$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa File: 9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa (raw, json) Hash identifier: ZYXkgWqP/p4ZZvhMCCoRImwKD+rDxLzZybWuvXlkOVA= Subject key identifier: CF:BC:51:7A:A4:93:2D:2F:80:61:5E:FD:F8:06:C8:F7:B3:C2:72:F7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F3E47E07C710B4C6C741A31A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 15169 IP address blocks: 142.251.123.0/24 maxlen: 24 142.251.124.0/24 maxlen: 24 142.251.125.0/24 maxlen: 24 142.251.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e0:7c:71:0b:4c:6c:74:1a:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=ea41b438-b7df-4bbc-bf12-3af130958baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:24:c1:df:cd:05:f3:37:78:b6:a5:c8:ff: 8a:3b:ea:a3:86:32:83:df:26:27:b2:9b:15:5e:d7: 11:30:f0:0d:ac:ad:a0:90:c5:9d:6a:9a:b7:68:0e: 38:15:d0:6d:a3:5a:9f:1a:2c:18:58:db:c2:06:e8: db:0c:4d:d4:3b:aa:cf:5e:f1:71:48:b4:b0:98:aa: 4f:62:d8:e1:12:de:6d:32:e6:d8:d0:94:ac:51:d7: 4d:c7:13:51:35:cd:b0:65:b8:84:1c:37:80:9b:3c: c4:7e:96:bc:9d:82:34:e2:fb:80:2f:88:55:22:22: 24:40:1d:bd:3c:7a:25:00:bb:d4:29:91:5b:25:5b: 07:2b:69:a6:7c:09:64:9e:a7:3c:93:0f:c8:d4:7a: 8f:f8:88:76:0b:67:ed:26:c8:d3:19:f7:0d:28:31: 6a:ee:bc:93:58:e6:76:6a:28:b9:9d:b3:fd:53:23: e8:6b:d0:10:08:4c:11:9f:07:31:ea:d2:96:56:da: 12:3e:22:ea:8f:82:42:6a:4a:fb:d6:46:c6:13:56: 77:cd:f8:82:3b:93:12:2f:93:7c:cf:28:72:1a:51: 5e:1e:17:0a:93:e7:08:6f:5b:65:85:5c:d8:d8:37: c7:ae:b3:1a:76:c2:b2:32:96:0e:db:d3:cb:fa:a1: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BC:51:7A:A4:93:2D:2F:80:61:5E:FD:F8:06:C8:F7:B3:C2:72:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9f299fd2-1a78-39f6-9fb3-567a6b00af92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.123.0-142.251.126.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:30:37:0c:a2:9d:30:22:0c:3a:18:5f:75:07:e3:db:2d:c0: 7b:b2:a1:9e:b6:8f:50:81:ad:18:a9:11:7d:04:04:b5:2f:71: b2:4d:17:83:16:ba:14:5e:ba:74:63:97:4f:44:fe:25:12:3a: c1:1c:30:5d:62:63:50:4c:82:36:29:9a:a7:18:7d:d1:01:ec: 0d:24:a2:1e:e3:a9:2c:5d:0b:31:9a:2e:56:14:38:1b:80:71: 6b:e7:4b:9a:18:81:2d:cc:42:ac:74:0a:ab:76:1a:42:32:c3: 24:29:36:3b:cd:03:6f:d4:6a:e4:ec:73:d5:af:d7:48:91:5c: 52:06:a3:c6:1c:7d:ce:ce:e8:c7:1f:3c:82:36:61:37:9e:c7: c2:83:52:0b:0d:dd:fc:6c:76:b1:3d:a9:d2:bc:23:fa:3b:01: 6a:7e:ef:37:4b:54:1d:ec:f1:db:be:0c:33:cc:e3:9f:98:d4: ba:59:14:bc:e4:82:ef:e2:74:4d:28:3d:ea:ac:71:d9:43:6b: 52:ea:c3:59:ab:8d:99:e6:98:21:99:62:02:f7:a2:fe:8a:94: d6:63:3f:bb:86:87:8e:18:d7:11:72:ec:2f:e1:74:09:b5:79: ca:f8:91:fc:a2:7f:43:ff:93:a2:98:1d:72:74:8a:71:67:cf: 1f:5b:3d:64 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8+R+B8cQtMbHQaMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZWE0MWI0MzgtYjdkZi00YmJjLWJmMTItM2FmMTMwOTU4YmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1kkwd/NBfM3eLalyP+KO+qjhjKD3yYnspsV XtcRMPANrK2gkMWdapq3aA44FdBto1qfGiwYWNvCBujbDE3UO6rPXvFxSLSwmKpP YtjhEt5tMubY0JSsUddNxxNRNc2wZbiEHDeAmzzEfpa8nYI04vuAL4hVIiIkQB29 PHolALvUKZFbJVsHK2mmfAlknqc8kw/I1HqP+Ih2C2ftJsjTGfcNKDFq7ryTWOZ2 aii5nbP9UyPoa9AQCEwRnwcx6tKWVtoSPiLqj4JCakr71kbGE1Z3zfiCO5MSL5N8 zyhyGlFeHhcKk+cIb1tlhVzY2DfHrrMadsKyMpYO29PL+qHaJwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFM+8UXqkky0vgGFe/fgGyPezwnL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWYyOTlmZDItMWE3OC0z OWY2LTlmYjMtNTY3YTZiMDBhZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACO+3sD BACO+34wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAVTA3DKKdMCIMOhhfdQfj2y3Ae7KhnraPUIGtGKkRfQQE tS9xsk0Xgxa6FF66dGOXT0T+JRI6wRwwXWJjUEyCNimapxh90QHsDSSiHuOpLF0L MZouVhQ4G4Bxa+dLmhiBLcxCrHQKq3YaQjLDJCk2O80Db9Rq5Oxz1a/XSJFcUgaj xhx9zs7oxx88gjZhN57HwoNSCw3d/Gx2sT2p0rwj+jsBan7vN0tUHezx274MM8zj n5jUulkUvOSC7+J0TSg96qxx2UNrUurDWauNmeaYIZliAvei/oqU1mM/u4aHjhjX EXLsL+F0CbV5yviR/KJ/Q/+TopgdcnSKcWfPH1s9ZA== -----END CERTIFICATE-----Generated at Tue Sep 22 08:50:09 2026 by rpki-client