$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa File: b649b1d0-5d8d-301d-a8c5-4412afe89287.roa (raw, json) Hash identifier: PxNGojmfGYax4BUxFWyGlV7WWhsi+VF1MbtzHUZ3iQM= Subject key identifier: 62:C6:89:01:47:23:F3:0B:97:15:20:FC:4C:04:85:BE:2A:7B:54:C1 Certificate issuer: /CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Certificate serial: 010D0C9F4328584D40CB9F31E89C55C3DBFC9480 Authority key identifier: 88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 174 IP address blocks: 142.248.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9f:31:e8:9c:55:c3:db:fc:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=9f1b5c05-ac49-451a-b0e8-a45c6918a6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3f:82:13:5a:cf:cf:f8:47:22:be:d3:42:17: 8a:d7:94:9d:4e:64:e4:e7:34:37:21:71:ba:91:de: 68:06:a9:ad:5a:94:2f:7e:82:93:81:bd:76:a2:7b: ed:51:ae:26:c8:75:db:63:bb:76:86:10:01:bc:a6: d7:c9:62:2d:51:cb:f8:24:ce:ba:7e:c5:fc:f1:5e: eb:22:2b:54:36:6b:d3:fe:9a:b6:b9:d7:82:9b:fc: 7b:63:51:76:8b:f5:f6:8f:4a:1a:2f:be:c6:99:5b: 85:c7:aa:93:ca:04:a2:96:10:9e:2f:07:8a:59:38: 4c:36:b4:a7:29:67:66:73:4c:29:be:42:68:79:54: 0a:39:99:6f:51:4d:41:72:59:86:90:85:63:65:4a: b7:e1:7f:38:29:55:1e:61:bf:6d:1a:99:d3:ba:b1: a3:05:cf:71:ba:c4:73:1a:4f:5a:fe:32:45:62:45: f9:55:de:b7:27:12:29:de:cd:6e:35:ab:a1:dd:7d: 96:f0:e6:66:db:ab:bd:b2:af:22:03:7f:f2:c8:e1: ef:94:e6:bd:1f:e6:d7:2b:3c:53:62:2c:a0:af:4d: b4:c9:39:49:37:63:03:a7:27:a0:37:1b:83:1e:6e: f0:3b:5d:48:d0:ce:df:45:2a:91:d9:db:68:40:86: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C6:89:01:47:23:F3:0B:97:15:20:FC:4C:04:85:BE:2A:7B:54:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/b649b1d0-5d8d-301d-a8c5-4412afe89287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl X509v3 Authority Key Identifier: keyid:88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer sbgp-ipAddrBlock: critical IPv4: 142.248.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:eb:64:a1:c9:72:9a:b5:c4:ca:6a:2c:a1:cc:e7:79:2e:2a: 70:89:f8:c7:db:4e:ba:ca:b2:9f:f1:64:d1:c1:48:30:06:08: 20:0c:77:d5:61:98:1e:73:be:5b:da:60:ef:be:aa:6f:36:1d: b1:1a:0f:38:16:c9:16:31:e8:95:90:a5:1d:ee:b4:2e:e3:18: f2:fb:be:70:91:f3:5f:37:9a:99:69:66:46:52:01:86:52:15: 47:4b:37:52:a4:46:f5:28:65:48:02:e4:78:e8:b7:81:35:6f: e8:7a:64:68:a6:d6:25:67:7f:ef:0e:fb:90:a0:fc:6e:37:4b: 78:bf:62:ee:db:e4:0c:e5:61:f8:cb:70:78:52:1e:a7:f7:4d: f5:23:24:84:3c:be:37:66:a9:07:c5:7e:7f:01:6a:6e:5c:fc: 33:63:fb:26:f6:b1:25:a9:43:34:a7:8e:85:ff:72:bc:c3:80: 9f:b2:bc:51:bd:50:3e:9e:cc:d2:24:b9:3a:a4:63:fd:41:40: 18:15:ec:a2:52:2d:b1:c0:59:1f:03:25:13:9c:53:d4:95:e9: 27:47:0b:80:ab:95:a5:a6:00:b5:74:9c:ff:4e:b1:51:28:58: 7a:9a:70:f0:35:fc:b1:90:7c:4d:ea:c8:2d:95:48:f8:d0:bb: 7c:1d:a9:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay58x6JxVw9v8lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlNTEzZjctMTczZi00NDQ3LWEzNGYtZDU4ZDNiMWNl OTlkMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OWYxYjVjMDUtYWM0OS00NTFhLWIwZTgtYTQ1YzY5MThhNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj+CE1rPz/hHIr7TQheK15SdTmTk5zQ3IXG6 kd5oBqmtWpQvfoKTgb12onvtUa4myHXbY7t2hhABvKbXyWItUcv4JM66fsX88V7r IitUNmvT/pq2udeCm/x7Y1F2i/X2j0oaL77GmVuFx6qTygSilhCeLweKWThMNrSn KWdmc0wpvkJoeVQKOZlvUU1BclmGkIVjZUq34X84KVUeYb9tGpnTurGjBc9xusRz Gk9a/jJFYkX5Vd63JxIp3s1uNauh3X2W8OZm26u9sq8iA3/yyOHvlOa9H+bXKzxT Yiygr020yTlJN2MDpyegNxuDHm7wO11I0M7fRSqR2dtoQIZg0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLGiQFHI/MLlxUg/EwEhb4qe1TBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1 MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThkM2IxY2U5OWQvYjY0OWIxZDAtNWQ4ZC0z MDFkLWE4YzUtNDQxMmFmZTg5Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWRlNTEzZjctMTczZi00NDQ3LWEz NGYtZDU4ZDNiMWNlOTlkLzFkZTUxM2Y3LTE3M2YtNDQ0Ny1hMzRmLWQ1OGQzYjFj ZTk5ZC5jcmwwHwYDVR0jBBgwFoAUiPFj7pAvQgbSHjSJ2D5eHngcCiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThk M2IxY2U5OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjvjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzrZKHJcpq1xMpqLKHM53kuKnCJ+MfbTrrKsp/xZNHBSDAGCCAMd9Vh mB5zvlvaYO++qm82HbEaDzgWyRYx6JWQpR3utC7jGPL7vnCR8183mplpZkZSAYZS FUdLN1KkRvUoZUgC5Hjot4E1b+h6ZGim1iVnf+8O+5Cg/G43S3i/Yu7b5AzlYfjL cHhSHqf3TfUjJIQ8vjdmqQfFfn8Bam5c/DNj+yb2sSWpQzSnjoX/crzDgJ+yvFG9 UD6ezNIkuTqkY/1BQBgV7KJSLbHAWR8DJROcU9SV6SdHC4CrlaWmALV0nP9OsVEo WHqacPA1/LGQfE3qyC2VSPjQu3wdqf4= -----END CERTIFICATE-----Generated at Wed Mar 25 21:28:15 2026 by rpki-client