:c9:8d:89:a6:26:ad: 25:a8:6e:c6:be:1e:04:2b:97:a1:6e:07:1c:e7:49: 75:9f:b2:f3:e2:66:1e:0a:5f:4e:f1:df:51:24:75: 34:0c:90:a6:49:4c:1e:f9:18:7f:dd:ec:43:2d:99: 49:d2:39:c9:ca:dd:cd:05:25:98:82:52:7b:34:f3: 40:91:db:86:64:e8:0f:9c:b7:6a:c7:9c:9e:8e:69: 06:47:5f:7f:b5:06:f2:ed:c3:63:08:ad:ca:55:3b: 2b:31:37:71:51:93:69:00:df:c8:16:86:50:1d:9f: 48:51:d6:fa:f2:38:72:ad:c5:e6:4b:c5:36:37:27: 6c:91:1f:ee:85:14:61:08:3d:ca:08:bb:49:e8:2c: a0:4e:9b:6f:31:0d:7e:b9:36:34:1f:e3:24:a5:98: 65:2c:86:c0:b4:f4:5a:ff:d1:0f:7a:97:31:be:e9: 83:12:14:8b:96:40:43:e3:5e:08:15:88:55:8b:2c: 38:58:ef:78:b0:3b:f7:78:da:18:b0:70:2a:6f:2b: 4e:83:ae:ac:21:fd:17:80:45:83:9e:47:a9:ac:fd: c8:38:28:9d:c9:f3:04:a4:da:de:bb:56:78:a5:dd: 99:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F7:F6:11:8A:0D:CB:1F:6C:75:36:63:90:28:C8:98:F7:B1:0A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/575b4fd3-700b-363b-ae68-3021e2fa154a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4f:96:45:ad:a8:f4:fa:da:be:77:8c:5e:31:64:ca:0d:f4: 31:54:70:08:b0:dc:b6:5a:09:36:4a:ea:5f:52:ae:28:10:3d: 37:9a:c7:20:76:d2:66:7a:b9:2c:f0:ed:dc:fb:91:7b:78:90: 11:d3:7f:0e:b4:87:c2:75:fb:d2:73:ca:74:66:6e:67:3a:b3: ab:c8:2c:dc:68:76:43:be:ac:b0:fc:1b:fb:1b:c1:bc:95:21: ea:ba:dc:d5:27:5e:a8:f3:cd:7e:10:30:c6:00:7a:df:d2:e2: ec:e5:4a:12:1e:1f:82:e2:d8:cf:21:51:8d:59:ee:a6:91:8f: a3:21:b5:81:46:73:6a:2a:d5:83:61:28:09:d6:95:38:16:25: f2:20:4b:f4:05:e8:b5:ed:ef:47:83:9c:e3:77:48:11:1a:61: 5d:2a:e1:e5:aa:95:14:3b:82:0b:f9:51:ac:6f:a2:dc:1d:ad: 66:23:6d:e7:58:c8:fa:5c:7d:6c:db:c7:e5:73:39:94:0e:13: 87:18:ec:8f:c3:a8:27:19:1c:a9:fb:0c:aa:d3:a6:ef:08:1f: ae:3c:65:e0:c4:0d:d4:e0:99:d3:6a:d2:24:cc:23:ce:46:02: 98:c4:0a:2a:87:04:02:35:5e:46:5a:17:fc:b2:81:00:82:07: 3b:a2:c3:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm9AZ9R6m0ss/UaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NzRlZmM3ZTItZDNiMy00ZGY2LWJlMDUtODVkYWRjMmY2MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFLBhnEU72GLgx30zbi8TmvQ1nOTPoLJjYmm Jq0lqG7Gvh4EK5ehbgcc50l1n7Lz4mYeCl9O8d9RJHU0DJCmSUwe+Rh/3exDLZlJ 0jnJyt3NBSWYglJ7NPNAkduGZOgPnLdqx5yejmkGR19/tQby7cNjCK3KVTsrMTdx UZNpAN/IFoZQHZ9IUdb68jhyrcXmS8U2NydskR/uhRRhCD3KCLtJ6CygTptvMQ1+ uTY0H+MkpZhlLIbAtPRa/9EPepcxvumDEhSLlkBD414IFYhViyw4WO94sDv3eNoY sHAqbytOg66sIf0XgEWDnkeprP3IOCidyfMEpNreu1Z4pd2Z0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBr39hGKDcsfbHU2Y5AoyJj3sQrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTc1YjRmZDMtNzAwYi0z NjNiLWFlNjgtMzAyMWUyZmExNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRPlkWtqPT62r53jF4xZMoN9DFUcAiw3LZaCTZK6l9SrigQPTeaxyB2 0mZ6uSzw7dz7kXt4kBHTfw60h8J1+9JzynRmbmc6s6vILNxodkO+rLD8G/sbwbyV Ieq63NUnXqjzzX4QMMYAet/S4uzlShIeH4Li2M8hUY1Z7qaRj6MhtYFGc2oq1YNh KAnWlTgWJfIgS/QF6LXt70eDnON3SBEaYV0q4eWqlRQ7ggv5UaxvotwdrWYjbedY yPpcfWzbx+VzOZQOE4cY7I/DqCcZHKn7DKrTpu8IH648ZeDEDdTgmdNq0iTMI85G ApjECiqHBAI1XkZaF/yygQCCBzuiw24= -----END CERTIFICATE-----Generated at Sat Jun 13 13:12:09 2026 by rpki-client