$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa File: bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa (raw, json) Hash identifier: /conEdIEKKldPkJ56+lBpABCMjXf/c+7Z3KjmqtWzsg= Subject key identifier: AD:FC:A5:ED:83:9A:DE:C8:A7:16:78:6C:D8:30:61:DE:62:90:88:79 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584D47C4D7D9F29496C618B36780 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 153371 IP address blocks: 142.249.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:d7:d9:f2:94:96:c6:18:b3:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=83e9bdd4-d0db-45cc-8436-b1b2f31f9be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:1e:c8:31:db:7b:d9:aa:1b:5a:1e:3f:0f: 4f:f2:a0:2b:41:4a:d1:7a:ac:f0:fd:c4:70:6e:59: 22:fa:e1:10:bd:e2:0d:2d:a2:cb:62:29:55:ca:24: 72:38:0e:ce:e8:17:57:d6:17:8e:9a:32:2f:25:d5: 21:31:53:ff:68:e1:90:cf:c2:f7:37:d2:52:c4:85: aa:27:18:e0:da:2a:6a:99:30:a7:fe:6e:ef:96:34: 03:7d:1d:0b:e6:34:56:f4:39:5c:e5:7f:c4:4a:0d: 4c:a1:50:63:56:69:da:a8:49:3d:be:8c:86:d1:c9: f3:4a:5c:3a:80:f1:9c:b4:04:e2:35:3e:16:b0:31: 54:1a:c6:fe:1d:e2:92:7d:53:b0:0a:6e:96:de:a8: fb:10:0f:7d:be:a3:5f:4f:fe:de:61:77:56:5c:82: f9:6c:0f:8a:78:10:8a:ff:05:aa:8e:d0:55:d9:7c: 46:8f:9c:8e:0a:c7:35:a1:cb:79:d6:ec:89:ab:7e: ab:9c:4e:a0:ce:54:e5:86:db:5d:7d:d0:44:a0:97: fc:51:51:27:5b:a3:98:bc:96:b1:db:2b:23:79:ba: ae:4c:8f:38:33:64:93:3f:c0:ac:5b:72:2a:a7:bc: 9b:5b:dd:b2:80:b5:6d:99:96:66:7d:97:e9:2d:16: 62:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FC:A5:ED:83:9A:DE:C8:A7:16:78:6C:D8:30:61:DE:62:90:88:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 142.249.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1d:d8:59:ed:be:b3:8a:9b:61:f0:27:cf:45:86:c9:69:3c: d3:c1:bd:d8:1b:fe:42:c5:43:7b:48:55:65:ca:d9:57:2f:9f: 43:d4:a1:d2:61:43:ae:bc:ee:d4:a5:5b:35:47:03:ef:3a:33: 57:ff:bb:85:0b:6a:97:db:8e:c2:86:4f:bc:2d:9f:7f:68:05: ff:33:95:3e:87:6b:48:ab:37:56:15:98:7d:74:54:e9:4b:e7: f5:11:06:1e:97:c3:fc:d5:7d:63:f5:1e:38:4a:a5:7d:28:18: 1b:f7:2c:50:e0:b4:11:b1:b0:4a:de:7b:09:95:b9:cd:1f:62: ca:35:25:e5:de:72:ff:6f:c6:10:44:b5:8b:7e:d7:4c:87:88: d2:af:99:69:1b:9f:68:d7:48:8a:0a:48:f0:e9:17:6c:a1:bd: a7:8b:22:7c:77:06:0a:7b:96:a2:2d:e9:9e:44:36:82:b1:3b: d9:3b:2a:d7:bf:44:e6:57:ff:9e:a5:49:06:85:a3:1b:ff:60: ff:bf:6b:9e:3d:6a:db:6c:d3:60:89:a0:aa:72:ca:51:78:10: ad:44:63:d8:91:04:24:ac:22:a9:80:8c:b4:5f:ed:17:c4:79: be:d2:9e:40:92:23:7d:30:d3:9f:bc:f0:f6:70:1d:a2:b4:e0: eb:b2:7b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxNfZ8pSWxhizZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ODNlOWJkZDQtZDBkYi00NWNjLTg0MzYtYjFiMmYzMWY5YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGweyDHbe9mqG1oePw9P8qArQUrReqzw/cRw blki+uEQveINLaLLYilVyiRyOA7O6BdX1heOmjIvJdUhMVP/aOGQz8L3N9JSxIWq Jxjg2ipqmTCn/m7vljQDfR0L5jRW9Dlc5X/ESg1MoVBjVmnaqEk9voyG0cnzSlw6 gPGctATiNT4WsDFUGsb+HeKSfVOwCm6W3qj7EA99vqNfT/7eYXdWXIL5bA+KeBCK /wWqjtBV2XxGj5yOCsc1oct51uyJq36rnE6gzlTlhttdfdBEoJf8UVEnW6OYvJax 2ysjebquTI84M2STP8CsW3Iqp7ybW92ygLVtmZZmfZfpLRZiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK38pe2Dmt7IpxZ4bNgwYd5ikIh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvYmNmM2VkNmYtODhhNi0z ZDhhLWFmZDEtYjdlNzVmZjU3YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAod2FntvrOKm2HwJ89FhslpPNPBvdgb/kLFQ3tIVWXK2Vcvn0PUodJh Q6687tSlWzVHA+86M1f/u4ULapfbjsKGT7wtn39oBf8zlT6Ha0irN1YVmH10VOlL 5/URBh6Xw/zVfWP1HjhKpX0oGBv3LFDgtBGxsEreewmVuc0fYso1JeXecv9vxhBE tYt+10yHiNKvmWkbn2jXSIoKSPDpF2yhvaeLInx3Bgp7lqIt6Z5ENoKxO9k7Kte/ ROZX/56lSQaFoxv/YP+/a549atts02CJoKpyylF4EK1EY9iRBCSsIqmAjLRf7RfE eb7SnkCSI30w05+88PZwHaK04Ouye8g= -----END CERTIFICATE-----Generated at Thu Mar 26 07:24:20 2026 by rpki-client