$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa File: 60a013d0-02a4-37bc-80b4-e210514778da.roa (raw, json) Hash identifier: WZtZtDfzGVbWbMK0/aeGsc855wgCNDPFhuHwVdsLd3k= Subject key identifier: BB:73:8E:F7:CB:56:AF:5E:B5:3D:A7:4D:72:C1:D7:49:59:BA:73:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C51D90DDC2D2B98596A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.251.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:51:d9:0d:dc:2d:2b:98:59:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=bf1a222d-123e-4e1c-a0ae-5385e3ae0ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:9c:bf:f8:6e:4e:ce:c1:34:03:87:3e:f3: 32:3e:69:22:d1:c7:4a:29:0a:71:76:51:0a:c3:a4: 87:ca:d4:f2:f6:78:68:6f:25:bb:df:76:68:90:44: 70:94:2a:35:33:70:7d:1f:38:7f:47:4b:ca:e5:03: 74:c5:28:db:36:b0:2f:1e:cb:50:d7:a8:8d:54:32: 83:27:4a:28:94:07:5b:97:e6:86:43:7f:68:ab:8e: ae:e7:04:31:b3:2d:b7:f3:ee:d4:32:13:26:c3:ef: 4c:3a:ec:98:48:b8:01:6b:e5:58:d9:aa:d2:e4:50: b6:48:e3:0b:0b:f7:fd:88:81:ed:d8:5a:79:c0:bc: 2a:a0:f0:bc:e2:b6:94:0c:9e:f4:21:8f:1d:c7:a2: ff:6f:83:40:9d:48:b2:4d:a5:48:9b:ab:35:c7:b8: 1a:c9:45:62:c1:2f:7e:d2:62:8c:a6:d1:a2:0c:24: e1:59:b4:50:65:38:1e:1c:8e:a4:51:5d:39:9f:db: 15:04:e9:19:dd:13:97:72:bf:b1:91:13:6b:95:ab: 26:50:af:0f:5d:8a:0b:d5:95:92:f1:42:3c:69:b3: 34:e0:07:5d:f5:cc:55:2f:85:26:53:ab:a2:0e:d5: 60:d3:73:3f:de:d8:78:59:b4:bb:6d:f8:fb:e0:5b: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:73:8E:F7:CB:56:AF:5E:B5:3D:A7:4D:72:C1:D7:49:59:BA:73:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60a013d0-02a4-37bc-80b4-e210514778da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:31:bf:de:cf:5c:7d:0b:6b:fc:f0:c1:93:48:cc:5a:11:85: 42:31:62:99:67:6b:b5:14:b0:a8:8b:8b:f6:1d:67:28:cc:3c: 6c:d9:c1:b6:1c:44:7e:58:81:bb:48:1d:3c:d4:24:dc:bd:9d: 16:69:bf:5a:d3:7a:6a:59:e1:50:41:ea:46:2d:31:ba:c2:85: 21:2f:75:c5:2f:a3:44:98:75:53:e6:60:28:11:11:1a:6b:11: 13:74:db:dd:e0:3d:6b:06:74:97:17:a4:fa:3f:38:18:02:f8: 74:24:a8:41:44:7e:4b:92:15:cd:a6:1c:a2:23:76:23:54:c7: b6:9f:0b:1f:cf:76:aa:95:3d:b5:b9:cd:08:41:d3:59:17:8c: c6:f7:80:c4:bb:da:0d:60:63:4d:80:22:33:84:f3:57:d2:c2: 05:c6:cb:00:5c:9c:61:1e:7e:02:67:bd:c1:44:0f:18:95:50: a2:57:14:01:66:f9:7f:cb:a8:57:bb:4d:c1:d1:38:db:e1:55: c4:0c:70:1c:7b:71:7f:e9:fe:72:cd:73:1b:30:a2:ad:29:40: 44:90:fe:e3:39:cd:b5:b2:be:49:b5:31:52:92:76:ab:46:b3: 63:b8:af:99:ef:e2:e7:67:b0:e7:50:7d:f8:19:1d:70:64:88: c5:4d:47:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnFHZDdwtK5hZaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YmYxYTIyMmQtMTIzZS00ZTFjLWEwYWUtNTM4NWUzYWUwZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoOcv/huTs7BNAOHPvMyPmki0cdKKQpxdlEK w6SHytTy9nhobyW733ZokERwlCo1M3B9Hzh/R0vK5QN0xSjbNrAvHstQ16iNVDKD J0oolAdbl+aGQ39oq46u5wQxsy238+7UMhMmw+9MOuyYSLgBa+VY2arS5FC2SOML C/f9iIHt2Fp5wLwqoPC84raUDJ70IY8dx6L/b4NAnUiyTaVIm6s1x7gayUViwS9+ 0mKMptGiDCThWbRQZTgeHI6kUV05n9sVBOkZ3ROXcr+xkRNrlasmUK8PXYoL1ZWS 8UI8abM04Add9cxVL4UmU6uiDtVg03M/3th4WbS7bfj74FvCaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtzjvfLVq9etT2nTXLB10lZunOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjBhMDEzZDAtMDJhNC0z N2JjLTgwYjQtZTIxMDUxNDc3OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwxv97PXH0La/zwwZNIzFoRhUIxYplna7UUsKiLi/YdZyjMPGzZwbYc RH5YgbtIHTzUJNy9nRZpv1rTempZ4VBB6kYtMbrChSEvdcUvo0SYdVPmYCgRERpr ERN0293gPWsGdJcXpPo/OBgC+HQkqEFEfkuSFc2mHKIjdiNUx7afCx/PdqqVPbW5 zQhB01kXjMb3gMS72g1gY02AIjOE81fSwgXGywBcnGEefgJnvcFEDxiVUKJXFAFm +X/LqFe7TcHRONvhVcQMcBx7cX/p/nLNcxswoq0pQESQ/uM5zbWyvkm1MVKSdqtG s2O4r5nv4udnsOdQffgZHXBkiMVNR48= -----END CERTIFICATE-----Generated at Sat Jun 13 13:07:13 2026 by rpki-client