$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa File: dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa (raw, json) Hash identifier: MqehBgn53DFjGrtfh038HTxZRlNkEGFgE27j5DCVACw= Subject key identifier: BB:BA:7A:9B:18:78:90:52:62:52:1D:04:83:20:96:1C:F1:BA:C2:0F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BD2FA1FB1AAFBE63CC050 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 142.251.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d2:fa:1f:b1:aa:fb:e6:3c:c0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=421e1abe-0955-43c0-a793-267cf592591a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:e5:f5:af:7c:27:81:22:77:d9:71:27:72: c7:a9:5b:e7:f2:56:7b:93:ef:e4:69:c3:4b:f5:c7: a0:5d:52:b7:da:55:bf:ab:1d:83:f2:34:05:dc:0e: 35:a4:94:fa:ab:93:57:1a:26:ae:ef:e9:96:93:71: 70:07:5d:d7:df:85:27:11:d6:99:29:04:45:bd:20: 8d:3b:72:6a:bb:7d:83:21:b6:56:3b:20:1e:cb:90: 70:59:c1:b3:00:ef:34:98:8d:2e:59:e9:2f:7e:a1: a5:83:76:b1:98:31:3e:89:81:1f:4b:82:ab:cf:9f: d7:63:ac:fb:35:12:bf:0f:5c:d5:57:2c:82:72:9f: 14:3c:4b:d0:2e:31:0b:46:59:b8:2f:f4:3e:99:36: 91:c0:c2:07:92:89:7c:9a:08:77:5e:47:20:12:27: 0e:a2:a6:b0:d2:21:8d:58:ae:42:f1:22:6d:26:24: a4:79:79:0e:86:66:b4:ef:01:ab:f9:07:2e:41:97: ee:00:a3:15:a9:41:68:ed:91:1a:96:bb:ed:30:77: 36:33:bb:29:83:db:4e:81:bd:df:77:57:9d:50:bf: a7:a7:a8:5d:8c:da:68:81:ad:5c:cf:0d:30:e0:09: a5:33:27:9b:32:39:28:25:5e:ac:3b:24:ea:68:5f: df:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BA:7A:9B:18:78:90:52:62:52:1D:04:83:20:96:1C:F1:BA:C2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dcc9e013-9e1b-3600-94aa-a0b8ef008ee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 142.251.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b7:e7:7d:2e:b7:ba:c6:9f:59:76:a8:91:96:20:a1:ae:d0: 87:ef:75:c7:bb:5c:7c:c6:3e:09:e3:78:73:92:a1:9b:07:cb: 9b:12:cc:71:ad:9f:86:b1:63:2e:5a:bb:c2:8e:52:77:7d:f1: 49:75:5e:a1:97:04:32:90:5d:d7:d0:0d:54:a4:7c:3c:02:fd: 09:62:10:b6:f7:2d:fa:8d:14:10:bd:46:de:3e:7c:a6:08:19: c5:6e:9e:95:15:55:52:a5:49:08:f1:ca:89:27:50:8f:79:aa: 9b:09:1a:a2:c1:e0:5d:0d:07:04:3b:78:38:3d:8b:85:45:d4: e8:54:ff:33:64:1e:c1:b5:03:52:4b:ae:12:d9:dc:e0:dd:57: e1:0d:ba:79:0f:78:ee:03:9b:e9:80:11:90:c4:94:bc:41:9d: 54:fb:de:50:a4:f4:37:76:e5:b9:4c:19:2f:4f:c7:5a:8c:ba: 8a:25:ca:1e:59:74:ed:fc:6c:eb:85:b0:41:bc:8a:b9:8c:32: 2c:8f:52:d4:06:a0:0e:15:d4:de:a8:6e:40:5c:c1:a1:92:2d: 55:6f:ce:cb:f1:62:83:27:c3:fd:70:0d:ce:1a:6d:46:c5:d3: 17:68:d2:dd:10:fa:a0:c0:6f:8f:2c:29:5c:6e:78:41:09:21: 31:fd:9c:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm9L6H7Gq++Y8wFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDIxZTFhYmUtMDk1NS00M2MwLWE3OTMtMjY3Y2Y1OTI1OTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY/l9a98J4Eid9lxJ3LHqVvn8lZ7k+/kacNL 9cegXVK32lW/qx2D8jQF3A41pJT6q5NXGiau7+mWk3FwB13X34UnEdaZKQRFvSCN O3Jqu32DIbZWOyAey5BwWcGzAO80mI0uWekvfqGlg3axmDE+iYEfS4Krz5/XY6z7 NRK/D1zVVyyCcp8UPEvQLjELRlm4L/Q+mTaRwMIHkol8mgh3XkcgEicOoqaw0iGN WK5C8SJtJiSkeXkOhma07wGr+QcuQZfuAKMVqUFo7ZEalrvtMHc2M7spg9tOgb3f d1edUL+np6hdjNpoga1czw0w4AmlMyebMjkoJV6sOyTqaF/flwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu6epsYeJBSYlIdBIMglhzxusIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGNjOWUwMTMtOWUxYi0z NjAwLTk0YWEtYTBiOGVmMDA4ZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvuhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW3530ut7rGn1l2qJGWIKGu0Ifvdce7XHzGPgnjeHOSoZsHy5sSzHGt n4axYy5au8KOUnd98Ul1XqGXBDKQXdfQDVSkfDwC/QliELb3LfqNFBC9Rt4+fKYI GcVunpUVVVKlSQjxyoknUI95qpsJGqLB4F0NBwQ7eDg9i4VF1OhU/zNkHsG1A1JL rhLZ3ODdV+ENunkPeO4Dm+mAEZDElLxBnVT73lCk9Dd25blMGS9Px1qMuoolyh5Z dO38bOuFsEG8irmMMiyPUtQGoA4V1N6obkBcwaGSLVVvzsvxYoMnw/1wDc4abUbF 0xdo0t0Q+qDAb48sKVxueEEJITH9nKg= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:04 2026 by rpki-client