$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a4f7b679-d229-389d-aefc-7051497b88db.roa File: a4f7b679-d229-389d-aefc-7051497b88db.roa (raw, json) Hash identifier: QNk5ZqCRcE/WfOMqTquy0Z6oTGKI2ZWyWQVp5d/G6qw= Subject key identifier: 4E:12:D6:28:3B:79:E9:DA:C6:2A:0B:B7:FA:CC:86:C8:18:CE:0A:02 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584DBD059E816D9F4C999FB4EBC0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a4f7b679-d229-389d-aefc-7051497b88db.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 4476 IP address blocks: 142.231.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:9e:81:6d:9f:4c:99:9f:b4:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=8ecd0f8b-1aa3-461f-9733-7e94a48ee6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:81:9e:e0:22:33:cc:6e:a5:ea:ce:36:94:e1: 69:6f:c4:49:fd:87:c6:18:04:fa:a4:a8:10:5e:38: ef:6b:1f:29:b7:81:d3:54:c4:2c:ef:b4:b7:e5:4a: 24:8f:25:5d:83:c7:b1:1e:55:4e:58:f1:5c:44:76: 21:1b:11:e8:ad:42:e4:e1:1a:ff:04:8c:2c:f3:da: 73:eb:e6:00:42:1f:f8:bf:82:aa:dd:0e:77:34:44: 69:98:06:35:9c:a2:c6:17:f8:8e:cb:72:54:1f:05: de:5c:8c:59:8c:47:07:63:6c:c3:09:e7:4d:46:04: d8:43:13:fa:ea:77:82:bf:e8:20:7f:3b:49:c7:5a: c7:cc:83:39:65:2f:71:48:e3:2d:1d:98:00:09:64: d9:6f:c2:b5:f5:db:a1:36:2c:ef:a2:97:c9:f8:52: 93:49:e8:a3:ad:68:a0:c4:bd:ca:1e:ca:99:27:a1: 2d:94:c9:15:d0:b5:16:08:ec:38:17:25:99:eb:4f: b0:6a:7e:0b:c0:53:83:cf:b2:b7:ab:f7:6d:78:9c: d3:9e:86:a0:89:6a:d1:b7:1e:5d:56:46:64:46:a8: ab:1f:45:d9:c5:fd:10:a7:88:9b:b0:57:e8:81:f3: ab:c1:06:51:de:0d:65:01:e0:8d:3f:80:ef:82:ac: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:12:D6:28:3B:79:E9:DA:C6:2A:0B:B7:FA:CC:86:C8:18:CE:0A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a4f7b679-d229-389d-aefc-7051497b88db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 142.231.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:cd:09:e3:5b:fb:87:f4:f4:6e:62:3d:23:e3:b6:d6:cf:42: 24:32:23:7a:e4:96:cd:90:e4:0c:61:a5:f1:2e:34:3b:d7:f8: 23:77:10:65:a8:88:32:36:c2:62:7b:aa:cc:5a:c3:b8:49:4c: f3:70:5a:9d:94:e7:4d:aa:e1:0e:ed:d1:f8:19:6e:e0:ab:a0: 33:20:ba:76:8b:4e:d3:c8:20:1e:4c:a9:fb:0d:68:31:3f:90: 29:c3:cb:5e:6a:8a:d6:91:81:1c:77:e6:e7:46:81:10:ef:2d: 16:7b:71:58:6a:51:17:f7:32:a5:63:fb:e1:2f:b5:42:5e:d3: 6e:e6:b4:2d:1c:54:5f:1f:fb:e1:fd:17:d6:6f:52:4e:bb:a9: ad:7a:7c:bc:be:20:dc:0e:3c:ec:51:9a:b0:63:e3:53:a9:10: bf:e1:9b:0d:23:0a:ee:33:64:15:80:d2:82:cd:cf:5f:b8:62: a3:ec:0e:d5:3f:dc:47:23:58:cc:de:8a:b2:68:87:71:95:98: b2:fe:06:df:e6:d7:ff:79:90:44:6e:44:1c:a3:75:f1:69:76: 99:80:e8:09:f4:e9:d1:5e:9d:4d:2f:83:65:76:e1:5d:00:5e: 1b:b6:58:be:ed:60:eb:90:a6:6a:90:36:0b:29:f0:5b:b2:78: 87:77:3a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BZ6BbZ9MmZ+068AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk OGVjZDBmOGItMWFhMy00NjFmLTk3MzMtN2U5NGE0OGVlNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYGe4CIzzG6l6s42lOFpb8RJ/YfGGAT6pKgQ Xjjvax8pt4HTVMQs77S35UokjyVdg8exHlVOWPFcRHYhGxHorULk4Rr/BIws89pz 6+YAQh/4v4Kq3Q53NERpmAY1nKLGF/iOy3JUHwXeXIxZjEcHY2zDCedNRgTYQxP6 6neCv+ggfztJx1rHzIM5ZS9xSOMtHZgACWTZb8K19duhNizvopfJ+FKTSeijrWig xL3KHsqZJ6EtlMkV0LUWCOw4FyWZ60+wan4LwFODz7K3q/dteJzTnoagiWrRtx5d VkZkRqirH0XZxf0Qp4ibsFfogfOrwQZR3g1lAeCNP4Dvgqz/JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4S1ig7eenaxioLt/rMhsgYzgoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTRmN2I2NzktZDIyOS0z ODlkLWFlZmMtNzA1MTQ5N2I4OGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjucDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzNCeNb+4f09G5iPSPjttbPQiQyI3rkls2Q5AxhpfEuNDvX+CN3EGWo iDI2wmJ7qsxaw7hJTPNwWp2U502q4Q7t0fgZbuCroDMgunaLTtPIIB5MqfsNaDE/ kCnDy15qitaRgRx35udGgRDvLRZ7cVhqURf3MqVj++EvtUJe027mtC0cVF8f++H9 F9ZvUk67qa16fLy+INwOPOxRmrBj41OpEL/hmw0jCu4zZBWA0oLNz1+4YqPsDtU/ 3EcjWMzeirJoh3GVmLL+Bt/m1/95kERuRByjdfFpdpmA6An06dFenU0vg2V24V0A Xhu2WL7tYOuQpmqQNgsp8FuyeId3OqM= -----END CERTIFICATE-----Generated at Wed May 13 14:21:04 2026 by rpki-client