$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa File: b012a3db-318f-34a5-8e9d-74105cfce13e.roa (raw, json) Hash identifier: sbL6DtkRzKJL/8bHfAJWQWH5+J0spuPApc191ll82Aw= Subject key identifier: 2A:24:B9:E7:5D:FC:E2:80:BA:F1:6A:DF:34:CB:52:06:2E:7C:2C:A1 Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Certificate serial: 010D0C9F4328584D44FA33BD5F4A45F63BCFDB40 Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 209 IP address blocks: 139.60.152.0/22 maxlen: 24 162.247.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:33:bd:5f:4a:45:f6:3b:cf:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=da5842bd-cbea-4fc1-a1f7-4eb691fd66bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ca:01:f6:73:95:fe:36:77:e7:df:82:e9:c3: 3c:9b:59:71:ff:64:da:db:e1:b6:a9:41:46:3f:49: 44:aa:02:d1:7f:9e:99:3c:25:d1:6a:8f:52:aa:34: 95:c6:02:35:ba:03:f7:d4:2b:61:50:90:5a:28:0d: 52:a8:2f:f2:a4:74:16:66:48:0a:9a:bc:fa:d5:c6: 80:7f:99:c8:c4:d4:44:f7:0c:41:de:36:63:d3:7b: 71:e4:82:f1:5c:14:f1:50:f5:c7:ad:fd:97:f7:a9: 7e:34:1f:7f:fc:38:7a:a5:24:7a:23:f3:c5:72:4b: 76:43:34:ee:b5:5a:7a:0c:01:4c:58:74:1f:95:07: 98:82:0a:53:20:ff:e9:8f:8b:0e:89:ba:a4:b6:6c: d9:43:4c:85:6a:6d:75:15:84:9a:6b:f5:d5:4a:60: 29:d8:9e:47:b8:85:50:12:dc:1a:c5:eb:7b:48:01: e9:b3:ea:48:39:74:3b:4b:7d:4f:58:a6:d1:66:3e: dd:af:e1:25:55:48:bb:98:46:6e:10:3d:4a:6e:6a: a8:67:65:95:c0:71:90:d3:dc:2f:0b:5b:bf:01:9b: 10:2d:7d:23:ce:45:cb:04:60:4a:fe:f6:21:b6:3d: e7:22:93:1c:7b:6c:5c:92:6d:b9:cd:f4:2f:72:c7: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:24:B9:E7:5D:FC:E2:80:BA:F1:6A:DF:34:CB:52:06:2E:7C:2C:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/b012a3db-318f-34a5-8e9d-74105cfce13e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl X509v3 Authority Key Identifier: keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer sbgp-ipAddrBlock: critical IPv4: 139.60.152.0/22 162.247.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0b:b2:f4:1b:f8:6d:6c:a2:a5:3f:c8:59:a2:c9:16:56:c9: 16:be:25:62:24:ea:1d:bf:90:06:49:df:ab:bc:e2:65:9d:32: dc:bd:1a:40:3d:7b:87:50:28:7b:cb:d4:b7:24:15:e6:de:c7: 31:c8:5b:39:a8:7d:0e:bc:f9:a0:f1:48:4a:f6:92:b1:de:c1: 91:b3:35:e6:b3:7b:68:95:a6:d5:b5:19:2d:5d:7b:ff:46:f1: a4:dd:c6:04:de:50:fd:db:a7:90:9f:62:bb:0a:0f:92:c7:a2: 8e:2c:11:77:63:e2:50:55:79:d4:16:a0:df:c5:ab:46:d8:db: b9:b4:40:94:fc:68:f1:b3:d0:fc:08:76:fe:04:7d:95:6f:cd: 3d:f2:2d:c2:12:98:9b:34:6b:9e:a9:56:78:51:7a:9c:ec:20: b8:46:2e:1d:ae:86:51:02:98:80:51:44:77:9a:15:41:12:70: 12:66:31:9c:1e:48:6d:c9:7c:a5:71:8c:6c:a4:a5:76:31:fe: 3e:2d:80:9e:bc:94:af:59:8b:ed:7b:c1:28:9f:03:c9:94:f1: 65:eb:cc:c1:5a:0b:75:30:63:29:df:10:2d:a7:13:cc:8c:bd: 60:7a:a8:3c:0b:a9:51:5f:d3:eb:ec:a0:fa:10:cf:78:17:d2: 1f:e1:86:76 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1E+jO9X0pF9jvP20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz YjU3MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZGE1ODQyYmQtY2JlYS00ZmMxLWExZjctNGViNjkxZmQ2NmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8oB9nOV/jZ359+C6cM8m1lx/2Ta2+G2qUFG P0lEqgLRf56ZPCXRao9SqjSVxgI1ugP31CthUJBaKA1SqC/ypHQWZkgKmrz61caA f5nIxNRE9wxB3jZj03tx5ILxXBTxUPXHrf2X96l+NB9//Dh6pSR6I/PFckt2QzTu tVp6DAFMWHQflQeYggpTIP/pj4sOibqktmzZQ0yFam11FYSaa/XVSmAp2J5HuIVQ Etwaxet7SAHps+pIOXQ7S31PWKbRZj7dr+ElVUi7mEZuED1KbmqoZ2WVwHGQ09wv C1u/AZsQLX0jzkXLBGBK/vYhtj3nIpMce2xckm25zfQvcsdrrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCokuedd/OKAuvFq3zTLUgYufCyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1 ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvYjAxMmEzZGItMzE4Zi0z NGE1LThlOWQtNzQxMDVjZmNlMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2 OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3 M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi MTQ4NzNiNTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCizyYAwQC ovfYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABkLsvQb+G1soqU/yFmiyRZWyRa+JWIk6h2/kAZJ36u84mWd Mty9GkA9e4dQKHvL1LckFebexzHIWzmofQ68+aDxSEr2krHewZGzNeaze2iVptW1 GS1de/9G8aTdxgTeUP3bp5CfYrsKD5LHoo4sEXdj4lBVedQWoN/Fq0bY27m0QJT8 aPGz0PwIdv4EfZVvzT3yLcISmJs0a56pVnhRepzsILhGLh2uhlECmIBRRHeaFUES cBJmMZweSG3JfKVxjGykpXYx/j4tgJ68lK9Zi+17wSifA8mU8WXrzMFaC3UwYynf EC2nE8yMvWB6qDwLqVFf0+vsoPoQz3gX0h/hhnY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:10:46 2026 by rpki-client