$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/4dc077a2-b9da-352a-8495-87cb9e84d44c.roa File: 4dc077a2-b9da-352a-8495-87cb9e84d44c.roa (raw, json) Hash identifier: 531UMzudi2kMdaOejqdxEUva6Q/RCJecMBHGicQf77o= Subject key identifier: 55:57:39:70:80:C5:0E:42:84:0E:47:FA:96:E4:F0:16:3E:61:C7:3B Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584D3704BFB496E143C4CFE77400 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/4dc077a2-b9da-352a-8495-87cb9e84d44c.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 397181 IP address blocks: 142.249.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:bf:b4:96:e1:43:c4:cf:e7:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=ee491f78-f517-4780-95b9-04ddc24b7a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:c9:d2:a9:ac:b3:0f:86:9d:48:cf:ee:8f: d2:3a:c3:e0:fe:ae:3e:5c:e1:d9:12:22:7c:a5:20: 50:91:6a:34:bb:40:df:92:64:03:43:51:33:87:59: a8:bd:59:3d:41:c0:e6:fc:d9:73:c8:fe:c0:c3:ee: c1:80:a2:f5:5b:4e:2f:a6:b7:4f:e4:8c:58:d4:b3: ca:3a:19:e3:27:c6:a8:db:b1:cf:13:15:6c:d2:ef: d4:dc:28:45:9c:49:36:07:55:e4:3b:0f:29:14:c1: 58:34:38:96:d7:d2:59:fa:31:1d:37:34:8c:01:03: 66:7b:76:24:0f:83:b0:a7:6c:d7:9b:5d:f3:bf:88: d2:39:a7:fd:cc:a1:43:57:a8:7c:61:2d:06:71:b9: 65:37:dc:3e:b0:c6:8c:28:36:a0:10:5d:91:36:4e: b1:82:72:d7:6d:15:8c:51:c0:3b:ce:cb:29:20:9e: 66:3b:d1:ca:9c:65:98:df:ce:0e:1f:26:e3:b5:a3: d1:50:9a:fb:e4:68:da:8b:e3:bb:fd:9a:91:49:da: b3:85:35:74:81:84:37:23:2b:f4:8e:4b:5e:21:40: 7f:aa:2d:9a:c6:b9:98:6c:f9:4c:13:90:79:db:68: fd:2a:36:1d:3e:2b:a3:ff:ae:5b:d3:be:63:a2:cd: 33:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:57:39:70:80:C5:0E:42:84:0E:47:FA:96:E4:F0:16:3E:61:C7:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/4dc077a2-b9da-352a-8495-87cb9e84d44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2a:cc:9c:0f:3e:28:76:7c:c5:cd:2f:c8:37:c5:99:36:e1: 3f:dd:67:f3:f6:91:c8:54:e0:1f:00:d0:a3:19:19:e1:06:83: 75:51:60:02:8f:54:38:e1:27:c4:e3:ab:38:05:82:98:8d:24: 06:20:fe:b0:c5:6a:d9:9b:19:78:53:30:ab:f6:4a:aa:01:b6: e9:5c:93:c9:72:58:8d:b3:c4:f5:5b:3f:d3:b0:b2:fd:b5:5f: 86:38:f9:89:ed:ed:bc:f7:00:2f:c3:f1:b1:c1:a2:27:28:db: dd:b8:73:81:a5:bc:f1:7b:a3:a4:01:28:8a:67:84:4c:f0:ec: a3:d8:90:d7:ae:5e:32:9c:f6:88:d2:20:34:1c:46:02:63:c2: f9:3f:26:e5:ab:6d:87:50:43:d5:9a:6f:38:46:09:7d:ee:31: 66:40:48:04:1b:23:4a:65:cb:52:cc:f2:07:d3:51:da:bc:9a: 66:1b:b8:ce:f5:fe:60:15:fb:5f:4f:06:df:50:b5:c9:39:28: 8c:e6:02:00:8b:21:36:28:d6:0a:44:21:c6:49:c2:7f:8b:5d: 29:42:42:fa:77:5c:ad:12:a1:d6:28:d8:43:9a:ee:62:a3:d2: a3:c9:d1:95:01:61:85:9b:e1:de:2e:ba:b7:8d:35:cf:7e:46: 14:ae:3a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BL+0luFDxM/ndAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk ZWU0OTFmNzgtZjUxNy00NzgwLTk1YjktMDRkZGMyNGI3YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR7J0qmssw+GnUjP7o/SOsPg/q4+XOHZEiJ8 pSBQkWo0u0DfkmQDQ1Ezh1movVk9QcDm/NlzyP7Aw+7BgKL1W04vprdP5IxY1LPK OhnjJ8ao27HPExVs0u/U3ChFnEk2B1XkOw8pFMFYNDiW19JZ+jEdNzSMAQNme3Yk D4Owp2zXm13zv4jSOaf9zKFDV6h8YS0GcbllN9w+sMaMKDagEF2RNk6xgnLXbRWM UcA7zsspIJ5mO9HKnGWY384OHybjtaPRUJr75Gjai+O7/ZqRSdqzhTV0gYQ3Iyv0 jkteIUB/qi2axrmYbPlME5B522j9KjYdPiuj/65b075jos0zLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVXOXCAxQ5ChA5H+pbk8BY+Ycc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvNGRjMDc3YTItYjlkYS0z NTJhLTg0OTUtODdjYjllODRkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4qzJwPPih2fMXNL8g3xZk24T/dZ/P2kchU4B8A0KMZGeEGg3VRYAKP VDjhJ8TjqzgFgpiNJAYg/rDFatmbGXhTMKv2SqoBtulck8lyWI2zxPVbP9Owsv21 X4Y4+Ynt7bz3AC/D8bHBoico2924c4GlvPF7o6QBKIpnhEzw7KPYkNeuXjKc9ojS IDQcRgJjwvk/JuWrbYdQQ9WabzhGCX3uMWZASAQbI0ply1LM8gfTUdq8mmYbuM71 /mAV+19PBt9Qtck5KIzmAgCLITYo1gpEIcZJwn+LXSlCQvp3XK0SodYo2EOa7mKj 0qPJ0ZUBYYWb4d4uureNNc9+RhSuOv8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:03:52 2026 by rpki-client