$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/f7ace23f-c9ef-326b-a437-d5f283bd7a35.roa File: f7ace23f-c9ef-326b-a437-d5f283bd7a35.roa (raw, json) Hash identifier: Jpuzm+gg1tiBUPaDSZk1xjgKN+L9Y6c81En/k/YFG1M= Subject key identifier: B9:4A:2C:70:36:02:9B:80:DB:60:5C:81:FE:CD:0D:E8:23:F6:1F:BF Certificate issuer: /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546 Certificate serial: 010D0C9F4328584D3704BDAB154DB21C75127600 Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/f7ace23f-c9ef-326b-a437-d5f283bd7a35.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 394106 IP address blocks: 142.249.136.0/24 maxlen: 24 142.249.138.0/24 maxlen: 24 142.249.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:bd:ab:15:4d:b2:1c:75:12:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546 Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=d054293f-7761-49c9-b8de-2b0d7febfbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:24:77:05:dd:85:f8:f8:55:93:43:32:0d: ec:9c:c2:89:2e:fd:da:73:2c:48:de:0b:31:35:2f: 5f:05:34:35:db:3c:78:9d:72:9d:12:6b:cb:fe:73: 99:07:a9:01:2a:1b:6d:12:3f:9b:3c:97:5f:a6:06: d2:1a:0a:ec:36:00:2a:58:80:8d:07:c3:20:8d:2f: c2:d9:2e:1a:d1:0d:a0:35:55:75:47:65:e7:ae:61: fd:1d:78:2e:d5:4e:9e:d3:6e:70:3c:44:23:a4:b7: a7:d3:1b:26:b3:58:e3:d2:7e:cd:dc:02:bb:f5:45: 45:29:53:6a:a8:ef:8d:12:42:0f:8a:6d:42:47:90: ef:4a:cf:be:9b:b2:90:cc:9d:63:c3:b5:b3:49:e0: a4:43:b2:d6:98:92:21:2f:37:9a:59:21:ce:5e:99: 0a:37:e8:b1:72:27:f4:1e:f4:fd:c9:51:c5:8a:95: 54:fc:6e:a3:40:4d:0d:a0:89:7d:b5:6a:15:14:20: 01:19:52:eb:df:4f:b0:3f:b9:1c:fc:40:a7:ae:e0: fe:09:58:c1:b1:53:53:7f:c2:c4:b7:da:a4:d1:4d: e8:9d:d5:6b:9e:7b:ed:65:ec:06:f7:98:39:39:a1: f3:21:24:cf:1d:b0:06:07:35:a6:8d:11:fa:46:21: 3e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4A:2C:70:36:02:9B:80:DB:60:5C:81:FE:CD:0D:E8:23:F6:1F:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/f7ace23f-c9ef-326b-a437-d5f283bd7a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl X509v3 Authority Key Identifier: keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer sbgp-ipAddrBlock: critical IPv4: 142.249.136.0/24 142.249.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:b8:cc:0a:aa:28:73:5b:34:d3:71:cb:14:fa:b6:ba:83:4f: b7:91:c9:84:1e:5e:82:97:a3:01:d7:c7:3e:12:ae:ab:fe:bf: 04:4a:7b:8a:9c:55:e2:95:77:71:94:4a:1d:98:70:b6:56:10: f1:3e:03:e9:15:4f:1d:45:b6:98:d5:87:0d:d1:cd:ee:7e:dc: cd:dd:09:14:24:77:50:1a:9a:3e:2a:45:2e:0c:b8:e9:02:10: 62:68:2c:ca:86:0f:d1:af:1e:d1:5d:32:68:15:76:cf:14:cb: c1:5d:9e:ae:ce:7b:0d:84:17:ae:3b:0c:62:d0:d8:f5:dd:e3: 13:ac:63:dd:ef:3c:57:b1:b7:9d:dd:58:3a:eb:db:5e:98:1e: 29:87:05:35:f3:16:b6:6f:ce:43:f2:38:59:54:29:26:b4:53: bf:94:bc:ee:61:8d:07:43:73:0e:9c:ea:28:db:34:64:76:18: 23:e1:92:23:fa:8b:85:dc:8d:bf:9f:fb:65:2a:03:0f:f6:36: 0e:d0:f2:b3:c5:b6:44:fc:0f:76:c0:98:d0:73:15:48:cc:d2: 5c:45:3a:86:44:d4:6c:59:bb:19:6b:2f:e5:68:f7:c1:7e:d7: 68:2a:54:14:e6:45:5c:c6:cf:22:8d:ac:7e:32:59:4b:41:44: 81:9e:d1:dc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE03BL2rFU2yHHUSdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZTY2OWUtOGQ1ZC00YjM5LWE2OGYtNGY1MzZjYzJm NTQ2MB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk ZDA1NDI5M2YtNzc2MS00OWM5LWI4ZGUtMmIwZDdmZWJmYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvskdwXdhfj4VZNDMg3snMKJLv3acyxI3gsx NS9fBTQ12zx4nXKdEmvL/nOZB6kBKhttEj+bPJdfpgbSGgrsNgAqWICNB8MgjS/C 2S4a0Q2gNVV1R2XnrmH9HXgu1U6e025wPEQjpLen0xsms1jj0n7N3AK79UVFKVNq qO+NEkIPim1CR5DvSs++m7KQzJ1jw7WzSeCkQ7LWmJIhLzeaWSHOXpkKN+ixcif0 HvT9yVHFipVU/G6jQE0NoIl9tWoVFCABGVLr30+wP7kc/ECnruD+CVjBsVNTf8LE t9qk0U3ondVrnnvtZewG95g5OaHzISTPHbAGBzWmjRH6RiE+xQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLlKLHA2ApuA22Bcgf7NDegj9h+/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJl NjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUzNmNjMmY1NDYvZjdhY2UyM2YtYzllZi0z MjZiLWE0MzctZDVmMjgzYmQ3YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWQyZTY2OWUtOGQ1ZC00YjM5LWE2 OGYtNGY1MzZjYzJmNTQ2LzFkMmU2NjllLThkNWQtNGIzOS1hNjhmLTRmNTM2Y2My ZjU0Ni5jcmwwHwYDVR0jBBgwFoAUKz2jHTp9jhffSL1srEpi0l9UvhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJlNjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUz NmNjMmY1NDYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjvmIAwQB jvmKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBANy4zAqqKHNbNNNxyxT6trqDT7eRyYQeXoKXowHXxz4Srqv+ vwRKe4qcVeKVd3GUSh2YcLZWEPE+A+kVTx1FtpjVhw3Rze5+3M3dCRQkd1Aamj4q RS4MuOkCEGJoLMqGD9GvHtFdMmgVds8Uy8Fdnq7Oew2EF647DGLQ2PXd4xOsY93v PFext53dWDrr216YHimHBTXzFrZvzkPyOFlUKSa0U7+UvO5hjQdDcw6c6ijbNGR2 GCPhkiP6i4Xcjb+f+2UqAw/2Ng7Q8rPFtkT8D3bAmNBzFUjM0lxFOoZE1GxZuxlr L+Vo98F+12gqVBTmRVzGzyKNrH4yWUtBRIGe0dw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:24 2026 by rpki-client