$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/8a6e00f2-917c-3e3a-b91d-6df6d77d1e70.roa File: 8a6e00f2-917c-3e3a-b91d-6df6d77d1e70.roa (raw, json) Hash identifier: tMH9QVx/v7zgTlNqHZTDx+nuK4GpTEyHEMOLCwgUN/s= Subject key identifier: AD:85:91:7D:EC:15:65:42:B4:EF:E2:B0:68:0C:DE:AD:C8:FC:F0:EB Certificate issuer: /CN=c03bc5c2-262c-4743-971b-dfdc92defb06 Certificate serial: 010D0C9F4328584DA6B023E6E9FA7A95F06EA900 Authority key identifier: 34:D9:46:01:3A:A1:97:25:D5:34:4C:85:5F:82:63:D4:AC:28:06:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/8a6e00f2-917c-3e3a-b91d-6df6d77d1e70.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 32347 IP address blocks: 142.237.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/c03bc5c2-262c-4743-971b-dfdc92defb06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/c03bc5c2-262c-4743-971b-dfdc92defb06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:23:e6:e9:fa:7a:95:f0:6e:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03bc5c2-262c-4743-971b-dfdc92defb06 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=8a6879cf-d718-4fa1-85bd-1657d6504452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:d4:f1:7b:68:d3:51:83:9b:e6:42:b5:e5: e5:ac:1a:70:39:c1:55:0f:c0:21:a2:d4:9a:97:f4: 5c:24:91:d9:7e:d4:85:bb:bb:0a:7d:32:ab:62:cc: 0f:03:3e:24:71:95:49:e5:c5:f1:3c:55:53:23:ee: 4a:98:8c:eb:9a:f5:49:40:ad:c4:de:08:81:f7:a7: 22:4f:64:27:3d:6a:d5:7c:38:18:56:95:a8:ee:59: 42:6b:57:04:9c:5a:a4:c4:7c:d5:34:49:06:c7:cd: b1:a7:97:68:26:3c:da:d4:1f:1b:e3:30:46:aa:84: 12:a0:aa:a5:1b:17:e1:58:47:73:45:ae:69:df:fc: b9:e1:7f:8d:f7:24:40:46:68:01:cb:02:1b:6d:80: c2:19:9f:30:17:e2:9a:8a:87:09:58:d3:8a:ca:7f: 58:7a:d1:3b:a9:5d:4d:0f:d5:35:40:53:17:4e:e0: 56:c4:3e:a7:0e:16:5a:de:4f:21:1a:c3:eb:78:f7: 2b:dd:56:6b:26:7d:ff:ec:9e:f0:76:9a:cf:54:0e: ff:fa:a4:76:14:21:90:2d:97:6b:11:8b:05:5d:8e: 4c:bd:b4:b0:dc:5d:d5:6c:21:c6:d2:35:f3:7a:6a: 97:f7:a3:52:ec:b6:9f:18:36:37:a1:b4:39:fa:e3: d0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:85:91:7D:EC:15:65:42:B4:EF:E2:B0:68:0C:DE:AD:C8:FC:F0:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/8a6e00f2-917c-3e3a-b91d-6df6d77d1e70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06/c03bc5c2-262c-4743-971b-dfdc92defb06.crl X509v3 Authority Key Identifier: keyid:34:D9:46:01:3A:A1:97:25:D5:34:4C:85:5F:82:63:D4:AC:28:06:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03bc5c2-262c-4743-971b-dfdc92defb06.cer sbgp-ipAddrBlock: critical IPv4: 142.237.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:5b:fd:f2:36:ec:18:da:4e:72:1c:66:60:a4:4f:07:d6:d0: 21:f3:56:c0:3a:61:22:0f:d4:4e:ed:4c:4a:3f:48:12:04:5e: 42:70:40:7e:fc:bd:90:fb:04:81:d3:76:c0:fb:4f:59:c1:26: e6:6b:58:b2:77:f8:1c:ee:7b:82:aa:6c:fb:bf:d7:4f:96:e1: 82:8b:aa:7d:fa:66:d4:f9:08:78:d1:e5:03:37:c6:92:dd:ed: c3:8c:3f:60:c6:75:fe:4c:97:b9:f5:5a:98:5f:9c:8e:74:3d: 5f:40:54:9f:eb:11:3f:25:32:26:42:d5:25:b0:b3:9b:68:f6: 44:a8:a7:7a:c2:e7:1a:0f:48:a3:b1:ad:2c:d3:fa:97:c3:d1: 44:82:87:81:c7:a8:b0:6f:a7:16:42:83:97:0a:54:0c:3b:c7: ce:92:89:28:3c:07:2c:80:91:dc:2b:ac:64:5c:20:3d:9e:46: 6b:74:da:29:9c:74:cd:ae:4a:dc:b7:f4:fb:13:82:6a:d2:64: 32:44:ca:42:a2:8a:10:ed:8c:5a:23:28:c2:21:c1:c3:cf:33: 67:2d:a1:19:df:cd:de:06:25:39:5f:44:cb:ca:02:54:d5:bf: f1:0b:20:c6:c7:af:d0:5a:9e:0c:1f:9c:01:f4:64:b0:c7:2b: c5:30:64:e4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2msCPm6fp6lfBuqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzYmM1YzItMjYyYy00NzQzLTk3MWItZGZkYzkyZGVm YjA2MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk OGE2ODc5Y2YtZDcxOC00ZmExLTg1YmQtMTY1N2Q2NTA0NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/jU8Xto01GDm+ZCteXlrBpwOcFVD8AhotSa l/RcJJHZftSFu7sKfTKrYswPAz4kcZVJ5cXxPFVTI+5KmIzrmvVJQK3E3giB96ci T2QnPWrVfDgYVpWo7llCa1cEnFqkxHzVNEkGx82xp5doJjza1B8b4zBGqoQSoKql GxfhWEdzRa5p3/y54X+N9yRARmgBywIbbYDCGZ8wF+KaiocJWNOKyn9YetE7qV1N D9U1QFMXTuBWxD6nDhZa3k8hGsPrePcr3VZrJn3/7J7wdprPVA7/+qR2FCGQLZdr EYsFXY5MvbSw3F3VbCHG0jXzemqX96NS7LafGDY3obQ5+uPQjwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK2FkX3sFWVCtO/isGgM3q3I/PDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jMDNi YzVjMi0yNjJjLTQ3NDMtOTcxYi1kZmRjOTJkZWZiMDYvOGE2ZTAwZjItOTE3Yy0z ZTNhLWI5MWQtNmRmNmQ3N2QxZTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzAzYmM1YzItMjYyYy00NzQzLTk3 MWItZGZkYzkyZGVmYjA2L2MwM2JjNWMyLTI2MmMtNDc0My05NzFiLWRmZGM5MmRl ZmIwNi5jcmwwHwYDVR0jBBgwFoAUNNlGATqhlyXVNEyFX4Jj1KwoBk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jMDNiYzVjMi0yNjJjLTQ3NDMtOTcxYi1kZmRj OTJkZWZiMDYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAju0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJlv98jbsGNpOchxmYKRPB9bQIfNWwDphIg/UTu1MSj9IEgReQnBAfvy9 kPsEgdN2wPtPWcEm5mtYsnf4HO57gqps+7/XT5bhgouqffpm1PkIeNHlAzfGkt3t w4w/YMZ1/kyXufVamF+cjnQ9X0BUn+sRPyUyJkLVJbCzm2j2RKinesLnGg9Io7Gt LNP6l8PRRIKHgceosG+nFkKDlwpUDDvHzpKJKDwHLICR3CusZFwgPZ5Ga3TaKZx0 za5K3Lf0+xOCatJkMkTKQqKKEO2MWiMowiHBw88zZy2hGd/N3gYlOV9Ey8oCVNW/ 8Qsgxsev0FqeDB+cAfRksMcrxTBk5A== -----END CERTIFICATE-----Generated at Wed May 13 09:45:06 2026 by rpki-client