$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa File: 04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa (raw, json) Hash identifier: G7vS5D7cdaiKs10+ALMw+UehPok8IipYKLZY9Ig5cH8= Subject key identifier: B7:18:22:EE:B5:2E:7C:C9:02:96:90:B9:B5:E1:D6:CC:B6:BD:3F:7C Certificate issuer: /CN=1c3c552c-5e23-4989-8af0-9450094442e8 Certificate serial: 010D0C9F4328584D2644B3B0F11ABBCF06635800 Authority key identifier: 1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 142.225.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b3:b0:f1:1a:bb:cf:06:63:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c3c552c-5e23-4989-8af0-9450094442e8 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=c7c3d6fe-26a1-4ac1-af1f-cbec14835e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:97:17:66:e9:e9:c8:39:e1:57:ba:8a:c5: c8:d0:90:7f:8e:c8:c4:02:de:b2:be:f8:e6:7e:63: 20:ff:08:a0:1d:72:d3:f9:63:45:0d:34:71:a6:19: e2:b9:c9:9b:68:e7:56:be:89:7b:20:4e:a9:bf:aa: 9a:47:ef:6f:42:6d:c4:fe:b1:55:42:dc:2a:3d:8e: d5:d0:f6:e5:46:61:fc:ff:66:cc:d4:85:9b:95:6e: e1:01:fd:25:4f:d9:15:4e:2a:d4:b5:25:63:a4:41: bb:31:0e:75:e6:66:bc:ba:81:b6:55:ce:de:df:03: a6:29:77:b4:94:00:01:75:ff:a4:ad:7a:de:69:63: bc:59:59:75:f8:66:79:47:a6:f1:0c:ea:a5:df:b4: 19:08:56:3c:22:7d:87:a1:a2:e5:58:c8:35:6f:40: 0c:62:67:b9:c5:9a:5c:d5:df:cf:9e:b9:9a:75:63: 66:5e:ab:09:b7:54:8a:a7:80:91:0f:ef:d3:bc:b2: 82:d9:39:ac:70:10:7c:98:04:45:eb:b0:90:86:9a: 60:eb:6e:c1:88:95:1b:c2:33:52:ba:89:62:99:95: 6e:60:e0:76:7b:e5:b2:4d:f4:51:cc:1c:89:e1:4e: 68:3d:4b:82:82:9d:0a:79:8d:7f:70:f3:79:97:62: 50:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:18:22:EE:B5:2E:7C:C9:02:96:90:B9:B5:E1:D6:CC:B6:BD:3F:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl X509v3 Authority Key Identifier: keyid:1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer sbgp-ipAddrBlock: critical IPv4: 142.225.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cf:6e:e7:d2:9c:c5:80:05:d8:b9:36:6b:ba:3e:80:08:02: c2:56:5c:a3:79:41:28:ed:86:23:e6:d4:a6:f9:81:ab:7d:e1: 8d:1e:af:e2:9e:d7:aa:29:09:63:99:c6:60:cf:bd:e0:46:a4: bb:b7:3e:f7:4e:2e:5a:57:b8:e3:33:3e:db:62:73:a8:e4:f2: e0:12:e6:49:9a:a1:e6:9d:62:aa:f7:01:54:85:97:b1:6f:4d: 50:88:64:72:2f:58:f4:c4:99:d5:e6:69:2d:a2:34:6a:23:45: f6:3c:ae:7d:d4:b8:52:11:26:b5:6a:7e:d6:e4:0a:1c:02:e6: b2:68:d1:a4:b4:32:9f:c7:76:01:57:c1:5a:af:a4:e9:e4:eb: 68:22:9a:55:d0:08:03:9c:e2:8f:79:9c:11:cf:36:05:33:1b: ea:d4:df:dc:61:6e:6b:37:81:56:fa:c0:9b:a0:76:45:5d:56: ae:36:43:ad:d6:8b:9b:d8:bc:ae:69:af:6d:d5:ec:09:c4:92: bc:48:40:f3:58:91:09:a9:25:b4:ed:f0:f3:0e:46:a2:b3:59: 87:71:af:f8:4f:7f:85:e2:db:6d:f9:59:1d:5c:05:92:e6:71: ee:f0:ca:d2:da:b0:f0:a3:35:c2:85:ae:b3:2a:dc:b7:76:a9: d4:b3:78:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLOw8Rq7zwZjWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMzYzU1MmMtNWUyMy00OTg5LThhZjAtOTQ1MDA5NDQ0 MmU4MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YzdjM2Q2ZmUtMjZhMS00YWMxLWFmMWYtY2JlYzE0ODM1ZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9yXF2bp6cg54Ve6isXI0JB/jsjEAt6yvvjm fmMg/wigHXLT+WNFDTRxphniucmbaOdWvol7IE6pv6qaR+9vQm3E/rFVQtwqPY7V 0PblRmH8/2bM1IWblW7hAf0lT9kVTirUtSVjpEG7MQ515ma8uoG2Vc7e3wOmKXe0 lAABdf+krXreaWO8WVl1+GZ5R6bxDOql37QZCFY8In2HoaLlWMg1b0AMYme5xZpc 1d/PnrmadWNmXqsJt1SKp4CRD+/TvLKC2TmscBB8mARF67CQhppg627BiJUbwjNS uolimZVuYOB2e+WyTfRRzByJ4U5oPUuCgp0KeY1/cPN5l2JQ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcYIu61LnzJApaQubXh1sy2vT98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNj NTUyYy01ZTIzLTQ5ODktOGFmMC05NDUwMDk0NDQyZTgvMDRhZTRiNzItNTViZi0z Y2JjLWFmM2MtMTUwMWFiYzVmYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWMzYzU1MmMtNWUyMy00OTg5LThh ZjAtOTQ1MDA5NDQ0MmU4LzFjM2M1NTJjLTVlMjMtNDk4OS04YWYwLTk0NTAwOTQ0 NDJlOC5jcmwwHwYDVR0jBBgwFoAUGpOw4GB9XUWnpf4CDPsZhiD+zJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNjNTUyYy01ZTIzLTQ5ODktOGFmMC05NDUw MDk0NDQyZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzPbufSnMWABdi5Nmu6PoAIAsJWXKN5QSjthiPm1Kb5gat94Y0er+Ke 16opCWOZxmDPveBGpLu3PvdOLlpXuOMzPttic6jk8uAS5kmaoeadYqr3AVSFl7Fv TVCIZHIvWPTEmdXmaS2iNGojRfY8rn3UuFIRJrVqftbkChwC5rJo0aS0Mp/HdgFX wVqvpOnk62gimlXQCAOc4o95nBHPNgUzG+rU39xhbms3gVb6wJugdkVdVq42Q63W i5vYvK5pr23V7AnEkrxIQPNYkQmpJbTt8PMORqKzWYdxr/hPf4Xi2235WR1cBZLm ce7wytLasPCjNcKFrrMq3Ld2qdSzeF8= -----END CERTIFICATE-----Generated at Thu Mar 26 02:07:20 2026 by rpki-client