$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/1ca0c743-7903-3c42-ba3d-ffe37aee44c2.roa File: 1ca0c743-7903-3c42-ba3d-ffe37aee44c2.roa (raw, json) Hash identifier: xospbM7ksxiuVdclwhPqJ/EdOoT29ZaC8xRYK6lQOC8= Subject key identifier: 6C:71:FA:2A:B3:A1:37:10:28:11:B2:88:38:A2:B3:15:67:A3:2C:38 Certificate issuer: /CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722 Certificate serial: 010D0C9F4328584DB60AD56B2884B44D9764CC40 Authority key identifier: 96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/1ca0c743-7903-3c42-ba3d-ffe37aee44c2.roa Signing time: Sun 03 May 2026 13:00:31 +0000 ROA not before: Sun 03 May 2026 13:00:31 +0000 ROA not after: Sat 01 Aug 2026 13:00:31 +0000 asID: 46998 IP address blocks: 142.249.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b6:0a:d5:6b:28:84:b4:4d:97:64:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722 Validity Not Before: May 3 13:00:31 2026 GMT Not After : Aug 1 13:00:31 2026 GMT Subject: CN=56b5524e-112b-48be-ad79-da5d4333cd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:0b:65:b0:86:cc:2a:17:12:51:e7:ea:16: 34:c0:5a:48:1e:e0:bd:35:8e:75:0f:47:e1:ac:f5: 0c:0c:68:5b:d3:09:ca:63:6a:72:e2:73:c6:85:70: c8:47:7d:bd:40:11:6f:7c:12:e2:31:87:9a:d2:15: a6:e1:9a:ee:3c:b4:d4:8f:47:98:cd:4d:57:26:ea: 82:46:59:e8:16:b4:08:d8:9d:c4:ee:07:7d:03:0a: 6d:36:c8:7e:39:1b:97:2a:72:24:03:25:28:8c:d6: 68:aa:99:de:6e:1f:46:5f:19:76:63:5f:f4:5d:ba: 40:e9:f5:45:d8:b1:6a:27:34:d0:5f:6e:b3:75:5c: 64:3a:33:30:1a:18:38:c9:09:90:97:e3:f4:a6:64: c3:cc:7c:1f:c7:88:e6:91:35:4a:ed:34:c1:f4:ff: 79:92:d0:c4:20:d5:d8:53:3f:dd:de:cb:65:ba:91: c0:88:d1:48:dd:2d:c8:1d:8a:a8:66:51:ac:c9:a2: ed:22:31:21:4d:d2:1d:7f:eb:a4:d8:43:26:71:ad: c6:db:bf:64:d6:5c:0f:55:15:b7:11:11:4b:3a:72: 3d:6d:2e:85:c8:b1:c0:a1:6e:00:80:40:30:ee:26: 6c:8a:58:d2:f7:9f:b7:a1:35:b0:44:e0:0e:07:91: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:71:FA:2A:B3:A1:37:10:28:11:B2:88:38:A2:B3:15:67:A3:2C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/1ca0c743-7903-3c42-ba3d-ffe37aee44c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl X509v3 Authority Key Identifier: keyid:96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer sbgp-ipAddrBlock: critical IPv4: 142.249.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e1:cd:ac:6a:6a:d6:b6:a3:36:33:31:50:41:6e:67:89:75: 2a:ff:da:75:f1:d3:31:65:65:c6:17:bc:3f:e0:98:04:29:d6: 08:3c:74:2e:67:36:1a:b1:b4:34:bd:f0:73:b7:7e:64:75:bb: 91:9b:e8:42:94:73:62:90:96:bd:44:aa:a6:9d:47:21:d3:ec: b2:a7:09:35:1d:2c:ba:6f:e7:72:b7:46:16:50:f3:35:43:04: 76:a3:08:f4:6b:93:ea:93:d4:f8:df:14:ac:a6:42:2a:4d:98: 23:18:4f:d4:9d:d4:56:a2:d1:12:fe:18:2d:c9:2c:15:94:ba: 2b:6e:38:ef:aa:76:62:71:db:49:61:be:a2:b3:62:50:f3:b4: 12:b3:e5:8e:6e:46:a4:61:12:f9:28:8c:2e:cb:f4:2b:ee:48: 4c:a7:0c:ae:82:79:27:37:c7:d2:f6:10:41:dd:6d:68:75:9c: 47:e6:cc:1a:b4:bd:1c:03:bc:fa:73:9f:31:83:b6:6d:fc:8b: fe:c2:da:e7:bc:03:45:6d:5d:88:8e:f7:df:63:74:fd:3b:52: 44:fa:05:09:2a:3b:26:03:ed:cc:ae:cd:75:5d:d3:3e:0a:ad: b6:d5:e7:0d:d9:9f:e4:dd:23:b2:86:ac:52:be:59:4f:8c:19: aa:7e:9f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE22CtVrKIS0TZdkzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2YxYjIzZDEtYjI2ZC00OWY3LWI5Y2UtYzM4OTZhZDQz NzIyMB4XDTI2MDUwMzEzMDAzMVoXDTI2MDgwMTEzMDAzMVowLzEtMCsGA1UEAxMk NTZiNTUyNGUtMTEyYi00OGJlLWFkNzktZGE1ZDQzMzNjZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH4LZbCGzCoXElHn6hY0wFpIHuC9NY51D0fh rPUMDGhb0wnKY2py4nPGhXDIR329QBFvfBLiMYea0hWm4ZruPLTUj0eYzU1XJuqC RlnoFrQI2J3E7gd9AwptNsh+ORuXKnIkAyUojNZoqpnebh9GXxl2Y1/0XbpA6fVF 2LFqJzTQX26zdVxkOjMwGhg4yQmQl+P0pmTDzHwfx4jmkTVK7TTB9P95ktDEINXY Uz/d3stlupHAiNFI3S3IHYqoZlGsyaLtIjEhTdIdf+uk2EMmca3G279k1lwPVRW3 ERFLOnI9bS6FyLHAoW4AgEAw7iZsiljS95+3oTWwROAOB5GuHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxx+iqzoTcQKBGyiDiisxVnoyw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ZjFi MjNkMS1iMjZkLTQ5ZjctYjljZS1jMzg5NmFkNDM3MjIvMWNhMGM3NDMtNzkwMy0z YzQyLWJhM2QtZmZlMzdhZWU0NGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2YxYjIzZDEtYjI2ZC00OWY3LWI5 Y2UtYzM4OTZhZDQzNzIyLzdmMWIyM2QxLWIyNmQtNDlmNy1iOWNlLWMzODk2YWQ0 MzcyMi5jcmwwHwYDVR0jBBgwFoAUlg8mifJReSTwTAc1sJbJQ06nG4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ZjFiMjNkMS1iMjZkLTQ5ZjctYjljZS1jMzg5 NmFkNDM3MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7hzaxqata2ozYzMVBBbmeJdSr/2nXx0zFlZcYXvD/gmAQp1gg8dC5n NhqxtDS98HO3fmR1u5Gb6EKUc2KQlr1EqqadRyHT7LKnCTUdLLpv53K3RhZQ8zVD BHajCPRrk+qT1PjfFKymQipNmCMYT9Sd1Fai0RL+GC3JLBWUuituOO+qdmJx20lh vqKzYlDztBKz5Y5uRqRhEvkojC7L9CvuSEynDK6CeSc3x9L2EEHdbWh1nEfmzBq0 vRwDvPpznzGDtm38i/7C2ue8A0VtXYiO999jdP07UkT6BQkqOyYD7cyuzXVd0z4K rbbV5w3Zn+TdI7KGrFK+WU+MGap+n98= -----END CERTIFICATE-----Generated at Wed May 13 07:49:28 2026 by rpki-client