$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa File: cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa (raw, json) Hash identifier: 753i4F3Gv10H6fEjVWWq4p7LkVlL72YPEiOKUSE7ucI= Subject key identifier: 38:70:95:77:58:AF:49:57:F9:D3:FA:C7:3C:05:0C:53:2B:DE:79:AE Certificate issuer: /CN=05437be8-72be-4526-bdc7-04862534a038 Certificate serial: 010D0C9F4328584D44FA3DDF5596A001D9D8B780 Authority key identifier: C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 399035 IP address blocks: 162.142.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3d:df:55:96:a0:01:d9:d8:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05437be8-72be-4526-bdc7-04862534a038 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=5f2bc09c-7291-45ba-8fd7-e7587dfb8f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:31:0f:c0:f3:08:f5:a2:db:4d:46:37:1b:cf: 16:f4:13:9f:0b:6d:d0:f4:17:12:b4:eb:88:08:5a: d7:fa:bd:14:91:a9:ed:25:14:53:61:09:89:c2:76: e4:d7:73:34:77:f2:19:b4:f3:2d:ba:00:97:82:66: fe:26:e6:b4:f7:36:89:ec:7c:fd:f4:32:92:59:62: cd:5f:64:7b:f3:79:ea:a1:1a:28:61:d2:5f:f8:5b: 80:2b:d6:bc:2d:10:0d:84:49:07:0d:08:5e:35:c3: 3d:35:0e:6f:f4:eb:ad:1d:ad:6f:a4:51:03:cf:50: 87:49:64:71:b0:19:b7:04:4e:17:d2:14:d5:36:ce: 20:02:99:87:80:3a:36:c2:c2:6b:72:ab:02:31:f1: 7b:41:66:2e:1c:f5:10:31:bc:a9:0b:08:4f:3c:1d: 1d:00:6f:5e:7c:76:f8:6a:1e:da:3f:3c:f5:96:bb: 8a:f9:25:b7:0d:17:43:18:89:e3:31:7b:00:89:7a: 75:26:21:03:62:ec:9e:0e:ad:07:21:c8:f2:a6:1a: aa:8b:f7:03:21:8f:9a:8a:0b:67:ec:bd:ca:23:c8: 9b:2d:3f:3d:2a:6b:f6:51:af:4b:b6:76:8d:0e:81: 4c:21:c8:56:4c:8f:13:98:9b:66:a0:92:1b:85:69: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:70:95:77:58:AF:49:57:F9:D3:FA:C7:3C:05:0C:53:2B:DE:79:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.crl X509v3 Authority Key Identifier: keyid:C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer sbgp-ipAddrBlock: critical IPv4: 162.142.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:7d:8b:8d:3f:f3:0d:e2:ee:ec:9c:ef:ed:79:64:da:36:09: 21:3a:59:88:4d:64:18:7c:32:77:af:e8:5c:6f:13:31:f2:ba: 43:59:cc:d8:43:99:ef:9c:ae:03:b1:54:6e:13:e5:80:68:63: c6:c4:ee:e0:30:dc:df:cb:73:3b:66:5f:ec:16:27:b6:b1:d0: 49:25:a5:69:25:74:4b:1e:e0:54:45:dd:d5:5c:94:f3:d5:80: 02:1a:9d:55:79:72:fb:33:89:cc:26:34:c6:f0:a6:ce:09:97: a2:5a:f2:f6:d2:5b:dc:0d:b1:9f:a5:aa:8a:d8:5e:c7:fb:7c: 9b:a8:4c:10:39:03:12:b6:a8:53:99:d0:47:dc:74:be:c6:80: 6d:a5:5d:0b:35:83:59:ed:a0:82:10:6b:11:82:dd:2e:32:1a: 14:aa:80:d1:5f:dd:55:e4:56:3a:74:91:b7:50:fd:c8:40:8e: 45:01:48:1d:ae:4f:e4:96:58:86:5c:6c:18:48:8b:f8:5c:60: 69:4f:33:43:3c:b4:04:35:41:ca:42:df:99:e6:af:12:64:7e: 4a:85:b5:64:99:53:0f:86:8d:4e:3d:bb:b4:f0:13:ad:7e:8c: 5d:5b:3f:f6:3f:fd:60:c4:d6:c7:5d:b8:8e:ac:71:ae:5a:23: ea:22:80:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+j3fVZagAdnYt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU0MzdiZTgtNzJiZS00NTI2LWJkYzctMDQ4NjI1MzRh MDM4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NWYyYmMwOWMtNzI5MS00NWJhLThmZDctZTc1ODdkZmI4ZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DEPwPMI9aLbTUY3G88W9BOfC23Q9BcStOuI CFrX+r0UkantJRRTYQmJwnbk13M0d/IZtPMtugCXgmb+Jua09zaJ7Hz99DKSWWLN X2R783nqoRooYdJf+FuAK9a8LRANhEkHDQheNcM9NQ5v9OutHa1vpFEDz1CHSWRx sBm3BE4X0hTVNs4gApmHgDo2wsJrcqsCMfF7QWYuHPUQMbypCwhPPB0dAG9efHb4 ah7aPzz1lruK+SW3DRdDGInjMXsAiXp1JiEDYuyeDq0HIcjyphqqi/cDIY+aigtn 7L3KI8ibLT89Kmv2Ua9LtnaNDoFMIchWTI8TmJtmoJIbhWkD6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhwlXdYr0lX+dP6xzwFDFMr3nmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTQz N2JlOC03MmJlLTQ1MjYtYmRjNy0wNDg2MjUzNGEwMzgvY2Y1YmNjYTQtNWE1Yy0z MDFjLTljOGQtZWYyZTEyMDM1NzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDU0MzdiZTgtNzJiZS00NTI2LWJk YzctMDQ4NjI1MzRhMDM4LzA1NDM3YmU4LTcyYmUtNDUyNi1iZGM3LTA0ODYyNTM0 YTAzOC5jcmwwHwYDVR0jBBgwFoAUwwNJFZtISLznsOMbMn+D15fbrzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTQzN2JlOC03MmJlLTQ1MjYtYmRjNy0wNDg2 MjUzNGEwMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoo5LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl9i40/8w3i7uyc7+15ZNo2CSE6WYhNZBh8Mnev6FxvEzHyukNZzNhD me+crgOxVG4T5YBoY8bE7uAw3N/LcztmX+wWJ7ax0EklpWkldEse4FRF3dVclPPV gAIanVV5cvszicwmNMbwps4Jl6Ja8vbSW9wNsZ+lqorYXsf7fJuoTBA5AxK2qFOZ 0EfcdL7GgG2lXQs1g1ntoIIQaxGC3S4yGhSqgNFf3VXkVjp0kbdQ/chAjkUBSB2u T+SWWIZcbBhIi/hcYGlPM0M8tAQ1QcpC35nmrxJkfkqFtWSZUw+GjU49u7TwE61+ jF1bP/Y//WDE1sdduI6sca5aI+oigJM= -----END CERTIFICATE-----Generated at Thu Mar 26 22:32:21 2026 by rpki-client