$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa File: 9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa (raw, json) Hash identifier: Bbth8lIRxVjsG6KY6wZXI9+blmtUBVfUXz2t+4bag/w= Subject key identifier: 70:91:A9:D3:04:5F:5A:30:DD:EC:E8:A4:C5:7D:E5:07:34:28:3B:18 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584D3704C08CE7F5AA5D62135100 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 397181 IP address blocks: 142.249.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:c0:8c:e7:f5:aa:5d:62:13:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=99c6acc1-3760-4f03-99a9-a3fa046f8dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3a:c2:f1:03:2e:28:0e:88:01:19:d0:85:cf: d8:c1:ae:bc:2b:19:98:56:b4:fc:a3:5e:cb:62:21: 4b:d0:77:39:6f:7a:11:c4:e9:c9:98:98:42:ce:46: 5f:d3:8e:e7:c0:93:9d:ac:59:f4:83:b5:74:01:cf: b3:0f:d6:4c:71:a4:6f:7a:c8:a6:15:5a:4b:20:54: d1:16:90:eb:1f:66:c0:c5:0a:24:60:7f:ac:76:31: 18:67:c2:75:7f:74:3e:53:c4:2b:40:52:0c:91:91: 5b:9f:25:84:98:a3:fb:cc:85:c6:7a:9b:33:aa:05: fa:a7:69:75:f3:80:32:9d:7d:0b:b4:d0:c9:79:ba: e1:84:fa:5d:bd:c3:00:1f:f0:bd:b8:73:b9:73:94: cd:fe:93:ce:b4:66:be:48:9b:f2:74:b0:30:72:8f: 68:ff:b0:db:18:49:27:bb:58:ec:72:46:aa:fd:3a: 31:57:da:be:ad:1e:31:03:26:69:3a:57:f4:91:32: 55:81:ea:6a:dc:b4:96:cc:9c:17:5e:9d:d8:d1:5c: 48:78:01:a5:0f:2e:6b:d7:ca:27:5c:d9:a5:79:34: f0:ad:c5:fe:04:ca:74:e3:3e:b8:b9:98:d1:4f:d7: 7d:4f:be:66:cf:ea:6b:9e:21:6d:b6:24:e1:4c:2b: 6a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:91:A9:D3:04:5F:5A:30:DD:EC:E8:A4:C5:7D:E5:07:34:28:3B:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:87:ba:12:0b:af:dc:12:3b:7c:25:e1:b4:4f:40:d4:6c:c8: 78:05:d0:b3:5f:6c:57:08:6e:20:73:20:c1:e6:ef:57:b0:17: 8c:d6:d9:f9:84:5b:ea:23:ec:bc:0c:b6:61:82:72:a0:76:9c: 86:f4:e9:b7:7f:db:c4:31:d1:4c:80:21:41:6d:b4:77:3e:5b: e8:47:59:3f:76:72:c4:ba:ca:c6:76:3a:6d:65:5a:cf:78:99: 9f:dc:45:82:7e:89:37:ae:39:56:0a:bd:12:f3:9f:c2:79:c5: 91:f2:cf:c0:2c:bc:66:83:9b:31:6a:9e:b4:d6:33:74:d2:93: 67:c4:4f:2f:03:5f:67:f8:3d:e8:32:ae:f6:86:44:2c:90:20: 5f:7e:a8:16:0c:79:48:59:6a:69:65:e1:b4:0c:0e:a5:03:ea: d0:9b:71:a4:6d:ce:3f:3b:58:e3:d4:93:ab:c8:49:5c:45:c4: ac:01:d3:b3:3b:fa:e7:e3:84:c9:dd:c7:81:10:9a:31:fe:b1: 84:9b:ec:9b:ca:a8:94:8e:01:db:6c:68:35:5e:50:00:d7:44: 46:0d:18:b1:a1:fd:7b:8b:bb:d6:45:e9:0f:39:95:e3:a3:0d: a3:88:29:55:bb:79:72:d9:2e:ad:d9:17:41:4a:be:dd:3a:c0: 96:2d:b9:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BMCM5/WqXWITUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk OTljNmFjYzEtMzc2MC00ZjAzLTk5YTktYTNmYTA0NmY4ZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDrC8QMuKA6IARnQhc/Ywa68KxmYVrT8o17L YiFL0Hc5b3oRxOnJmJhCzkZf047nwJOdrFn0g7V0Ac+zD9ZMcaRvesimFVpLIFTR FpDrH2bAxQokYH+sdjEYZ8J1f3Q+U8QrQFIMkZFbnyWEmKP7zIXGepszqgX6p2l1 84AynX0LtNDJebrhhPpdvcMAH/C9uHO5c5TN/pPOtGa+SJvydLAwco9o/7DbGEkn u1jsckaq/ToxV9q+rR4xAyZpOlf0kTJVgepq3LSWzJwXXp3Y0VxIeAGlDy5r18on XNmleTTwrcX+BMp04z64uZjRT9d9T75mz+prniFttiThTCtqjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCRqdMEX1ow3ezopMV95Qc0KDsYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvOWRlOGNkNDYtMTg4YS0z ZDNiLTkyMWEtMGEyYTQxZDRlNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKHuhILr9wSO3wl4bRPQNRsyHgF0LNfbFcIbiBzIMHm71ewF4zW2fmE W+oj7LwMtmGCcqB2nIb06bd/28Qx0UyAIUFttHc+W+hHWT92csS6ysZ2Om1lWs94 mZ/cRYJ+iTeuOVYKvRLzn8J5xZHyz8AsvGaDmzFqnrTWM3TSk2fETy8DX2f4Pegy rvaGRCyQIF9+qBYMeUhZamll4bQMDqUD6tCbcaRtzj87WOPUk6vISVxFxKwB07M7 +ufjhMndx4EQmjH+sYSb7JvKqJSOAdtsaDVeUADXREYNGLGh/XuLu9ZF6Q85leOj DaOIKVW7eXLZLq3ZF0FKvt06wJYtuQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:00:48 2026 by rpki-client