$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa File: 668ba1c5-3435-3ef3-a8d7-a353e6418069.roa (raw, json) Hash identifier: PdHbX2ShuIWX+UIZX3VGt8va3Jl4zLc+2fwlt4FfEhc= Subject key identifier: D1:AF:3E:D2:C4:34:1B:13:1B:4C:81:8B:EF:FF:C8:35:AB:3C:48:6C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F6293066BA3538BF335707C18 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.251.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:06:6b:a3:53:8b:f3:35:70:7c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=279aee01-931f-42ce-baa6-9eba04e15428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:6e:5c:67:05:34:9b:66:4a:76:58:fd:3b: bb:de:89:ba:f0:86:9e:4e:b5:f0:cd:cc:ae:22:a6: 10:18:40:f2:48:15:76:eb:fe:63:7f:18:01:e4:b1: 8b:02:f2:c8:f3:74:95:e0:b0:fd:78:5e:dd:9a:f1: d5:e7:54:ed:4b:5e:6b:80:46:5e:ef:5d:2d:dc:de: b9:53:bf:93:3d:39:e2:97:40:9b:f8:1a:f6:d8:31: 01:26:c7:65:3f:14:2e:26:2f:0a:3b:00:dd:48:16: de:58:25:29:19:74:30:6c:0e:77:02:07:9f:22:bd: dc:c1:3c:bd:06:20:40:bb:ba:d7:74:5c:aa:1f:bf: a9:68:78:2d:a7:9d:b3:b4:71:17:b8:f0:ff:03:7d: dc:b5:ee:e4:d4:c9:d5:b5:1a:4c:51:75:b4:0e:1f: 0b:97:6a:c3:55:76:23:31:db:3f:f1:18:58:f6:20: cb:08:0b:3c:d5:8a:11:ed:2c:20:9f:d5:91:43:2b: 42:a3:81:75:0a:47:dc:19:d4:8c:36:c4:20:6d:35: 1d:5b:39:e2:bc:8a:d1:64:20:ed:8e:21:a5:47:87: 71:e3:22:f0:84:d6:fd:82:60:0a:bc:94:d4:56:35: 5e:dc:0e:3e:82:cf:9e:ef:64:46:5c:9b:21:83:ab: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AF:3E:D2:C4:34:1B:13:1B:4C:81:8B:EF:FF:C8:35:AB:3C:48:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d8:61:29:4c:90:c6:ad:a8:ce:15:d0:45:25:3b:c8:dc:4d: 08:4e:07:e6:f8:04:cf:f6:1c:6f:b4:cd:b5:51:06:a8:ca:f5: 4a:76:5a:b2:fb:21:ee:b3:65:83:9c:44:7f:4f:17:a4:b8:2c: 7e:4d:5f:03:b9:5e:6e:a8:7e:9c:a6:cf:f5:e9:fc:69:3f:66: 45:7c:41:fc:63:0f:48:b9:96:13:ad:8f:88:91:a7:1f:5d:4c: 25:e4:9c:1e:54:68:f2:d0:8f:f4:b2:37:7c:69:7f:9e:55:a7: 78:f7:50:bf:c8:ad:78:c9:64:50:60:18:92:b3:96:2e:e8:00: 1d:c7:5b:3d:55:25:33:8f:10:a9:cc:8a:73:66:10:a6:62:cc: dc:fa:96:ff:be:44:ba:84:f7:74:58:2f:df:36:8f:46:41:0d: 89:ba:df:cd:21:a9:7a:3d:4b:d6:7a:58:9d:45:94:1d:c6:2d: 78:c8:1a:e2:b8:01:ac:43:52:f7:ad:08:2e:ac:ef:44:30:de: 4c:95:48:cc:47:ab:8a:97:f4:c0:ad:39:11:1d:4a:05:64:09: 41:17:03:bc:f1:18:7a:11:73:84:e3:90:5e:a9:d5:3c:ff:af: bb:5f:40:e4:73:56:be:a9:ea:ce:bd:64:a9:d3:a2:9b:ac:bc: ac:fd:84:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwZro1OL8zVwfBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk Mjc5YWVlMDEtOTMxZi00MmNlLWJhYTYtOWViYTA0ZTE1NDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcJuXGcFNJtmSnZY/Tu73om68IaeTrXwzcyu IqYQGEDySBV26/5jfxgB5LGLAvLI83SV4LD9eF7dmvHV51TtS15rgEZe710t3N65 U7+TPTnil0Cb+Br22DEBJsdlPxQuJi8KOwDdSBbeWCUpGXQwbA53AgefIr3cwTy9 BiBAu7rXdFyqH7+paHgtp52ztHEXuPD/A33cte7k1MnVtRpMUXW0Dh8Ll2rDVXYj Mds/8RhY9iDLCAs81YoR7Swgn9WRQytCo4F1CkfcGdSMNsQgbTUdWznivIrRZCDt jiGlR4dx4yLwhNb9gmAKvJTUVjVe3A4+gs+e72RGXJshg6t8zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGvPtLENBsTG0yBi+//yDWrPEhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjY4YmExYzUtMzQzNS0z ZWYzLWE4ZDctYTM1M2U2NDE4MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDYYSlMkMatqM4V0EUlO8jcTQhOB+b4BM/2HG+0zbVRBqjK9Up2WrL7 Ie6zZYOcRH9PF6S4LH5NXwO5Xm6ofpymz/Xp/Gk/ZkV8QfxjD0i5lhOtj4iRpx9d TCXknB5UaPLQj/SyN3xpf55Vp3j3UL/IrXjJZFBgGJKzli7oAB3HWz1VJTOPEKnM inNmEKZizNz6lv++RLqE93RYL982j0ZBDYm6380hqXo9S9Z6WJ1FlB3GLXjIGuK4 AaxDUvetCC6s70Qw3kyVSMxHq4qX9MCtOREdSgVkCUEXA7zxGHoRc4TjkF6p1Tz/ r7tfQORzVr6p6s69ZKnTopusvKz9hP0= -----END CERTIFICATE-----Generated at Thu Nov 5 18:54:28 2026 by rpki-client