$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/71fdeb78-f198-3e40-a3d7-d5ad5051830c.roa File: 71fdeb78-f198-3e40-a3d7-d5ad5051830c.roa (raw, json) Hash identifier: JMpvBrl+W1SkjsZBHQ40whtgjyxdebXbtPZYtyccDSQ= Subject key identifier: 4E:F3:DE:5E:06:B9:35:83:50:56:80:0B:FE:2D:B9:26:06:F0:9B:24 Certificate issuer: /CN=0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd Certificate serial: 010D0C9F4328584DA883676B5E5D842975063BC0 Authority key identifier: 58:ED:26:50:5E:5A:09:2B:64:E7:DC:6D:EA:03:3E:74:A6:C1:EE:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/71fdeb78-f198-3e40-a3d7-d5ad5051830c.roa Signing time: Tue 28 Apr 2026 16:42:08 +0000 ROA not before: Tue 28 Apr 2026 16:42:08 +0000 ROA not after: Mon 27 Jul 2026 16:42:08 +0000 asID: 21564 IP address blocks: 142.239.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:83:67:6b:5e:5d:84:29:75:06:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd Validity Not Before: Apr 28 16:42:08 2026 GMT Not After : Jul 27 16:42:08 2026 GMT Subject: CN=f4720780-9641-42a4-a78c-5738c9d4dba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:97:62:e5:0c:e7:e2:e8:02:44:97:9b:61:ff: 01:bb:0a:e2:90:35:0c:16:10:b7:d7:7f:8c:81:2f: 8c:ee:f1:29:c9:82:26:52:4d:bc:39:79:61:7f:04: b5:3e:42:e2:c7:fe:5f:e7:83:15:bf:af:4b:55:53: 3d:02:cd:32:8e:35:45:1c:ef:0c:17:1d:3c:6c:30: ec:93:be:e9:74:e9:b1:d3:86:39:70:cb:1b:29:75: d9:e2:08:46:67:23:aa:85:a2:ed:cf:a5:d8:c4:d1: 76:ab:e4:07:3d:ac:a7:97:4b:be:ce:31:29:20:76: 27:3b:b7:b7:13:98:88:fb:37:83:3b:fd:52:21:3e: 21:48:03:29:5e:26:a8:58:93:53:16:1b:4d:e4:7c: 41:49:b3:17:dc:2b:e2:58:c4:b0:35:d0:7a:a8:7d: bb:00:47:b6:65:13:8a:66:dc:a6:39:59:4a:6b:72: 00:2a:fd:1d:3c:76:52:79:e6:06:03:90:7f:5d:6a: d2:3c:20:18:b7:cb:3f:4b:c5:59:32:8a:71:f7:ab: 85:5b:dd:5a:c4:18:b5:a1:d4:02:c0:82:0c:31:ae: 0a:62:71:29:7e:9e:57:b3:7b:66:bd:ab:f1:f9:af: d9:b4:5a:5a:cb:6d:49:84:41:d1:c1:02:f4:0d:86: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F3:DE:5E:06:B9:35:83:50:56:80:0B:FE:2D:B9:26:06:F0:9B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/71fdeb78-f198-3e40-a3d7-d5ad5051830c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.crl X509v3 Authority Key Identifier: keyid:58:ED:26:50:5E:5A:09:2B:64:E7:DC:6D:EA:03:3E:74:A6:C1:EE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b8905a5-c78f-4e7c-8e6b-8d3cd5b805fd.cer sbgp-ipAddrBlock: critical IPv4: 142.239.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:15:ba:a3:bf:26:c4:74:e4:4b:d0:47:c9:40:c7:86:8e:07: d6:b6:43:be:1d:f5:c3:68:e2:2e:68:cd:93:26:2c:58:93:8a: 6d:e7:87:e5:b3:52:e4:4e:5e:be:cf:5e:23:b9:0d:49:a5:55: 3c:fb:fb:2f:02:81:95:40:23:f2:be:9e:1c:f0:22:2c:77:d9: ea:07:fc:19:31:6f:70:f0:66:5e:c2:e7:f1:6b:9a:fe:6f:b6: f2:1d:0d:4b:71:7b:19:64:e1:c4:fe:73:a4:6f:c9:7e:2c:23: 1c:0d:c4:1d:ea:e8:ac:5d:b0:08:04:44:51:6e:18:e8:4f:a0: b0:c2:87:24:96:27:43:4d:4b:bf:52:f8:ce:59:c0:fe:19:d8: 15:16:c6:27:b0:04:66:09:80:c9:e3:62:3f:eb:28:e8:29:be: 2e:8e:87:53:f1:03:fd:a6:d4:6c:2d:a6:c1:53:c9:99:72:76: ea:53:fd:5d:f5:d1:a0:44:62:a7:d3:d5:2d:00:d3:71:fe:80: 70:f2:b3:e7:bd:07:7d:9c:70:a2:72:40:ed:05:a1:cb:f1:6e: 2e:a4:ef:f4:37:29:57:ef:7c:3c:16:89:5c:be:e4:07:5a:1a: b9:99:90:86:7a:33:8c:14:57:b6:ca:09:f7:bd:2b:a6:e2:2c: 5d:f0:e0:be -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2og2drXl2EKXUGO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI4OTA1YTUtYzc4Zi00ZTdjLThlNmItOGQzY2Q1Yjgw NWZkMB4XDTI2MDQyODE2NDIwOFoXDTI2MDcyNzE2NDIwOFowLzEtMCsGA1UEAxMk ZjQ3MjA3ODAtOTY0MS00MmE0LWE3OGMtNTczOGM5ZDRkYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZdi5Qzn4ugCRJebYf8BuwrikDUMFhC313+M gS+M7vEpyYImUk28OXlhfwS1PkLix/5f54MVv69LVVM9As0yjjVFHO8MFx08bDDs k77pdOmx04Y5cMsbKXXZ4ghGZyOqhaLtz6XYxNF2q+QHPaynl0u+zjEpIHYnO7e3 E5iI+zeDO/1SIT4hSAMpXiaoWJNTFhtN5HxBSbMX3CviWMSwNdB6qH27AEe2ZROK ZtymOVlKa3IAKv0dPHZSeeYGA5B/XWrSPCAYt8s/S8VZMopx96uFW91axBi1odQC wIIMMa4KYnEpfp5Xs3tmvavx+a/ZtFpay21JhEHRwQL0DYaD9wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE7z3l4GuTWDUFaAC/4tuSYG8JskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wYjg5 MDVhNS1jNzhmLTRlN2MtOGU2Yi04ZDNjZDViODA1ZmQvNzFmZGViNzgtZjE5OC0z ZTQwLWEzZDctZDVhZDUwNTE4MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMGI4OTA1YTUtYzc4Zi00ZTdjLThl NmItOGQzY2Q1YjgwNWZkLzBiODkwNWE1LWM3OGYtNGU3Yy04ZTZiLThkM2NkNWI4 MDVmZC5jcmwwHwYDVR0jBBgwFoAUWO0mUF5aCStk59xt6gM+dKbB7o4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wYjg5MDVhNS1jNzhmLTRlN2MtOGU2Yi04ZDNj ZDViODA1ZmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAju8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiRW6o78mxHTkS9BHyUDHho4H1rZDvh31w2jiLmjNkyYsWJOKbeeH5bNS 5E5evs9eI7kNSaVVPPv7LwKBlUAj8r6eHPAiLHfZ6gf8GTFvcPBmXsLn8Wua/m+2 8h0NS3F7GWThxP5zpG/JfiwjHA3EHerorF2wCAREUW4Y6E+gsMKHJJYnQ01Lv1L4 zlnA/hnYFRbGJ7AEZgmAyeNiP+so6Cm+Lo6HU/ED/abUbC2mwVPJmXJ26lP9XfXR oERip9PVLQDTcf6AcPKz570HfZxwonJA7QWhy/FuLqTv9DcpV+98PBaJXL7kB1oa uZmQhnozjBRXtsoJ970rpuIsXfDgvg== -----END CERTIFICATE-----Generated at Wed May 13 06:48:00 2026 by rpki-client