$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90b76b3a-599e-3e1e-a671-858d85a1beaa.roa File: 90b76b3a-599e-3e1e-a671-858d85a1beaa.roa (raw, json) Hash identifier: LQrKtB1FiEKyd47PKHETk5iro4nDWSyFSlKJMKa3ppE= Subject key identifier: AE:C9:34:11:D4:06:C6:58:18:45:5C:7C:45:14:78:8F:7B:D4:AC:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629309007BF92AA2208D9C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90b76b3a-599e-3e1e-a671-858d85a1beaa.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.251.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:09:00:7b:f9:2a:a2:20:8d:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=6a31d8bd-82a8-4f67-861d-36ebef651637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:f1:33:de:74:35:11:50:14:48:35:13:74: fa:53:b0:2a:24:1a:f1:54:9b:f8:93:69:8d:97:00: 9e:cc:34:c0:26:e8:f1:29:f9:11:dc:1a:89:f8:7c: 56:c4:d8:54:f5:82:bc:e2:f6:83:a8:24:33:9e:17: 29:30:ee:be:b2:10:c3:27:c2:88:54:70:43:40:5f: 06:a6:eb:5f:3d:7b:bb:df:61:8c:28:fc:f3:01:40: 8d:fc:f2:70:58:0d:11:9e:d9:da:69:3c:dd:d3:b4: 5b:e2:c8:4a:ad:95:5d:97:99:47:4b:a9:67:e4:c1: 9e:e9:cd:7f:42:f7:f6:88:df:c6:34:9d:38:cc:95: a2:87:3a:fb:8b:22:83:0a:ec:7e:06:d7:37:a7:38: f4:55:34:fa:98:f7:8a:75:32:54:97:7b:b8:54:7a: 75:86:09:a4:5c:1e:d3:5a:75:0f:99:f6:93:03:3f: f2:07:eb:64:54:cb:d7:85:96:b5:fc:a7:34:61:2c: 82:b1:9b:61:e7:13:93:92:1f:2f:6c:9a:08:b3:92: 70:c9:d6:f6:9e:1a:08:c8:3d:ae:9d:16:70:26:95: 83:70:86:6f:94:40:fc:e6:a9:58:1a:89:4d:48:7b: 46:83:71:35:93:2c:76:20:f1:a6:08:90:65:8c:b9: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C9:34:11:D4:06:C6:58:18:45:5C:7C:45:14:78:8F:7B:D4:AC:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90b76b3a-599e-3e1e-a671-858d85a1beaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:4a:04:f0:0c:cf:e8:dc:ba:c4:fd:5e:1d:20:f6:cf:43:13: 1c:92:bb:58:ea:0a:6a:1c:8a:23:01:b7:4b:b7:15:36:69:99: 1b:16:85:d6:66:30:cf:df:86:0d:f6:00:67:ad:ac:12:7e:23: f8:13:f9:43:c1:48:7e:92:96:a9:32:33:01:39:a5:85:27:92: 80:77:82:6b:13:7e:ca:28:3c:84:18:87:0a:fa:b2:ef:01:2a: bb:11:b4:e0:07:ae:ec:ed:b3:80:07:42:13:34:d4:20:17:51: 8f:3a:50:7c:65:ac:a1:1e:c6:4d:4a:8e:d9:ac:d6:97:e4:8f: 85:b4:53:30:e1:e6:12:8d:39:a1:11:fa:4f:7a:0c:2a:ef:e8: 61:18:5c:5b:f3:73:df:43:a6:a2:28:13:04:31:7e:45:88:59: 22:1d:9d:7c:76:26:4d:6b:99:b5:4f:14:ba:f6:82:91:42:28: 47:0c:17:10:59:58:05:23:23:d7:74:3f:fc:ad:57:61:ff:4a: da:56:66:91:dc:cc:82:85:51:9f:e4:db:5b:83:f0:1e:51:85: b5:e0:12:aa:87:d6:cc:08:fe:e6:61:9d:26:32:76:ea:ac:78: 2e:36:b2:66:06:31:e6:b7:80:d8:75:15:f3:01:a8:23:95:aa: ef:5d:76:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwkAe/kqoiCNnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NmEzMWQ4YmQtODJhOC00ZjY3LTg2MWQtMzZlYmVmNjUxNjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXLxM950NRFQFEg1E3T6U7AqJBrxVJv4k2mN lwCezDTAJujxKfkR3BqJ+HxWxNhU9YK84vaDqCQznhcpMO6+shDDJ8KIVHBDQF8G putfPXu732GMKPzzAUCN/PJwWA0RntnaaTzd07Rb4shKrZVdl5lHS6ln5MGe6c1/ Qvf2iN/GNJ04zJWihzr7iyKDCux+Btc3pzj0VTT6mPeKdTJUl3u4VHp1hgmkXB7T WnUPmfaTAz/yB+tkVMvXhZa1/Kc0YSyCsZth5xOTkh8vbJoIs5Jwydb2nhoIyD2u nRZwJpWDcIZvlED85qlYGolNSHtGg3E1kyx2IPGmCJBljLnfuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7JNBHUBsZYGEVcfEUUeI971KxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTBiNzZiM2EtNTk5ZS0z ZTFlLWE2NzEtODU4ZDg1YTFiZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpKBPAMz+jcusT9Xh0g9s9DExySu1jqCmociiMBt0u3FTZpmRsWhdZm MM/fhg32AGetrBJ+I/gT+UPBSH6SlqkyMwE5pYUnkoB3gmsTfsooPIQYhwr6su8B KrsRtOAHruzts4AHQhM01CAXUY86UHxlrKEexk1Kjtms1pfkj4W0UzDh5hKNOaER +k96DCrv6GEYXFvzc99DpqIoEwQxfkWIWSIdnXx2Jk1rmbVPFLr2gpFCKEcMFxBZ WAUjI9d0P/ytV2H/StpWZpHczIKFUZ/k21uD8B5RhbXgEqqH1swI/uZhnSYyduqs eC42smYGMea3gNh1FfMBqCOVqu9dduo= -----END CERTIFICATE-----Generated at Thu Nov 5 18:56:14 2026 by rpki-client