$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b85bf151-1ace-3df7-bb1e-e89c34708210.roa File: b85bf151-1ace-3df7-bb1e-e89c34708210.roa (raw, json) Hash identifier: vgw66OKzgwVYvn4gJq3NaTtKoZVnB04Rk4G/AFCXgqo= Subject key identifier: 47:40:63:DA:3E:D0:36:E5:02:9E:16:62:34:19:4A:CF:20:9F:FF:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A043EC7B2C35430C99F360 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b85bf151-1ace-3df7-bb1e-e89c34708210.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 142.251.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:43:ec:7b:2c:35:43:0c:99:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d2a8ea43-bca4-495e-abd3-89a4383dedd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f6:fb:d7:5f:63:1f:6c:57:c5:69:2c:09:97: 4f:48:58:a6:e3:89:13:1e:77:b3:b4:6a:34:57:a1: 1f:3b:c8:12:1d:0a:bb:b2:7a:e0:db:93:40:fd:88: e8:ef:9c:57:d7:7e:ea:ac:91:98:4e:3b:7d:a0:2a: 4e:cf:ed:43:46:c0:7d:eb:5d:0c:ed:a1:73:fc:37: e8:b3:3b:fd:a0:67:a2:6c:dc:d6:2c:57:ca:b2:9f: d7:c7:bc:85:7a:c4:88:a6:3a:63:af:8a:75:ad:14: 68:70:7c:1b:7b:5b:47:0a:e1:6d:38:0f:20:25:1d: 96:73:97:9c:51:6c:76:21:30:a7:2f:f3:49:d8:97: d6:58:6d:35:43:2f:f6:bc:82:93:77:ea:b2:10:85: 79:2f:61:06:da:a2:7f:0d:ce:1d:b3:46:ce:f5:3f: 33:e3:71:da:fe:57:36:b8:19:e8:ec:32:54:8a:9c: 3d:db:c0:aa:a3:03:ef:d1:08:65:96:46:c0:2d:5e: 3d:10:0d:d2:05:3e:1c:cd:7c:ba:c0:88:4f:02:e2: c4:3a:3a:fb:5a:71:ed:37:5e:02:71:fb:db:46:c3: bc:79:1d:71:66:e0:bc:0b:4d:0c:66:8c:ee:2c:b5: 3c:49:e0:d8:e9:56:87:64:a0:f3:0d:ae:10:31:1e: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:40:63:DA:3E:D0:36:E5:02:9E:16:62:34:19:4A:CF:20:9F:FF:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b85bf151-1ace-3df7-bb1e-e89c34708210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:35:ec:d2:5f:f9:ca:58:31:30:82:47:01:59:9e:fb:8c:d7: bf:f0:41:a4:09:b7:d9:c1:c1:78:1c:3d:28:c2:df:4c:8e:ca: 5e:ee:16:7e:96:a4:3d:5e:5d:18:c8:fb:f8:ac:76:6c:bd:3f: 38:61:f4:20:69:52:3b:43:a3:36:0b:b8:4b:a2:97:a4:a0:6b: 6f:bb:88:64:13:39:86:e2:91:05:00:8b:89:da:90:ab:6b:b6: 4c:ef:56:0b:63:30:2b:bd:2c:77:3f:fa:87:e8:31:8a:fc:c9: 6b:5d:c7:6d:45:2e:c4:6d:15:a9:04:83:e5:76:96:52:29:22: 09:31:11:5f:06:b5:d1:e4:f0:7a:4e:a0:6b:7a:83:4c:60:38: 40:6b:0a:42:15:a0:9b:52:38:21:82:45:b1:fa:0f:29:fb:d0: 9b:97:65:48:c6:ad:ed:a5:2f:bf:fd:12:3c:13:f7:f0:4d:f9: 81:31:38:f0:90:53:a3:6f:0d:63:f4:b6:a4:a8:ad:01:26:1e: 48:c5:36:8a:a6:01:84:62:26:a8:b2:6b:9c:47:55:2f:05:d4: 60:14:23:6d:3f:6b:cc:d0:72:1f:55:90:58:85:15:76:94:89: 2c:ac:fb:92:67:6d:aa:a7:8f:98:d2:12:a4:26:9f:cc:6b:66: 62:b6:66:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noEPseyw1QwyZ82AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDJhOGVhNDMtYmNhNC00OTVlLWFiZDMtODlhNDM4M2RlZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/b7119jH2xXxWksCZdPSFim44kTHneztGo0 V6EfO8gSHQq7snrg25NA/Yjo75xX137qrJGYTjt9oCpOz+1DRsB9610M7aFz/Dfo szv9oGeibNzWLFfKsp/Xx7yFesSIpjpjr4p1rRRocHwbe1tHCuFtOA8gJR2Wc5ec UWx2ITCnL/NJ2JfWWG01Qy/2vIKTd+qyEIV5L2EG2qJ/Dc4ds0bO9T8z43Ha/lc2 uBno7DJUipw928CqowPv0QhllkbALV49EA3SBT4czXy6wIhPAuLEOjr7WnHtN14C cfvbRsO8eR1xZuC8C00MZozuLLU8SeDY6VaHZKDzDa4QMR6p/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdAY9o+0DblAp4WYjQZSs8gn/8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjg1YmYxNTEtMWFjZS0z ZGY3LWJiMWUtZTg5YzM0NzA4MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvurMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALY17NJf+cpYMTCCRwFZnvuM17/wQaQJt9nBwXgcPSjC30yOyl7uFn6W pD1eXRjI+/isdmy9Pzhh9CBpUjtDozYLuEuil6Sga2+7iGQTOYbikQUAi4nakKtr tkzvVgtjMCu9LHc/+ofoMYr8yWtdx21FLsRtFakEg+V2llIpIgkxEV8GtdHk8HpO oGt6g0xgOEBrCkIVoJtSOCGCRbH6Dyn70JuXZUjGre2lL7/9EjwT9/BN+YExOPCQ U6NvDWP0tqSorQEmHkjFNoqmAYRiJqiya5xHVS8F1GAUI20/a8zQch9VkFiFFXaU iSys+5Jnbaqnj5jSEqQmn8xrZmK2Zkk= -----END CERTIFICATE-----Generated at Wed Jul 29 09:06:27 2026 by rpki-client