$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa File: c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa (raw, json) Hash identifier: j9iDFPelaDU7JhvEOJ0vyLBX/xs8l93Uj341eBehc78= Subject key identifier: 32:BF:84:9C:CE:96:D6:98:49:2C:E7:A1:B8:62:D0:FB:43:3D:17:DE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F629307BBC73B711142DF0D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 142.251.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:07:bb:c7:3b:71:11:42:df:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b430f6fa-04f1-47bd-a47b-599143797ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:62:3b:a7:df:fa:38:a7:c1:09:2c:ae:72: 3c:78:6f:fd:96:4b:ba:2b:b3:90:26:99:73:bc:cf: 4b:e2:5b:4f:86:78:e4:8b:68:60:60:9c:1b:2a:64: 9e:52:57:43:70:d9:02:f9:0e:91:97:34:fa:f9:97: 98:52:6f:08:13:5b:13:81:39:e6:dc:94:82:61:56: 04:b7:61:3e:c1:47:58:09:51:f6:55:32:95:d9:d9: 47:c6:8d:00:7a:41:f3:21:6a:f2:ec:42:e2:32:82: 8b:b7:69:de:16:2b:6a:c9:68:29:ba:ea:9b:f7:93: 4d:11:c3:de:db:c2:7c:ff:8d:97:e0:bd:fa:7e:20: 09:82:90:a0:ad:20:11:88:8f:c9:59:74:72:9a:d5: 97:fa:f1:9c:a2:21:6d:3a:84:ee:e8:f3:08:ae:f3: b1:c8:e3:72:98:a9:7c:b0:6b:bd:52:67:18:9a:be: 6a:77:58:22:9d:9f:a0:d4:e9:72:0a:77:26:8e:59: 5b:de:94:eb:dd:5d:26:e5:48:df:9a:a5:a1:53:39: 20:ee:e6:5b:98:93:c6:55:71:a8:8b:45:4c:9a:e8: 2f:6c:32:67:f0:70:d3:0e:1b:45:75:0e:5b:02:ad: a3:19:8b:37:b0:57:59:b0:a3:ac:72:1d:18:80:40: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:84:9C:CE:96:D6:98:49:2C:E7:A1:B8:62:D0:FB:43:3D:17:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9d81c3d-aec5-3881-a7e3-571fdb615e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:97:52:6d:a5:cf:10:92:7f:d7:35:58:14:d2:b0:73:ca:ff: b2:c5:35:74:c7:28:ff:a2:32:f9:57:7f:32:0a:db:c9:1e:f8: 31:78:86:50:fd:41:e5:6c:4c:f7:83:a9:3d:27:7a:2a:b7:f8: 73:60:7a:d5:1f:90:a5:32:3e:b9:1f:e0:e6:cd:c5:eb:c8:06: 0c:dc:03:a8:03:a4:23:84:9e:d9:ae:cc:36:e8:b6:df:e4:ef: 5c:97:72:4c:5d:0a:69:83:d7:28:52:76:ee:cd:d3:fe:f5:c8: d8:88:44:63:9e:53:37:2b:1d:01:95:14:40:f0:34:19:eb:ba: 06:94:90:fa:95:6c:cb:94:1c:a4:12:a7:e4:75:3b:25:56:8d: 12:23:75:57:46:7e:b8:94:41:33:09:ae:9d:93:3c:ce:dd:08: e5:45:61:d6:d4:f3:89:43:c5:f1:7b:e1:bc:67:5f:3c:6e:4c: b6:3c:0c:e9:f0:1f:97:0b:b7:b8:15:46:5e:38:2e:1c:d9:f8: 30:83:2e:ee:dd:ce:17:3f:5d:06:ed:aa:a9:89:97:06:ab:a4: 5c:6c:95:01:78:ce:7e:7a:80:d1:37:27:ad:63:81:15:41:69: 1d:f6:85:a7:c9:a6:f2:89:ab:4d:de:11:d2:ec:30:b1:eb:8e: 28:d7:9b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwe7xztxEULfDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjQzMGY2ZmEtMDRmMS00N2JkLWE0N2ItNTk5MTQzNzk3YWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ViO6ff+jinwQksrnI8eG/9lku6K7OQJplz vM9L4ltPhnjki2hgYJwbKmSeUldDcNkC+Q6RlzT6+ZeYUm8IE1sTgTnm3JSCYVYE t2E+wUdYCVH2VTKV2dlHxo0AekHzIWry7ELiMoKLt2neFitqyWgpuuqb95NNEcPe 28J8/42X4L36fiAJgpCgrSARiI/JWXRymtWX+vGcoiFtOoTu6PMIrvOxyONymKl8 sGu9UmcYmr5qd1ginZ+g1OlyCncmjllb3pTr3V0m5UjfmqWhUzkg7uZbmJPGVXGo i0VMmugvbDJn8HDTDhtFdQ5bAq2jGYs3sFdZsKOsch0YgEDlZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK/hJzOltaYSSznobhi0PtDPRfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzlkODFjM2QtYWVjNS0z ODgxLWE3ZTMtNTcxZmRiNjE1ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWXUm2lzxCSf9c1WBTSsHPK/7LFNXTHKP+iMvlXfzIK28ke+DF4hlD9 QeVsTPeDqT0neiq3+HNgetUfkKUyPrkf4ObNxevIBgzcA6gDpCOEntmuzDbott/k 71yXckxdCmmD1yhSdu7N0/71yNiIRGOeUzcrHQGVFEDwNBnrugaUkPqVbMuUHKQS p+R1OyVWjRIjdVdGfriUQTMJrp2TPM7dCOVFYdbU84lDxfF74bxnXzxuTLY8DOnw H5cLt7gVRl44LhzZ+DCDLu7dzhc/XQbtqqmJlwarpFxslQF4zn56gNE3J61jgRVB aR32hafJpvKJq03eEdLsMLHrjijXm5Q= -----END CERTIFICATE-----Generated at Thu Nov 5 18:51:53 2026 by rpki-client