$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa File: 17ce5f99-df3d-371e-8abd-913c7050a633.roa (raw, json) Hash identifier: 0i7/kCZezYuWWKohoQr8lfcpI9wM/a+w0DLmWZ722AU= Subject key identifier: 8D:AC:21:C3:2F:54:BF:85:BD:5D:A0:06:2F:19:FF:F5:80:2E:F0:E3 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584D3704B7CC69507157EA5F2C80 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 397181 IP address blocks: 142.249.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:b7:cc:69:50:71:57:ea:5f:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=540b540c-d0c2-41d2-9306-dd2bd55919ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:4b:e5:44:4c:d3:9a:50:f9:ac:e3:3b:fa: 60:c3:3e:ba:40:c1:29:66:31:e6:c1:6f:0b:25:f1: 4a:f2:d1:da:0f:54:0b:b7:c6:df:11:11:2d:26:a3: 41:60:5a:c0:00:77:2c:85:41:35:d0:5f:c2:2a:74: 2c:04:fe:c9:33:2a:71:2a:2c:6d:52:f1:b9:58:22: 30:f6:9a:c5:4d:12:09:37:ce:71:ba:6f:7f:77:53: ad:37:7f:ce:f5:51:60:0d:f3:9b:c4:00:70:17:71: c1:72:43:be:24:76:0d:bd:85:da:c6:6d:ae:8d:04: 70:86:d2:ae:c0:94:30:7f:90:81:f9:22:7e:b9:bc: 62:2c:dc:70:46:ea:7f:5c:84:61:a3:52:c2:24:91: 79:99:50:bc:0c:4d:26:c8:74:eb:51:99:be:08:10: 52:de:94:f5:86:77:e6:85:7b:2a:f3:ab:38:f7:fa: e7:af:49:80:46:8a:54:7f:e0:d9:86:ee:30:7b:a0: 6c:cc:f2:52:6e:28:9d:47:96:81:4d:fd:1f:7c:45: 61:00:c7:3b:07:9e:74:87:9d:1d:82:96:d8:c8:4c: 0c:29:30:f0:1f:07:56:c5:71:03:4e:c1:e8:c6:6d: 93:db:26:ad:44:a8:3f:1f:e4:21:1c:74:7e:71:47: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AC:21:C3:2F:54:BF:85:BD:5D:A0:06:2F:19:FF:F5:80:2E:F0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:12:4a:70:f6:d8:a5:ca:f5:5f:9b:14:66:91:b4:a1:7c:65: 6d:36:f3:a1:47:58:a1:eb:f7:47:20:0d:d4:2e:c3:1a:10:35: 01:ad:2e:ae:e7:23:a4:c5:dc:aa:33:62:ca:f2:83:9b:df:80: d6:75:3b:ab:5f:aa:ab:66:29:e2:28:82:91:cb:4d:aa:79:2a: 1a:ee:cb:90:06:fe:c2:2d:0b:b0:fc:0e:aa:88:8c:df:e3:a5: d5:0c:10:35:01:69:00:b9:95:81:15:f6:ac:1b:19:7f:cf:93: 58:62:8e:63:6c:c6:e1:3e:18:12:37:48:4f:28:ba:b7:3a:02: 6f:48:7b:e1:9a:b2:3d:97:b1:c8:2e:11:56:95:d0:29:7d:bb: 3f:fa:af:f8:ee:85:8b:43:38:18:26:59:5a:fa:38:7a:44:6a: 56:6d:44:a7:d1:4e:cd:63:86:88:3c:70:73:ce:b3:dc:e4:f3: 65:46:2f:35:45:55:1f:29:4f:9e:e4:32:26:ef:1b:c1:7d:bb: f8:8e:b3:4a:31:90:86:42:03:04:47:59:cf:70:d1:47:52:85: a5:72:95:a3:ba:fc:4a:a1:ad:24:26:f7:8b:aa:11:23:73:16: 3d:77:8b:81:ca:f9:dc:d3:2d:b1:0f:fa:2a:34:d5:d4:12:b9: f1:04:e2:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BLfMaVBxV+pfLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk NTQwYjU0MGMtZDBjMi00MWQyLTkzMDYtZGQyYmQ1NTkxOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3RL5URM05pQ+azjO/pgwz66QMEpZjHmwW8L JfFK8tHaD1QLt8bfEREtJqNBYFrAAHcshUE10F/CKnQsBP7JMypxKixtUvG5WCIw 9prFTRIJN85xum9/d1OtN3/O9VFgDfObxABwF3HBckO+JHYNvYXaxm2ujQRwhtKu wJQwf5CB+SJ+ubxiLNxwRup/XIRho1LCJJF5mVC8DE0myHTrUZm+CBBS3pT1hnfm hXsq86s49/rnr0mARopUf+DZhu4we6BszPJSbiidR5aBTf0ffEVhAMc7B550h50d gpbYyEwMKTDwHwdWxXEDTsHoxm2T2yatRKg/H+QhHHR+cUeJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2sIcMvVL+FvV2gBi8Z//WALvDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvMTdjZTVmOTktZGYzZC0z NzFlLThhYmQtOTEzYzcwNTBhNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4SSnD22KXK9V+bFGaRtKF8ZW0286FHWKHr90cgDdQuwxoQNQGtLq7n I6TF3KozYsryg5vfgNZ1O6tfqqtmKeIogpHLTap5Khruy5AG/sItC7D8DqqIjN/j pdUMEDUBaQC5lYEV9qwbGX/Pk1hijmNsxuE+GBI3SE8ourc6Am9Ie+Gasj2Xscgu EVaV0Cl9uz/6r/juhYtDOBgmWVr6OHpEalZtRKfRTs1jhog8cHPOs9zk82VGLzVF VR8pT57kMibvG8F9u/iOs0oxkIZCAwRHWc9w0UdShaVylaO6/EqhrSQm94uqESNz Fj13i4HK+dzTLbEP+io01dQSufEE4s0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:06 2026 by rpki-client