$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa File: 8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa (raw, json) Hash identifier: lyXQNH7Jsl4ccUArJDFXFPJoGJjNgUMdmKuMjDQa7hQ= Subject key identifier: 67:7D:7E:C3:30:D6:27:F7:98:8F:C3:FD:51:37:2E:79:0D:AB:EF:F5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D703FEEE6C7DD4D1A658FF380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 15169 IP address blocks: 142.251.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ee:e6:c7:dd:4d:1a:65:8f:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=40a23acf-0ad4-43ce-a3f1-c0910b3a9fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:5c:f9:25:7e:82:52:e6:75:43:d1:f3:f2: 49:6c:55:4d:52:af:e1:72:29:dd:75:12:c2:d8:2e: b0:7a:61:e8:15:00:75:ee:7f:da:68:c4:71:70:0c: c6:dd:7d:39:f6:dd:eb:d2:cb:f8:d8:e6:64:24:35: b1:43:8e:4c:48:84:00:97:56:ab:9a:27:98:0c:d8: 58:fa:fa:5c:ac:42:ab:21:57:22:30:01:ea:c6:f6: 9e:bc:92:16:96:8b:c5:74:73:ee:30:30:c0:d2:c0: e0:71:87:da:3a:92:07:44:9c:ac:1a:38:cf:e3:ea: 94:86:5c:84:b3:d4:85:bb:43:b6:9c:52:8f:d2:94: f4:07:e5:95:34:9f:da:1f:68:71:0e:e6:0f:ad:5c: 54:e9:d9:05:f8:f3:0d:f5:c7:da:88:5d:79:b7:36: 86:93:0b:80:a1:11:2f:e7:24:fe:72:14:8c:c6:e3: 6f:e3:9f:86:7d:f2:be:42:19:43:4e:d0:3d:01:72: 66:1d:92:d4:80:b2:dc:e9:cb:9a:15:b7:ac:06:1e: 3b:8e:3c:c9:98:6c:b8:69:a0:e1:60:bf:ba:d1:82: 2e:b6:be:3c:c0:95:8e:fd:7c:68:d5:c6:0d:b3:a2: 4e:bd:29:6c:34:67:f7:60:57:65:6b:41:0c:50:f9: b6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7D:7E:C3:30:D6:27:F7:98:8F:C3:FD:51:37:2E:79:0D:AB:EF:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8bfcc910-6cbc-35f6-a23a-73fdef73f48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c8:eb:c8:9a:cd:c1:d6:15:d6:02:a2:2f:3f:74:c5:8c:bf: 64:78:03:18:26:4b:65:e2:2d:d0:e1:3f:d8:7b:32:4d:86:fc: 44:62:fa:dd:7e:16:0f:79:24:23:0f:8f:3a:20:ff:16:9f:19: 90:f0:de:76:89:52:59:69:79:aa:11:65:fa:36:49:76:ed:5f: 30:81:9f:b3:59:6e:4c:70:7a:b4:e0:29:5e:a1:c1:b5:b5:02: fa:6e:bd:8d:e3:fb:f8:8c:3d:64:d2:e8:cf:2f:a1:b0:28:73: c9:30:7e:cf:84:cb:5d:e8:ba:25:76:7e:26:61:0f:c5:40:87: 92:19:b1:75:da:c4:8a:b6:78:64:5a:b8:07:1a:ba:45:81:5a: f7:9c:35:8c:e9:a1:9f:3b:8e:ac:e4:00:74:2f:07:79:62:5d: 98:a9:01:43:26:e7:71:d3:94:25:db:6a:23:9b:70:28:c5:28: c9:d3:28:81:74:54:f4:f0:50:79:8a:48:e5:4f:14:20:85:2b: a7:db:50:dd:eb:ef:d1:7e:f9:c7:4d:00:b3:18:db:40:26:14: ec:43:47:99:02:e9:89:e3:f8:3a:03:1d:dd:9c:87:0d:1f:0d: 12:2b:d7:77:65:80:62:ec:ed:1e:32:4a:e3:6d:96:04:2d:e9: 2b:41:b3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+7mx91NGmWP84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk NDBhMjNhY2YtMGFkNC00M2NlLWEzZjEtYzA5MTBiM2E5ZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzlc+SV+glLmdUPR8/JJbFVNUq/hcinddRLC 2C6wemHoFQB17n/aaMRxcAzG3X059t3r0sv42OZkJDWxQ45MSIQAl1armieYDNhY +vpcrEKrIVciMAHqxvaevJIWlovFdHPuMDDA0sDgcYfaOpIHRJysGjjP4+qUhlyE s9SFu0O2nFKP0pT0B+WVNJ/aH2hxDuYPrVxU6dkF+PMN9cfaiF15tzaGkwuAoREv 5yT+chSMxuNv45+GffK+QhlDTtA9AXJmHZLUgLLc6cuaFbesBh47jjzJmGy4aaDh YL+60YIutr48wJWO/Xxo1cYNs6JOvSlsNGf3YFdla0EMUPm2KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd9fsMw1if3mI/D/VE3LnkNq+/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGJmY2M5MTAtNmNiYy0z NWY2LWEyM2EtNzNmZGVmNzNmNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvu9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXI68iazcHWFdYCoi8/dMWMv2R4AxgmS2XiLdDhP9h7Mk2G/ERi+t1+ Fg95JCMPjzog/xafGZDw3naJUllpeaoRZfo2SXbtXzCBn7NZbkxwerTgKV6hwbW1 AvpuvY3j+/iMPWTS6M8vobAoc8kwfs+Ey13ouiV2fiZhD8VAh5IZsXXaxIq2eGRa uAcaukWBWvecNYzpoZ87jqzkAHQvB3liXZipAUMm53HTlCXbaiObcCjFKMnTKIF0 VPTwUHmKSOVPFCCFK6fbUN3r79F++cdNALMY20AmFOxDR5kC6Ynj+DoDHd2chw0f DRIr13dlgGLs7R4ySuNtlgQt6StBsxI= -----END CERTIFICATE-----Generated at Fri Apr 17 10:59:22 2026 by rpki-client