$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa File: 5a720a5a-25e3-3747-9676-70856a8a9f69.roa (raw, json) Hash identifier: lZFkQ9kQovXKuPtudbTZPm1YxET4kKv3uZ3Eb0bmZ8s= Subject key identifier: 6A:44:39:33:C8:F3:C5:7B:03:23:18:63:30:5A:E7:D2:6D:4F:40:71 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C3C46ABA9C3F82E6A2700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.251.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:3c:46:ab:a9:c3:f8:2e:6a:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=bc22c85a-2e17-4129-b633-946cc09b737c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:a0:64:5a:2a:c2:6e:e7:f1:25:f7:4f:05: a1:8d:77:3d:bd:4f:87:ad:6f:75:1e:85:98:5a:5a: e9:29:3b:01:8e:d4:74:00:00:37:06:29:80:6a:6d: db:8c:8e:99:fb:e9:e0:e9:db:02:44:7a:da:f9:4d: cc:20:29:be:e4:3a:0f:8e:a4:e9:c1:8e:08:5c:06: 68:44:b4:55:89:23:9b:24:c3:52:8f:8c:68:b9:13: da:a4:e8:f6:31:f1:a7:9b:ed:2b:a4:17:ab:b6:bd: af:60:4e:dd:89:2f:1b:a3:d3:31:e2:41:e6:45:44: cd:1e:ed:b8:41:f1:87:3c:7d:d6:c7:a6:0c:96:fa: df:16:f3:38:e1:9e:46:b7:3b:b9:fa:ba:6d:32:7c: e7:b9:05:f1:92:7e:d5:11:c9:04:25:4f:97:ab:20: cd:b8:1e:7e:64:65:48:52:61:57:29:d3:c2:da:59: 77:54:af:77:fc:44:87:63:3e:fa:d1:71:f0:cf:c2: 09:6a:a9:5c:33:9a:37:b3:3b:83:ba:9d:9b:da:74: d5:54:ec:64:39:71:91:21:b5:75:5a:94:e7:3e:7b: af:24:32:5b:e4:1c:99:06:cd:61:85:bf:97:0d:07: 05:af:51:b1:69:cd:e2:22:48:15:69:67:5a:e2:5d: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:44:39:33:C8:F3:C5:7B:03:23:18:63:30:5A:E7:D2:6D:4F:40:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a720a5a-25e3-3747-9676-70856a8a9f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:04:69:34:6f:98:af:58:3e:73:19:95:45:50:1b:59:ac:e6: 59:be:58:e2:46:8c:d0:71:13:3d:a0:41:ee:33:8d:e0:5d:c1: 25:ab:4e:e2:f2:75:83:43:86:1a:78:82:ac:c3:e2:fc:40:95: de:16:34:5c:2b:ff:bf:5b:fc:cb:29:d2:cb:b8:5c:99:f3:57: fd:09:3a:d8:59:a1:7b:53:99:87:62:53:26:10:10:38:f3:ef: 80:ca:1b:7e:7c:c6:89:a8:4e:df:8f:29:26:24:e7:f4:c5:e5: 53:45:06:5f:ad:ad:44:35:7c:e4:c9:75:f3:15:76:b2:13:fc: 0c:a2:c1:d6:67:ac:69:f0:c7:59:bb:cb:0f:61:49:d0:6d:d6: be:3c:37:77:00:3a:92:9e:c5:99:7c:75:3d:fb:60:f0:59:32: 2d:06:f3:9f:8f:cf:18:21:42:da:a6:03:a7:9f:24:47:3f:07: 7f:39:f3:25:2e:73:8e:54:f8:0d:1d:3d:33:88:b8:89:a8:9a: f2:5e:55:07:5d:1f:ff:fd:28:28:2a:15:c0:f3:37:76:ac:e8: 3d:9d:4d:9d:43:fb:a6:cb:6c:40:0b:28:38:5f:59:74:f4:2a: 84:b7:a1:44:15:ed:27:dc:58:1c:55:b0:b3:1e:4d:e1:ff:cb: 20:7b:57:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnDxGq6nD+C5qJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YmMyMmM4NWEtMmUxNy00MTI5LWI2MzMtOTQ2Y2MwOWI3MzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWOgZFoqwm7n8SX3TwWhjXc9vU+HrW91HoWY WlrpKTsBjtR0AAA3BimAam3bjI6Z++ng6dsCRHra+U3MICm+5DoPjqTpwY4IXAZo RLRViSObJMNSj4xouRPapOj2MfGnm+0rpBertr2vYE7diS8bo9Mx4kHmRUTNHu24 QfGHPH3Wx6YMlvrfFvM44Z5Gtzu5+rptMnznuQXxkn7VEckEJU+XqyDNuB5+ZGVI UmFXKdPC2ll3VK93/ESHYz760XHwz8IJaqlcM5o3szuDup2b2nTVVOxkOXGRIbV1 WpTnPnuvJDJb5ByZBs1hhb+XDQcFr1Gxac3iIkgVaWda4l3UWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpEOTPI88V7AyMYYzBa59JtT0BxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE3MjBhNWEtMjVlMy0z NzQ3LTk2NzYtNzA4NTZhOGE5ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkEaTRvmK9YPnMZlUVQG1ms5lm+WOJGjNBxEz2gQe4zjeBdwSWrTuLy dYNDhhp4gqzD4vxAld4WNFwr/79b/Msp0su4XJnzV/0JOthZoXtTmYdiUyYQEDjz 74DKG358xomoTt+PKSYk5/TF5VNFBl+trUQ1fOTJdfMVdrIT/AyiwdZnrGnwx1m7 yw9hSdBt1r48N3cAOpKexZl8dT37YPBZMi0G85+PzxghQtqmA6efJEc/B3858yUu c45U+A0dPTOIuImomvJeVQddH//9KCgqFcDzN3as6D2dTZ1D+6bLbEALKDhfWXT0 KoS3oUQV7SfcWBxVsLMeTeH/yyB7V/s= -----END CERTIFICATE-----Generated at Sat Jun 13 13:33:50 2026 by rpki-client