$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/840dd854-1e93-3167-92d5-2732178ff2f0.roa File: 840dd854-1e93-3167-92d5-2732178ff2f0.roa (raw, json) Hash identifier: KTo/JGh2cZUzGCXD7XUK4Kv7A2bSKSG0qH1kRjQLCyw= Subject key identifier: 89:AC:01:C5:2C:46:5D:DC:C4:7C:20:80:73:CA:AC:17:C2:E1:BC:60 Certificate issuer: /CN=e39e30b0-0750-4b85-a454-b97ac36b3e14 Certificate serial: 010D0C9F4328584D905AA062AADAA207602CEF40 Authority key identifier: 31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/840dd854-1e93-3167-92d5-2732178ff2f0.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 401443 IP address blocks: 142.249.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:a0:62:aa:da:a2:07:60:2c:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39e30b0-0750-4b85-a454-b97ac36b3e14 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=e954479e-69fc-4b81-97c2-28455f1c845d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:db:2e:ef:66:4f:1a:b6:be:85:d0:e9:f5: 3a:dd:43:a2:a4:ea:17:25:29:e8:d2:12:88:20:38: f6:84:26:de:ad:89:1e:dd:14:de:29:d5:2f:a7:58: 29:b1:84:4e:94:e4:26:bb:18:41:ca:be:70:95:a0: b6:d7:63:52:37:37:5c:8b:5c:7f:72:76:90:3d:cd: 72:f5:c5:f3:67:1a:e8:f1:6f:72:95:e6:d2:5a:ac: 73:e2:eb:15:06:7e:4d:39:69:6f:af:3d:a6:d3:d9: 5e:5f:7f:2b:1c:e6:66:0c:f4:7c:da:4a:c3:f1:81: d4:f9:49:54:ff:9c:ff:c4:63:f7:60:d8:c5:16:3c: 72:ec:f7:39:93:55:03:03:57:fd:95:eb:6b:4d:02: 31:b0:2b:e5:7c:a0:72:8a:0c:37:52:36:89:1b:71: ca:34:10:d2:be:f1:1b:dd:62:73:0b:d3:af:43:33: d3:17:71:db:9b:76:19:55:2c:16:72:0f:16:71:ac: e5:d9:01:de:bc:14:fb:c8:19:1c:e6:63:eb:3f:7d: bc:80:ae:fa:cf:7e:91:d4:ee:20:2b:01:c1:64:68: b7:98:e8:09:27:17:3d:e4:e9:03:f6:0f:cc:c9:26: 38:bf:3d:17:5d:6e:61:85:27:6f:be:86:ef:83:ea: fe:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AC:01:C5:2C:46:5D:DC:C4:7C:20:80:73:CA:AC:17:C2:E1:BC:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/840dd854-1e93-3167-92d5-2732178ff2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl X509v3 Authority Key Identifier: keyid:31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer sbgp-ipAddrBlock: critical IPv4: 142.249.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9a:81:8b:a7:42:1b:36:96:a4:a5:f3:f3:2d:35:c8:f4:2d: c1:f8:91:6d:93:8b:fe:df:66:76:0e:31:35:58:28:22:7c:8e: 14:19:a7:45:13:0f:a3:3f:9c:fd:03:1e:50:56:33:99:54:38: 4b:fc:6d:c0:47:86:0b:a6:aa:65:e0:17:6e:5d:08:b3:9c:69: 36:6a:9a:6e:f0:a9:a4:4c:e9:1e:32:04:37:f1:d5:a3:02:64: d1:00:e9:7e:9b:5f:0c:3f:15:89:eb:62:5b:a9:fd:dc:e2:0e: 26:c9:d9:17:c9:10:78:c1:57:7e:de:6f:ef:1f:03:84:9c:4e: 4e:a1:fd:dc:a6:3f:4f:83:b2:98:e6:1a:f8:b3:61:f4:3a:64: ff:0c:c4:c4:ef:53:6b:e6:b5:6d:32:9b:bc:92:3b:ec:ea:d4: 11:fc:44:9a:76:79:2b:42:1c:86:33:df:2a:ea:05:1c:64:88: e3:5b:3d:5e:49:89:95:fd:cf:9a:d5:e0:9e:36:2d:b0:1a:78: 44:60:cf:be:ac:c4:1e:1b:ee:7a:d5:ab:14:2d:3b:07:c5:f8: 77:ea:a3:71:90:7e:47:6c:19:6c:de:3d:1a:31:dc:66:7b:a8: f7:69:42:9b:3e:a4:c6:36:2f:07:05:f1:d0:91:31:d5:cc:8c: e0:31:b5:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqBiqtqiB2As70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5ZTMwYjAtMDc1MC00Yjg1LWE0NTQtYjk3YWMzNmIz ZTE0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZTk1NDQ3OWUtNjlmYy00YjgxLTk3YzItMjg0NTVmMWM4NDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+DbLu9mTxq2voXQ6fU63UOipOoXJSno0hKI IDj2hCberYke3RTeKdUvp1gpsYROlOQmuxhByr5wlaC212NSNzdci1x/cnaQPc1y 9cXzZxro8W9ylebSWqxz4usVBn5NOWlvrz2m09leX38rHOZmDPR82krD8YHU+UlU /5z/xGP3YNjFFjxy7Pc5k1UDA1f9letrTQIxsCvlfKByigw3UjaJG3HKNBDSvvEb 3WJzC9OvQzPTF3Hbm3YZVSwWcg8Wcazl2QHevBT7yBkc5mPrP328gK76z36R1O4g KwHBZGi3mOgJJxc95OkD9g/MySY4vz0XXW5hhSdvvobvg+r+ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImsAcUsRl3cxHwggHPKrBfC4bxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMzll MzBiMC0wNzUwLTRiODUtYTQ1NC1iOTdhYzM2YjNlMTQvODQwZGQ4NTQtMWU5My0z MTY3LTkyZDUtMjczMjE3OGZmMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTM5ZTMwYjAtMDc1MC00Yjg1LWE0 NTQtYjk3YWMzNmIzZTE0L2UzOWUzMGIwLTA3NTAtNGI4NS1hNDU0LWI5N2FjMzZi M2UxNC5jcmwwHwYDVR0jBBgwFoAUMVx0VP28K7ST+U0O/siwXvZiUVswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMzllMzBiMC0wNzUwLTRiODUtYTQ1NC1iOTdh YzM2YjNlMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOagYunQhs2lqSl8/MtNcj0LcH4kW2Ti/7fZnYOMTVYKCJ8jhQZp0UT D6M/nP0DHlBWM5lUOEv8bcBHhgumqmXgF25dCLOcaTZqmm7wqaRM6R4yBDfx1aMC ZNEA6X6bXww/FYnrYlup/dziDibJ2RfJEHjBV37eb+8fA4ScTk6h/dymP0+Dspjm GvizYfQ6ZP8MxMTvU2vmtW0ym7ySO+zq1BH8RJp2eStCHIYz3yrqBRxkiONbPV5J iZX9z5rV4J42LbAaeERgz76sxB4b7nrVqxQtOwfF+Hfqo3GQfkdsGWzePRox3GZ7 qPdpQps+pMY2LwcF8dCRMdXMjOAxtX0= -----END CERTIFICATE-----Generated at Tue May 12 21:34:44 2026 by rpki-client