$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72d71c1a-aaf1-3792-94d1-c107cc8a25d0.roa File: 72d71c1a-aaf1-3792-94d1-c107cc8a25d0.roa (raw, json) Hash identifier: kLjTIgs0bWI5f1zKaQ2GaNMpQFWL7w/Kk2RmfDa/RY4= Subject key identifier: 25:92:74:2A:F6:78:14:6F:CF:CE:62:F2:F3:F7:52:B7:3C:BD:97:2F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C52E92D67FA2A874DE200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72d71c1a-aaf1-3792-94d1-c107cc8a25d0.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.251.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:52:e9:2d:67:fa:2a:87:4d:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=4d456e85-20ce-4155-b0f9-9e3bc88d8b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:db:13:c2:bd:b2:ea:eb:d1:71:ba:d6:6c: c4:df:ef:49:50:10:06:e5:19:17:60:eb:99:a5:7f: bc:96:43:73:2a:41:c8:bb:24:32:db:9c:b5:6c:85: 3f:d3:cc:4a:57:f4:b6:c8:a8:1e:ad:3a:1c:f7:de: 44:61:3b:25:7b:61:50:e7:fc:e3:cc:bf:4f:c2:e6: 8e:69:46:6e:b9:ba:39:c7:6d:0b:fb:54:c0:0f:9a: 95:04:f2:55:98:c0:79:45:d0:89:8f:90:b5:3f:97: 06:38:d7:3d:e5:7a:5e:6c:23:a2:37:eb:3c:12:c9: 8b:98:6e:13:2e:e6:cf:e9:2e:d4:9b:5d:d7:67:17: dd:bd:45:31:de:b7:b4:35:68:11:ce:60:eb:84:08: bd:a3:bf:5f:4a:5e:03:91:fd:81:50:a1:0e:71:01: e4:c5:f9:aa:73:9c:1e:f6:a4:cc:7a:8a:83:1d:7b: 45:62:fe:7d:0d:9c:67:c9:40:ce:fa:98:11:54:98: e2:36:f7:54:98:71:0f:f6:7d:a3:0e:99:f5:46:b1: 9a:f2:49:5c:6f:bd:83:cc:4c:78:4e:5a:76:73:fc: e6:28:7c:c8:41:57:df:08:f9:8e:90:6a:27:d0:fb: 39:21:7d:aa:73:ac:41:44:32:b2:c3:69:34:5b:88: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:74:2A:F6:78:14:6F:CF:CE:62:F2:F3:F7:52:B7:3C:BD:97:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72d71c1a-aaf1-3792-94d1-c107cc8a25d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:be:b7:68:63:46:75:87:fa:e0:1d:b8:30:f2:57:70:46:19: e8:da:37:7d:01:82:a1:79:90:b5:68:c7:ce:f3:5c:5b:86:b3: b2:8a:dd:61:be:69:82:9b:84:51:57:2d:d4:d2:e9:18:4b:8d: 7b:95:01:4f:54:8d:c7:21:0a:59:cd:da:40:41:0a:e5:02:a9: 2a:c4:54:5e:8c:a2:86:f9:58:09:12:03:e0:35:d0:02:aa:ee: 53:71:45:cd:2f:53:41:6f:6b:e8:91:0f:85:78:72:f2:f2:82: 1e:0d:fb:a6:ca:7e:48:9f:2f:f4:ea:40:f6:05:9f:d5:4d:2a: 2d:74:ac:8e:71:9f:d9:70:54:cc:6d:f3:6e:0b:6a:7d:c2:33: 7b:20:73:6f:b4:67:ba:bc:04:6e:b3:25:c3:b1:99:3c:93:a4: b1:94:25:fa:41:5e:30:17:b2:e0:a3:30:b6:ee:4e:67:98:f3: 09:40:15:ec:21:4e:d9:e6:27:d8:21:f5:97:8f:8d:05:b9:33: ff:a6:11:af:a1:5e:25:2c:7c:8e:c2:4a:3d:ed:cc:20:94:83: 42:67:9b:48:ff:c5:7e:ac:8c:22:44:ae:7e:1e:b0:b3:69:68: e3:b6:ad:a4:ed:87:7a:f0:db:41:74:70:3c:96:c9:78:c4:e1: 53:30:0b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnFLpLWf6KodN4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NGQ0NTZlODUtMjBjZS00MTU1LWIwZjktOWUzYmM4OGQ4YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG3bE8K9surr0XG61mzE3+9JUBAG5RkXYOuZ pX+8lkNzKkHIuyQy25y1bIU/08xKV/S2yKgerToc995EYTsle2FQ5/zjzL9PwuaO aUZuubo5x20L+1TAD5qVBPJVmMB5RdCJj5C1P5cGONc95XpebCOiN+s8EsmLmG4T LubP6S7Um13XZxfdvUUx3re0NWgRzmDrhAi9o79fSl4Dkf2BUKEOcQHkxfmqc5we 9qTMeoqDHXtFYv59DZxnyUDO+pgRVJjiNvdUmHEP9n2jDpn1RrGa8klcb72DzEx4 Tlp2c/zmKHzIQVffCPmOkGon0Ps5IX2qc6xBRDKyw2k0W4jeBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWSdCr2eBRvz85i8vP3Urc8vZcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzJkNzFjMWEtYWFmMS0z NzkyLTk0ZDEtYzEwN2NjOGEyNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm+t2hjRnWH+uAduDDyV3BGGejaN30BgqF5kLVox87zXFuGs7KK3WG+ aYKbhFFXLdTS6RhLjXuVAU9UjcchClnN2kBBCuUCqSrEVF6Moob5WAkSA+A10AKq 7lNxRc0vU0Fva+iRD4V4cvLygh4N+6bKfkifL/TqQPYFn9VNKi10rI5xn9lwVMxt 824Lan3CM3sgc2+0Z7q8BG6zJcOxmTyTpLGUJfpBXjAXsuCjMLbuTmeY8wlAFewh TtnmJ9gh9ZePjQW5M/+mEa+hXiUsfI7CSj3tzCCUg0Jnm0j/xX6sjCJErn4esLNp aOO2raTth3rw20F0cDyWyXjE4VMwC3o= -----END CERTIFICATE-----Generated at Sat Jun 13 09:21:06 2026 by rpki-client