$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/e780e350-0413-3fc9-8b40-6dfb26834f38.roa File: e780e350-0413-3fc9-8b40-6dfb26834f38.roa (raw, json) Hash identifier: bmuXSYjzjyWIbWfPy9SN+w56Blyi6Gv7nu4gRHH2b20= Subject key identifier: 8C:7C:84:C8:66:7B:FF:98:36:A1:28:48:7B:50:C1:19:2B:53:20:1A Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584D3704C20DC812FFEEEFA46A00 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/e780e350-0413-3fc9-8b40-6dfb26834f38.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 397181 IP address blocks: 142.249.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:c2:0d:c8:12:ff:ee:ef:a4:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=6913739d-23de-446b-af1c-7a69ade97e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:97:1b:7b:42:64:2a:f0:3b:98:24:f1:af:6c: d1:94:8f:c8:4b:45:d0:17:17:82:de:44:6d:43:f5: 5f:20:b5:16:5e:3a:75:3f:3e:1a:18:54:60:03:83: f1:ef:2a:74:df:24:25:56:fc:8a:ed:e4:66:f7:17: ee:72:2b:78:97:69:6c:5d:50:09:b1:66:47:02:35: 4c:ca:d1:32:a1:04:b1:72:1d:f7:82:de:b2:e0:8c: 3d:cb:c3:58:be:7e:cd:bf:17:91:cd:97:85:93:2e: 96:7b:4c:cd:27:cb:8e:ca:ec:e0:04:c0:fc:38:27: 24:4e:1e:8b:09:d8:47:8f:78:1b:10:6a:d5:21:46: ce:e0:ab:bd:60:b4:5d:6f:db:d7:63:39:6c:24:e6: 3c:56:c6:2c:22:24:19:9d:a7:bb:eb:91:1d:34:63: 11:8e:3b:4d:e6:f2:c8:7c:cd:f9:35:e2:41:c6:e5: 3b:0b:27:84:c4:f0:ae:60:18:ad:0f:3f:d3:b4:f5: 15:21:38:73:98:2f:1b:87:f3:49:a2:dd:ab:28:ca: 60:0b:4c:7d:de:f9:93:8e:59:68:24:6f:f5:55:3e: 7f:2c:cc:a2:da:a2:61:a0:f8:9f:7f:56:53:1c:48: 34:f7:c3:9a:4f:8a:61:67:62:fb:2b:80:d4:78:a7: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7C:84:C8:66:7B:FF:98:36:A1:28:48:7B:50:C1:19:2B:53:20:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/e780e350-0413-3fc9-8b40-6dfb26834f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:af:3d:33:72:55:1e:8b:80:05:c0:60:f0:c0:73:12:b3:82: a0:0c:de:26:3c:ce:c6:03:0a:a4:96:0d:7c:32:8a:37:71:df: da:9a:c1:9f:f7:0f:24:78:7c:67:68:ce:98:38:96:0e:2c:6f: 29:da:f5:ae:db:b4:a9:1f:5e:eb:a5:1a:1b:b2:87:26:43:2a: 5f:f4:b3:4c:55:c0:bd:9d:5f:49:b5:71:38:96:f9:04:d7:4c: 34:43:dc:9a:ad:33:d3:f4:12:40:44:c9:b1:3a:a2:6a:2f:e8: 88:43:f8:88:e1:bf:ff:06:7a:55:50:39:e3:0e:cb:cd:f4:f7: 10:b0:8a:1c:21:94:d9:25:68:84:84:29:c3:69:e1:6a:c8:bc: a5:8b:71:6e:74:35:7e:cc:ae:93:40:d6:f9:e7:16:83:4a:18: 10:75:36:ff:8b:e0:5f:90:c9:8c:3b:0a:0b:9d:38:f8:72:0b: 7a:64:3c:06:5b:94:be:aa:9e:c8:b3:fe:92:09:ca:67:c4:3c: 03:76:f1:5b:7f:46:b2:cc:f6:eb:dc:71:b5:8c:b1:92:d0:d5: b8:18:23:2e:86:0d:81:0f:66:7b:d4:93:b3:62:ff:7a:dd:f8: a4:df:ff:d7:5f:c3:b3:75:96:c0:0f:80:7a:db:a8:38:3e:ff: 98:6d:6f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BMINyBL/7u+kagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk NjkxMzczOWQtMjNkZS00NDZiLWFmMWMtN2E2OWFkZTk3ZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpcbe0JkKvA7mCTxr2zRlI/IS0XQFxeC3kRt Q/VfILUWXjp1Pz4aGFRgA4Px7yp03yQlVvyK7eRm9xfucit4l2lsXVAJsWZHAjVM ytEyoQSxch33gt6y4Iw9y8NYvn7NvxeRzZeFky6We0zNJ8uOyuzgBMD8OCckTh6L CdhHj3gbEGrVIUbO4Ku9YLRdb9vXYzlsJOY8VsYsIiQZnae765EdNGMRjjtN5vLI fM35NeJBxuU7CyeExPCuYBitDz/TtPUVIThzmC8bh/NJot2rKMpgC0x93vmTjllo JG/1VT5/LMyi2qJhoPiff1ZTHEg098OaT4phZ2L7K4DUeKdBbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx8hMhme/+YNqEoSHtQwRkrUyAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvZTc4MGUzNTAtMDQxMy0z ZmM5LThiNDAtNmRmYjI2ODM0ZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKvPTNyVR6LgAXAYPDAcxKzgqAM3iY8zsYDCqSWDXwyijdx39qawZ/3 DyR4fGdozpg4lg4sbyna9a7btKkfXuulGhuyhyZDKl/0s0xVwL2dX0m1cTiW+QTX TDRD3JqtM9P0EkBEybE6omov6IhD+Ijhv/8GelVQOeMOy8309xCwihwhlNklaISE KcNp4WrIvKWLcW50NX7MrpNA1vnnFoNKGBB1Nv+L4F+QyYw7CgudOPhyC3pkPAZb lL6qnsiz/pIJymfEPAN28Vt/RrLM9uvccbWMsZLQ1bgYIy6GDYEPZnvUk7Ni/3rd +KTf/9dfw7N1lsAPgHrbqDg+/5htb/k= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:51 2026 by rpki-client