$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa File: 542301b0-83c1-3997-b59d-aab70751e89e.roa (raw, json) Hash identifier: kQQj3houFnAQX4ULcLgNCiNeD7jj6zzQ3oVgmEK7sv4= Subject key identifier: 03:2C:22:D0:0B:A6:A9:8B:54:87:90:8C:03:5B:C6:E5:D0:3E:E4:D3 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D2A74E7D8F99C4792A5D0C900 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 55293 IP address blocks: 128.201.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e7:d8:f9:9c:47:92:a5:d0:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=97d6fab3-b1ee-498e-84f2-3be1883a68f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:2c:b1:26:28:cd:70:d8:d6:40:40:c6:57: 17:af:0e:5d:40:48:21:03:cb:2d:d8:d6:56:4b:df: 83:5f:24:80:be:25:9d:e9:fd:77:8d:ec:e2:e0:32: fe:b0:b1:f7:da:0e:72:e0:d1:5b:06:0f:24:82:29: 0d:31:b1:a7:56:54:a6:a9:8a:cd:dd:72:85:c1:a7: 13:55:2f:23:91:e7:b2:dd:ed:51:11:a2:6c:6d:04: 56:22:2d:70:1c:15:6e:30:c0:59:89:70:12:c8:1c: 33:b1:b5:4d:c5:18:81:e1:f5:ff:7f:ca:ca:bd:51: 39:8f:98:83:12:f4:3b:11:d9:7c:8a:bd:a2:c0:e7: 44:45:05:e0:b2:a8:74:1e:51:38:a7:75:31:ec:a6: 4f:d0:1f:01:d8:91:54:96:32:7d:4b:59:36:73:bf: 3b:5a:dc:47:0b:70:7b:2f:52:45:70:83:12:60:60: bd:26:f8:f6:23:1e:1d:6d:fa:92:91:aa:9b:59:c6: 5a:8b:54:f3:24:e7:f5:96:3b:6b:95:e7:c8:08:c7: b3:dd:97:7f:3d:f5:d7:4d:6a:9f:3c:82:00:b7:cb: cf:90:17:b7:09:22:8e:95:ff:ad:44:ec:09:14:18: be:be:fe:ff:53:ca:22:ef:8a:d7:a0:e5:16:1b:a2: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2C:22:D0:0B:A6:A9:8B:54:87:90:8C:03:5B:C6:E5:D0:3E:E4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 128.201.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d0:3d:c0:e4:2a:35:8e:a8:1e:2e:be:34:de:6c:7e:8d:37: 35:50:8b:91:61:58:42:d2:ac:ca:da:62:d5:94:9c:cd:e9:28: 15:cb:47:a5:e4:6c:76:50:a1:d8:c1:88:bd:0a:e9:d1:77:03: b0:1d:1c:64:39:a2:3d:2e:4d:45:b2:14:45:d9:3b:56:ac:93: 5b:92:8c:db:94:90:95:35:5a:50:f7:f1:e3:21:ee:82:56:ee: 12:99:19:b9:0a:0e:d5:c5:bd:9e:2d:c9:13:c7:da:75:0d:4a: c0:79:1e:9d:27:0b:d8:4c:91:64:88:dd:8b:bd:93:cf:92:43: 7c:6e:9e:6e:3d:3c:3f:b5:0e:f0:e6:d8:ce:6e:95:d8:33:64: 77:10:74:58:1b:8c:73:42:bf:02:e6:47:4c:cf:67:e0:11:47: ec:8f:b4:af:0c:23:2e:26:d4:41:d6:6d:90:b8:46:1b:cb:ce: 31:9e:46:a6:cd:9f:e3:71:c6:30:f1:50:fe:06:eb:12:60:c8: 1c:8b:5d:b7:59:69:6d:1a:01:35:24:0d:bf:08:76:78:c1:85: 14:f3:52:44:f1:53:12:98:1f:a6:fe:af:96:68:a1:e9:dd:bb: 92:dc:2f:b3:f9:07:a3:13:67:a8:34:bc:85:05:1f:b8:c4:92: 32:41:c0:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOfY+ZxHkqXQyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OTdkNmZhYjMtYjFlZS00OThlLTg0ZjItM2JlMTg4M2E2OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4IssSYozXDY1kBAxlcXrw5dQEghA8st2NZW S9+DXySAviWd6f13jezi4DL+sLH32g5y4NFbBg8kgikNMbGnVlSmqYrN3XKFwacT VS8jkeey3e1REaJsbQRWIi1wHBVuMMBZiXASyBwzsbVNxRiB4fX/f8rKvVE5j5iD EvQ7Edl8ir2iwOdERQXgsqh0HlE4p3Ux7KZP0B8B2JFUljJ9S1k2c787WtxHC3B7 L1JFcIMSYGC9Jvj2Ix4dbfqSkaqbWcZai1TzJOf1ljtrlefICMez3Zd/PfXXTWqf PIIAt8vPkBe3CSKOlf+tROwJFBi+vv7/U8oi74rXoOUWG6JlHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMsItALpqmLVIeQjANbxuXQPuTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNTQyMzAxYjAtODNjMS0z OTk3LWI1OWQtYWFiNzA3NTFlODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgMkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbQPcDkKjWOqB4uvjTebH6NNzVQi5FhWELSrMraYtWUnM3pKBXLR6Xk bHZQodjBiL0K6dF3A7AdHGQ5oj0uTUWyFEXZO1ask1uSjNuUkJU1WlD38eMh7oJW 7hKZGbkKDtXFvZ4tyRPH2nUNSsB5Hp0nC9hMkWSI3Yu9k8+SQ3xunm49PD+1DvDm 2M5uldgzZHcQdFgbjHNCvwLmR0zPZ+ARR+yPtK8MIy4m1EHWbZC4RhvLzjGeRqbN n+NxxjDxUP4G6xJgyByLXbdZaW0aATUkDb8IdnjBhRTzUkTxUxKYH6b+r5Zooend u5LcL7P5B6MTZ6g0vIUFH7jEkjJBwO0= -----END CERTIFICATE-----Generated at Thu Mar 26 08:08:12 2026 by rpki-client