$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa4e6123-70a5-3699-8fda-43a3b61fc845.roa File: aa4e6123-70a5-3699-8fda-43a3b61fc845.roa (raw, json) Hash identifier: Ip5yMGG1QqEWuoZwVdfu08VNt8EjTu3TP1Ziwrcosyk= Subject key identifier: FF:0C:FE:15:FE:B0:9A:25:CA:D5:4E:66:88:DE:11:55:98:5C:D8:5B Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584DC995BAA4045C5A6438F24180 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa4e6123-70a5-3699-8fda-43a3b61fc845.roa Signing time: Sun 10 May 2026 13:00:31 +0000 ROA not before: Sun 10 May 2026 13:00:31 +0000 ROA not after: Sat 08 Aug 2026 13:00:31 +0000 asID: 20001 IP address blocks: 142.147.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:95:ba:a4:04:5c:5a:64:38:f2:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 10 13:00:31 2026 GMT Not After : Aug 8 13:00:31 2026 GMT Subject: CN=39f8447f-4ef1-45e1-a46f-2c620fa64c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:1c:16:3b:fd:8c:c2:f7:c1:fd:f4:88:26: f8:3f:fd:12:d8:c8:1d:11:09:ae:1c:0a:83:62:00: f5:cd:62:d8:1c:e8:80:93:db:b5:0e:03:80:e0:f2: b1:36:65:f2:26:90:0e:60:1b:d6:6d:5c:ab:32:94: de:c6:70:ea:fa:93:f4:52:86:22:11:65:61:d2:71: e1:c1:e6:db:3e:c7:b2:c0:39:ef:d6:29:1b:fb:fa: af:b3:e7:96:37:2a:37:63:2a:aa:ac:1b:95:e6:41: c3:8f:b1:e9:dd:ce:79:21:22:82:2c:31:3e:b5:d7: f8:7d:db:4e:63:5a:01:a2:6f:0d:d4:d3:df:9b:58: a9:b5:3b:d4:21:1f:57:af:76:c9:37:65:35:8b:1e: 50:6c:f6:38:61:d8:e8:c5:39:7e:a7:df:fc:3f:33: 2d:d5:c5:14:f0:ad:15:e4:f7:bc:50:23:4e:de:fb: 8a:a5:d0:ef:25:4f:bb:4e:09:1f:1a:f8:73:c4:3f: 9a:42:7a:d8:4d:bd:29:51:6b:85:17:c7:c2:6d:ac: 97:89:f8:94:34:4d:c5:47:3b:ae:4a:59:1b:91:b2: be:14:d2:e2:e7:a2:04:28:56:e6:37:1a:bd:2b:d8: eb:20:0b:81:b6:6f:00:d1:33:de:7a:73:d0:71:25: 18:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0C:FE:15:FE:B0:9A:25:CA:D5:4E:66:88:DE:11:55:98:5C:D8:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa4e6123-70a5-3699-8fda-43a3b61fc845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 142.147.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:be:de:6c:e0:57:d8:58:76:3b:be:17:64:74:f7:be:3e:8a: 3f:a6:3e:e9:fd:cc:e8:84:89:51:10:a3:48:26:d7:4a:23:bc: e7:4f:cb:05:af:d5:0b:10:24:3c:3a:a9:f1:91:a0:31:74:41: 48:2f:65:8d:48:18:44:90:89:6e:0f:b4:59:df:d3:a1:6f:2b: 51:ff:3d:26:41:1d:34:52:fc:b6:cf:d0:38:60:eb:db:2c:b8: c0:b9:c2:cf:cd:4d:11:98:f3:28:fd:4f:04:35:7e:19:33:25: 91:42:05:4d:d1:05:25:29:72:10:7c:c1:3d:1a:1d:d1:c3:76: ff:a1:76:61:79:f4:74:8f:a3:57:0d:17:07:99:cf:52:b8:15: 56:df:43:82:c2:54:cc:8d:65:e8:f4:0e:f5:8c:2f:d6:ff:3b: 15:44:e4:a0:2b:33:31:8f:2a:de:28:90:56:7f:d8:53:97:00: 20:bb:2b:13:66:4d:14:f1:9d:a5:78:59:eb:ec:64:d3:57:60: 11:9f:f3:3d:12:d6:47:b0:1b:56:5d:4d:56:5c:86:27:d2:f0: e0:5f:2c:f9:27:73:31:a7:63:a1:7e:36:f9:fc:bd:3e:0f:7d: e4:df:4e:8c:99:31:32:c8:95:c6:67:69:37:df:b0:79:4f:3b: 8d:02:a6:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3JlbqkBFxaZDjyQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk MzlmODQ0N2YtNGVmMS00NWUxLWE0NmYtMmM2MjBmYTY0Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDQcFjv9jML3wf30iCb4P/0S2MgdEQmuHAqD YgD1zWLYHOiAk9u1DgOA4PKxNmXyJpAOYBvWbVyrMpTexnDq+pP0UoYiEWVh0nHh webbPseywDnv1ikb+/qvs+eWNyo3YyqqrBuV5kHDj7Hp3c55ISKCLDE+tdf4fdtO Y1oBom8N1NPfm1iptTvUIR9Xr3bJN2U1ix5QbPY4YdjoxTl+p9/8PzMt1cUU8K0V 5Pe8UCNO3vuKpdDvJU+7TgkfGvhzxD+aQnrYTb0pUWuFF8fCbayXifiUNE3FRzuu SlkbkbK+FNLi56IEKFbmNxq9K9jrIAuBtm8A0TPeenPQcSUYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8M/hX+sJolytVOZojeEVWYXNhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWE0ZTYxMjMtNzBhNS0z Njk5LThmZGEtNDNhM2I2MWZjODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK+3mzgV9hYdju+F2R0974+ij+mPun9zOiEiVEQo0gm10ojvOdPywWv 1QsQJDw6qfGRoDF0QUgvZY1IGESQiW4PtFnf06FvK1H/PSZBHTRS/LbP0Dhg69ss uMC5ws/NTRGY8yj9TwQ1fhkzJZFCBU3RBSUpchB8wT0aHdHDdv+hdmF59HSPo1cN FweZz1K4FVbfQ4LCVMyNZej0DvWML9b/OxVE5KArMzGPKt4okFZ/2FOXACC7KxNm TRTxnaV4WevsZNNXYBGf8z0S1kewG1ZdTVZchifS8OBfLPknczGnY6F+Nvn8vT4P feTfToyZMTLIlcZnaTffsHlPO40Cpns= -----END CERTIFICATE-----Generated at Wed May 13 08:06:06 2026 by rpki-client