$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9b2171bb-3f6c-3777-be83-297e5f65c6d0.roa File: 9b2171bb-3f6c-3777-be83-297e5f65c6d0.roa (raw, json) Hash identifier: +cvOOEJMn1YCeu1yz23ONsx58sluRVv6ZwQ6b1bzt94= Subject key identifier: 86:81:FE:2E:D9:3E:1A:FF:C6:58:F3:38:46:A2:35:74:DA:E1:D2:04 Certificate issuer: /CN=d575d3fa-017d-4991-9edf-39101e5d78b5 Certificate serial: 010D0C9F4328584D3704C1C15B2866729D9F2000 Authority key identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9b2171bb-3f6c-3777-be83-297e5f65c6d0.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 401461 IP address blocks: 142.249.4.0/22 maxlen: 22 2602:f7b4::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:c1:c1:5b:28:66:72:9d:9f:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d575d3fa-017d-4991-9edf-39101e5d78b5 Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=b161e030-f81b-46d2-86eb-d3c4eefde08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:ee:1d:65:4d:a8:b9:27:94:05:39:ea:f7: a3:94:a8:17:b6:39:0b:ca:f6:3e:e9:8d:0e:68:0e: 35:31:c4:91:a3:76:e7:e3:3a:18:07:98:27:7e:86: 7e:94:9c:69:4d:10:e0:a0:24:e7:86:0f:78:0e:fe: 4b:b2:c6:05:88:ca:13:00:7c:17:6e:7e:71:25:b4: cb:e2:9c:46:54:c5:b9:e7:13:52:8b:a1:66:ee:05: 1c:24:56:c1:68:a3:0b:a2:9f:35:1e:e9:7f:fa:28: 95:51:09:2b:aa:9e:15:68:ee:c0:b1:8c:a9:85:24: 8d:0c:8a:6c:c6:8b:37:69:fc:be:8d:6a:2b:84:65: d8:bd:b8:41:69:f3:15:23:15:24:aa:42:67:c7:72: 23:0f:6d:4b:77:99:bd:4f:96:08:5d:85:cf:49:4c: 3e:22:57:8f:31:fd:e3:4e:e1:69:c6:04:67:18:e0: 56:54:ef:9e:a7:b5:d3:fd:ac:ff:f0:a8:45:de:70: 4c:4e:13:c2:49:84:66:c5:83:70:01:2f:20:42:f1: c0:53:46:a1:01:4b:cd:09:f9:bf:bf:e7:df:96:8f: 8f:bb:46:2f:2b:8c:dc:35:ea:17:fe:52:89:7e:40: 47:22:82:fa:b6:c6:f4:f7:6b:b2:ed:fd:ab:68:ee: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:81:FE:2E:D9:3E:1A:FF:C6:58:F3:38:46:A2:35:74:DA:E1:D2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9b2171bb-3f6c-3777-be83-297e5f65c6d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl X509v3 Authority Key Identifier: keyid:C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer sbgp-ipAddrBlock: critical IPv4: 142.249.4.0/22 IPv6: 2602:f7b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:11:fb:dd:d8:91:e2:bb:95:8c:ac:2e:82:c6:de:91:96:c4: 23:41:71:f7:80:dc:b0:21:e0:b8:4e:5b:1a:f4:b5:fe:76:72: 6f:ec:49:cd:4d:d3:6f:b5:e7:e6:4b:70:8a:e8:aa:8e:cf:80: 08:a9:fb:ed:ad:cd:da:74:94:48:6b:07:42:f3:81:cb:a1:28: 34:10:df:59:17:9a:3e:c2:43:81:35:d2:e9:ef:48:a9:59:99: f9:9e:7c:11:00:f8:bb:7b:49:62:26:3f:28:65:00:43:a9:ab: ca:21:41:6e:89:3e:1a:61:69:f1:65:c9:41:a5:66:6e:80:52: 4c:df:cf:5b:da:9c:63:f4:5d:4a:cb:97:80:95:71:10:48:df: 61:be:b5:b2:c9:11:4c:9b:2b:9c:f8:48:65:1c:c5:a5:7a:71: 65:88:83:4e:62:1d:19:2a:82:02:39:a0:18:ae:c1:cb:de:e9: 98:4b:19:cc:38:77:39:8a:9f:49:7a:7b:9e:16:7e:4e:cb:0d: 4b:fc:6c:56:92:7d:7e:7d:ae:df:82:bb:e4:e3:6e:2f:db:0c: 29:35:73:68:8b:0c:66:c1:dd:ad:c8:24:da:e1:3b:76:a3:0f: e3:44:44:1a:93:c1:5f:79:ae:0c:f9:fe:1c:49:e2:0c:44:f7: c7:65:1e:63 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE03BMHBWyhmcp2fIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3NWQzZmEtMDE3ZC00OTkxLTllZGYtMzkxMDFlNWQ3 OGI1MB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk YjE2MWUwMzAtZjgxYi00NmQyLTg2ZWItZDNjNGVlZmRlMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPbuHWVNqLknlAU56vejlKgXtjkLyvY+6Y0O aA41McSRo3bn4zoYB5gnfoZ+lJxpTRDgoCTnhg94Dv5LssYFiMoTAHwXbn5xJbTL 4pxGVMW55xNSi6Fm7gUcJFbBaKMLop81Hul/+iiVUQkrqp4VaO7AsYyphSSNDIps xos3afy+jWorhGXYvbhBafMVIxUkqkJnx3IjD21Ld5m9T5YIXYXPSUw+IlePMf3j TuFpxgRnGOBWVO+ep7XT/az/8KhF3nBMThPCSYRmxYNwAS8gQvHAU0ahAUvNCfm/ v+fflo+Pu0YvK4zcNeoX/lKJfkBHIoL6tsb092uy7f2raO5krwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIaB/i7ZPhr/xljzOEaiNXTa4dIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1 ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEwMWU1ZDc4YjUvOWIyMTcxYmItM2Y2Yy0z Nzc3LWJlODMtMjk3ZTVmNjVjNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3NWQzZmEtMDE3ZC00OTkxLTll ZGYtMzkxMDFlNWQ3OGI1L2Q1NzVkM2ZhLTAxN2QtNDk5MS05ZWRmLTM5MTAxZTVk NzhiNS5jcmwwHwYDVR0jBBgwFoAUwkGOiLkb3QGcAwS1SgSyzPlOLfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEw MWU1ZDc4YjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCjvkEMA4E AgACMAgDBgAmAve0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQEfvd2JHiu5WMrC6Cxt6RlsQjQXH3gNyw IeC4Tlsa9LX+dnJv7EnNTdNvtefmS3CK6KqOz4AIqfvtrc3adJRIawdC84HLoSg0 EN9ZF5o+wkOBNdLp70ipWZn5nnwRAPi7e0liJj8oZQBDqavKIUFuiT4aYWnxZclB pWZugFJM389b2pxj9F1Ky5eAlXEQSN9hvrWyyRFMmyuc+EhlHMWlenFliINOYh0Z KoICOaAYrsHL3umYSxnMOHc5ip9JenueFn5Oyw1L/GxWkn1+fa7fgrvk424v2wwp NXNoiwxmwd2tyCTa4Tt2ow/jREQak8Ffea4M+f4cSeIMRPfHZR5j -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:00 2026 by rpki-client