$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa File: 6ebeb817-6095-3446-9a11-b67c1f10a982.roa (raw, json) Hash identifier: +G3+oNJeDgRpT7zMOwLgvgVecaLstKz7z/D3eBdc4WA= Subject key identifier: BB:61:2E:9F:4E:49:CB:77:6E:8A:46:05:7D:AC:6F:19:64:F5:1C:AC Certificate issuer: /CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4 Certificate serial: 010D0C9F4328584D422F8BBFB7E5F1025C824F80 Authority key identifier: 63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 401656 IP address blocks: 142.248.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8b:bf:b7:e5:f1:02:5c:82:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=82efdd69-6380-49bd-b71b-44cdb9865d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:97:2d:34:9b:f2:1c:5a:31:8a:48:f1:74: 0b:95:26:83:a5:d6:5c:1e:52:f4:5a:a5:67:3e:95: 2a:71:d8:3c:cc:2e:4f:94:9f:63:f0:90:69:56:3f: 01:61:af:a3:f2:30:8b:cb:35:b3:45:98:df:85:15: d0:55:97:03:6c:4d:9a:6a:ce:5b:e2:ea:2f:37:37: a6:5e:c3:f7:2f:44:c6:c2:aa:75:d5:c9:21:d9:1b: 44:ca:d7:c2:d4:65:fe:ba:9d:28:54:79:5d:f9:22: 11:7d:68:1c:8b:3b:5a:0e:90:04:16:eb:a3:15:8c: 35:a9:dc:72:1e:78:f8:b7:95:df:95:35:41:6f:e0: d3:11:83:f3:76:9f:55:d2:c2:00:36:55:36:55:3c: eb:d9:ee:1a:17:72:d9:e5:b4:8e:af:ec:cb:c7:05: 65:03:d8:6a:42:a6:f8:34:85:f4:4c:a2:00:2b:b5: f5:4c:45:28:29:08:2e:27:5f:95:f4:fd:c4:d3:71: df:24:63:c7:99:cb:a1:4b:b6:05:a1:96:b7:35:5d: bf:c2:52:06:46:1d:6b:31:57:4c:2a:d5:e9:c6:6b: f3:37:1a:12:c2:29:60:f8:97:db:e4:df:48:0e:e0: 86:eb:68:6d:55:88:3d:76:57:27:fc:bd:89:9e:d3: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:61:2E:9F:4E:49:CB:77:6E:8A:46:05:7D:AC:6F:19:64:F5:1C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.crl X509v3 Authority Key Identifier: keyid:63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer sbgp-ipAddrBlock: critical IPv4: 142.248.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:c6:c8:12:93:a9:ae:c8:93:44:d7:59:c4:b9:9d:4c:b4:e6: 29:fb:7a:63:aa:a7:d5:43:e8:d4:bf:5d:bc:00:dd:cb:dc:ef: 7b:08:68:8f:63:a8:d4:1f:d5:6c:94:23:b1:9d:8c:56:3a:1a: 46:21:a6:f0:51:dd:07:ee:3a:06:cf:e8:1a:bf:e1:1c:e6:b7: 4d:10:72:c3:10:22:31:e7:87:ad:74:9d:91:55:71:59:38:3f: af:99:2d:df:ef:1f:85:9f:c1:14:bb:16:7d:7a:91:e9:c5:a2: 2b:95:6d:38:c9:11:22:0b:24:32:b8:a3:0d:3e:e1:7b:89:77: 22:a0:9e:66:96:87:73:66:bd:32:c4:b7:fa:5d:b4:5f:99:b9: b3:d5:81:e5:56:20:cf:7a:03:c1:72:7b:b5:aa:2f:5a:81:ca: f5:1f:d4:86:84:a5:f0:29:da:e7:aa:64:51:d1:40:78:2d:1c: 96:4a:d8:1c:73:55:60:05:3f:1f:e4:08:4c:41:b7:8b:b7:c4: 6c:9c:44:8a:41:a5:b0:c7:75:f7:39:ab:de:55:b0:98:b9:fd: c7:14:08:58:07:bb:1d:4c:46:38:ff:5c:4e:c2:53:ed:e0:fd: 36:1d:9c:54:bd:55:f7:1c:5e:a4:78:00:70:63:ae:27:c3:ab: 69:8e:04:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4u/t+XxAlyCT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5NTY0MGYtZmU2Mi00YWE4LWE1OWMtMGNkYTRjNDli ZGE0MB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ODJlZmRkNjktNjM4MC00OWJkLWI3MWItNDRjZGI5ODY1ZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrmXLTSb8hxaMYpI8XQLlSaDpdZcHlL0WqVn PpUqcdg8zC5PlJ9j8JBpVj8BYa+j8jCLyzWzRZjfhRXQVZcDbE2aas5b4uovNzem XsP3L0TGwqp11ckh2RtEytfC1GX+up0oVHld+SIRfWgciztaDpAEFuujFYw1qdxy Hnj4t5XflTVBb+DTEYPzdp9V0sIANlU2VTzr2e4aF3LZ5bSOr+zLxwVlA9hqQqb4 NIX0TKIAK7X1TEUoKQguJ1+V9P3E03HfJGPHmcuhS7YFoZa3NV2/wlIGRh1rMVdM KtXpxmvzNxoSwilg+Jfb5N9IDuCG62htVYg9dlcn/L2JntO3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLthLp9OSct3bopGBX2sbxlk9RysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODk1 NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2RhNGM0OWJkYTQvNmViZWI4MTctNjA5NS0z NDQ2LTlhMTEtYjY3YzFmMTBhOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg5NTY0MGYtZmU2Mi00YWE4LWE1 OWMtMGNkYTRjNDliZGE0LzU4OTU2NDBmLWZlNjItNGFhOC1hNTljLTBjZGE0YzQ5 YmRhNC5jcmwwHwYDVR0jBBgwFoAUY79ieCn59gN4cLt1otolooed4vwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODk1NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2Rh NGM0OWJkYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPGyBKTqa7Ik0TXWcS5nUy05in7emOqp9VD6NS/XbwA3cvc73sIaI9j qNQf1WyUI7GdjFY6GkYhpvBR3QfuOgbP6Bq/4Rzmt00QcsMQIjHnh610nZFVcVk4 P6+ZLd/vH4WfwRS7Fn16kenFoiuVbTjJESILJDK4ow0+4XuJdyKgnmaWh3NmvTLE t/pdtF+ZubPVgeVWIM96A8Fye7WqL1qByvUf1IaEpfAp2ueqZFHRQHgtHJZK2Bxz VWAFPx/kCExBt4u3xGycRIpBpbDHdfc5q95VsJi5/ccUCFgHux1MRjj/XE7CU+3g /TYdnFS9VfccXqR4AHBjrifDq2mOBNY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:01:49 2026 by rpki-client