$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/875cb8ee-e815-3d4b-8fc0-e36a9de59822.roa File: 875cb8ee-e815-3d4b-8fc0-e36a9de59822.roa (raw, json) Hash identifier: Nre//BZympcew3z3wAcPAA6okv+SQ/bMsKBC1GUgtEs= Subject key identifier: A5:00:90:60:D0:69:58:80:45:2D:10:B6:E1:B5:EE:5D:99:28:35:A0 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D386A626E769BD33F40C121C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/875cb8ee-e815-3d4b-8fc0-e36a9de59822.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 20115 IP address blocks: 142.173.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:62:6e:76:9b:d3:3f:40:c1:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=aa2686e1-edf6-4248-ae3a-1ce4105596f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:80:70:fd:b5:c5:7b:9b:6a:8f:39:a1:ea:fe: 79:42:3d:a9:73:0c:2f:cf:a2:10:11:43:37:bd:b0: d1:e7:94:ca:2b:cd:10:51:ed:53:d2:df:7b:76:dc: 2a:ca:b2:67:ec:27:d2:ce:b5:1d:46:0e:d7:5a:3b: fd:97:ef:d2:cb:08:46:fc:ff:67:48:b5:7a:fa:e7: 33:f0:e3:a9:8c:75:03:dd:0a:ca:bc:72:55:50:bc: 83:4f:de:f8:5c:17:b6:67:07:47:a1:8a:99:e0:8f: 01:31:7b:13:e5:6a:d5:74:ba:21:41:a3:58:c5:3e: 50:85:75:9c:1b:32:17:10:05:6f:1c:fc:0a:ee:9e: 69:d8:12:a1:81:74:82:79:a2:58:f8:d3:5e:dd:2b: b1:a8:10:59:d8:0e:98:36:52:74:86:95:e6:06:ff: da:d0:18:0e:68:01:57:bb:99:d4:93:dd:d6:a0:74: aa:1a:5b:f1:d7:76:f9:3d:83:62:cd:1d:02:e5:a3: e1:a1:03:15:50:ac:5d:99:97:c2:c8:19:3c:98:0a: 3b:24:3b:27:54:61:70:1a:3a:28:83:eb:0b:62:ec: 7c:ad:25:12:fd:ba:7a:80:96:d9:62:09:14:35:eb: ae:18:14:37:0c:a9:20:66:47:4a:1f:74:a1:01:ff: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:00:90:60:D0:69:58:80:45:2D:10:B6:E1:B5:EE:5D:99:28:35:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/875cb8ee-e815-3d4b-8fc0-e36a9de59822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 142.173.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:80:2f:ea:06:43:95:1a:af:62:32:00:64:c3:12:eb:f7:69: 2d:22:4a:0b:37:7d:68:4e:7d:e0:e1:c7:4a:63:31:b6:cc:e5: 94:15:db:cf:87:c1:93:a5:82:ad:18:30:9f:60:69:a4:bf:1c: 09:a9:d5:2d:35:6e:fb:e7:f1:16:2a:cf:32:2d:6a:c9:a5:34: 99:97:37:ca:81:3f:b9:d7:58:37:e8:cf:94:9f:63:ed:02:48: 6b:1f:e6:37:59:02:15:71:01:ca:ea:50:1f:0b:27:ff:a4:cd: 54:1e:2b:aa:e4:07:b5:dc:4b:15:83:76:f3:65:ed:12:8a:3a: 77:12:da:23:90:53:d6:61:0c:80:1f:05:74:c1:10:c6:43:9f: ea:e5:23:20:fc:95:21:da:1e:bc:ef:82:ec:2d:d3:61:69:52: 79:17:60:06:7b:ec:8b:ca:f2:5d:d3:65:b8:48:dc:7d:cc:27: 81:b5:e3:e5:88:f7:d7:40:fb:77:91:f7:e8:bc:55:9c:e1:6c: 8e:b7:5a:63:e4:03:56:b7:55:4c:3f:6b:13:61:54:ff:ff:f1: 85:ff:b4:9b:ac:93:af:87:81:49:6b:e5:48:bc:b3:3c:e0:c2: c2:61:42:a0:f1:00:1e:0c:f4:dd:a9:e5:05:e1:02:80:90:65: b0:ac:d6:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04amJudpvTP0DBIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YWEyNjg2ZTEtZWRmNi00MjQ4LWFlM2EtMWNlNDEwNTU5NmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYBw/bXFe5tqjzmh6v55Qj2pcwwvz6IQEUM3 vbDR55TKK80QUe1T0t97dtwqyrJn7CfSzrUdRg7XWjv9l+/SywhG/P9nSLV6+ucz 8OOpjHUD3QrKvHJVULyDT974XBe2ZwdHoYqZ4I8BMXsT5WrVdLohQaNYxT5QhXWc GzIXEAVvHPwK7p5p2BKhgXSCeaJY+NNe3SuxqBBZ2A6YNlJ0hpXmBv/a0BgOaAFX u5nUk93WoHSqGlvx13b5PYNizR0C5aPhoQMVUKxdmZfCyBk8mAo7JDsnVGFwGjoo g+sLYux8rSUS/bp6gJbZYgkUNeuuGBQ3DKkgZkdKH3ShAf8G2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUAkGDQaViARS0QtuG17l2ZKDWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODc1Y2I4ZWUtZTgxNS0z ZDRiLThmYzAtZTM2YTlkZTU5ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjq3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWAL+oGQ5Uar2IyAGTDEuv3aS0iSgs3fWhOfeDhx0pjMbbM5ZQV28+H wZOlgq0YMJ9gaaS/HAmp1S01bvvn8RYqzzItasmlNJmXN8qBP7nXWDfoz5SfY+0C SGsf5jdZAhVxAcrqUB8LJ/+kzVQeK6rkB7XcSxWDdvNl7RKKOncS2iOQU9ZhDIAf BXTBEMZDn+rlIyD8lSHaHrzvguwt02FpUnkXYAZ77IvK8l3TZbhI3H3MJ4G14+WI 99dA+3eR9+i8VZzhbI63WmPkA1a3VUw/axNhVP//8YX/tJusk6+HgUlr5Ui8szzg wsJhQqDxAB4M9N2p5QXhAoCQZbCs1kU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:37 2026 by rpki-client