$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa File: 60a013d0-02a4-37bc-80b4-e210514778da.roa (raw, json) Hash identifier: JE+X70W/B6jEmZ6ttLF24dJOK+YZ+eE+F0V2MYci2wg= Subject key identifier: 3A:28:40:55:E0:AF:E5:D5:AB:F6:96:29:A3:12:93:8B:03:80:A2:8F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A077F725F647B8A971A1E4 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 142.251.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:77:f7:25:f6:47:b8:a9:71:a1:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d92da7a9-5f8f-4cd3-aa24-8ec6d2e83750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:41:44:c4:d7:bc:37:ab:17:15:fc:92:ba: 7b:72:37:52:83:3c:d7:36:3e:70:d1:c5:ed:62:05: 9b:6f:ee:5b:5f:72:7a:ac:20:da:78:ea:2c:8c:a4: 11:94:09:1c:72:28:07:ce:3d:e7:05:98:d1:09:c0: e1:e6:4c:47:5c:c3:df:6b:f4:3f:9f:3e:b5:ba:75: 20:c0:be:30:78:c0:71:6e:78:46:b9:b6:ff:2b:5e: ad:ba:0c:fc:68:7b:f6:5b:26:18:56:24:b1:20:3c: 46:20:b7:f7:e2:18:97:1f:66:c7:ad:21:37:21:01: 7c:0c:6a:9c:1f:f9:03:dc:71:cb:af:83:dd:97:3e: cc:eb:c9:1a:8e:b3:83:b5:83:88:ed:63:af:1c:ea: 1e:9e:06:b6:d0:55:55:47:5d:ff:89:fb:60:0c:94: cd:60:96:7e:d2:b2:73:a6:f6:63:ea:d3:a8:4a:5a: 91:48:e8:2d:f7:4b:d3:72:25:9b:7b:3b:5e:f5:fd: 75:1f:1b:11:af:63:16:c2:eb:fa:42:ab:5f:64:e7: 9c:d1:a6:71:7f:64:1e:36:82:ae:09:bb:46:09:bf: 63:89:e4:b0:d2:61:74:39:e8:eb:30:c2:b5:71:80: 4d:19:57:d5:e6:fa:9c:a1:e4:54:f0:61:f8:8b:e3: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:40:55:E0:AF:E5:D5:AB:F6:96:29:A3:12:93:8B:03:80:A2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7a:f8:09:f3:3d:f4:77:e7:51:6f:e3:d1:15:f0:29:f3:64: 97:06:a3:7c:e4:81:d4:d9:02:0b:f7:b8:25:55:e6:20:ed:60: 4b:42:eb:9c:eb:c1:0d:dc:6a:3c:56:0b:36:60:ae:e1:3a:c9: 59:eb:de:f9:58:12:2c:4d:0f:95:93:1d:da:2f:87:e6:39:18: fc:2e:e4:71:6b:35:b4:74:0d:b8:b2:26:f2:33:9b:b1:35:ee: 53:d7:ae:a8:29:15:f1:eb:60:fc:36:d0:27:44:84:ed:d0:5c: 94:c3:19:cb:9f:c2:f5:58:a1:c4:16:1b:95:0f:c2:02:e1:a5: 83:e7:a4:24:b0:a3:38:47:43:38:76:1f:f7:03:4e:f1:54:56: e8:a0:81:e7:7e:67:56:03:f5:c3:b4:d1:a5:92:0e:4a:d4:c9: ab:74:c0:66:56:fe:38:3d:4d:fc:bd:2c:cd:e7:c7:60:67:21: ea:26:32:63:e3:97:ea:bb:e9:73:3d:3d:29:4f:28:3b:91:2c: 8a:ad:ff:47:87:d8:34:ee:9f:6b:9b:ec:33:81:3f:95:7d:ea: 9f:2c:f8:bd:2f:89:1d:79:b5:34:82:d5:93:e8:06:6d:1a:1d: 78:4e:30:9b:0b:df:72:d1:3c:c8:19:48:47:2f:46:c0:4f:cc: 05:9d:09:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noHf3JfZHuKlxoeQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDkyZGE3YTktNWY4Zi00Y2QzLWFhMjQtOGVjNmQyZTgzNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozhBRMTXvDerFxX8krp7cjdSgzzXNj5w0cXt YgWbb+5bX3J6rCDaeOosjKQRlAkccigHzj3nBZjRCcDh5kxHXMPfa/Q/nz61unUg wL4weMBxbnhGubb/K16tugz8aHv2WyYYViSxIDxGILf34hiXH2bHrSE3IQF8DGqc H/kD3HHLr4Pdlz7M68kajrODtYOI7WOvHOoenga20FVVR13/iftgDJTNYJZ+0rJz pvZj6tOoSlqRSOgt90vTciWbezte9f11HxsRr2MWwuv6QqtfZOec0aZxf2QeNoKu CbtGCb9jieSw0mF0OejrMMK1cYBNGVfV5vqcoeRU8GH4i+OVUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDooQFXgr+XVq/aWKaMSk4sDgKKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjBhMDEzZDAtMDJhNC0z N2JjLTgwYjQtZTIxMDUxNDc3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB56+AnzPfR351Fv49EV8CnzZJcGo3zkgdTZAgv3uCVV5iDtYEtC65zr wQ3cajxWCzZgruE6yVnr3vlYEixND5WTHdovh+Y5GPwu5HFrNbR0DbiyJvIzm7E1 7lPXrqgpFfHrYPw20CdEhO3QXJTDGcufwvVYocQWG5UPwgLhpYPnpCSwozhHQzh2 H/cDTvFUVuigged+Z1YD9cO00aWSDkrUyat0wGZW/jg9Tfy9LM3nx2BnIeomMmPj l+q76XM9PSlPKDuRLIqt/0eH2DTun2ub7DOBP5V96p8s+L0viR15tTSC1ZPoBm0a HXhOMJsL33LRPMgZSEcvRsBPzAWdCeA= -----END CERTIFICATE-----Generated at Wed Jul 29 05:04:18 2026 by rpki-client