$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa File: 43318d43-107a-3c35-937c-35cc2520acca.roa (raw, json) Hash identifier: /Q9W6fijYnfhBBtuDRzZlKlixGZlOPy4mGRyWFCul6E= Subject key identifier: 85:5B:6E:D1:E1:D8:0D:9E:0B:35:35:7E:80:CA:0B:EC:89:0B:D8:6E Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584D386A393C77A87E20D3CB7C80 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 12119 IP address blocks: 142.204.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:39:3c:77:a8:7e:20:d3:cb:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=fb111f03-eca4-43db-aba0-37c2b627c91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:eb:8f:db:aa:27:ab:d4:a4:1c:50:3d:12: c2:b7:00:d8:89:3e:ed:87:4b:95:61:3c:00:23:a8: de:89:f7:48:8d:1d:00:9e:a8:67:bf:b2:7c:81:e0: 0b:30:1c:ee:80:d6:49:9f:a9:69:7e:35:c0:ad:99: f8:98:2d:57:f7:b0:6e:d2:ad:8a:49:36:f6:6d:84: 5c:24:de:20:f1:d1:70:33:78:29:17:79:95:ef:29: 81:90:a3:41:a5:f1:d7:7f:11:ae:a9:18:c7:cf:20: 35:c6:0c:8d:8e:a5:18:07:46:f1:88:e1:f6:a0:6a: 65:8b:91:4c:ff:ad:da:65:36:ae:d8:9e:41:7c:2e: cc:e0:de:fa:64:7c:eb:ab:f6:b3:ed:6a:f3:a8:0d: 53:db:c2:80:23:3a:cf:07:9c:2b:da:02:88:b8:e2: 66:b6:3c:be:b5:11:0f:a2:a0:8d:33:c8:8e:db:64: 6a:db:84:7d:5a:ff:55:a0:c7:ab:8f:07:ce:47:51: 5d:f9:e9:08:b6:4e:85:ee:6c:cb:85:fe:d9:61:72: 9d:c9:73:b0:15:a8:35:62:20:57:5f:55:90:49:37: 01:5e:04:45:06:dc:d9:ff:51:55:d2:97:8f:20:b1: 83:93:a4:7c:de:f0:82:2d:c6:26:32:d1:c8:0b:ea: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5B:6E:D1:E1:D8:0D:9E:0B:35:35:7E:80:CA:0B:EC:89:0B:D8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 142.204.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:c3:0e:b6:a2:55:38:20:de:09:3b:6f:f4:44:b8:bd:f3:48: 54:91:c7:a9:16:36:ba:ad:c3:1c:16:0e:84:b3:84:85:3b:0a: aa:35:0f:3d:bf:75:94:9b:29:4d:a7:d6:53:89:2b:fb:22:da: 56:36:c7:8b:83:f4:b7:36:5a:9f:a1:80:57:c1:47:92:ee:f0: 8e:68:48:ca:58:d1:1c:2d:ee:2e:f8:3a:c4:1a:9e:f1:3a:82: f5:ed:62:a8:d1:df:ab:d9:43:3a:b9:1f:5a:78:8a:79:cd:72: 1d:2f:31:6d:07:6c:6b:af:ba:b7:eb:be:76:8b:5c:53:90:41: dd:0c:c0:fc:f6:75:17:d9:a4:3c:c8:96:d8:5f:ac:10:ad:4d: 10:d8:54:9c:d0:8a:eb:35:14:5b:bc:98:ca:d7:b3:d3:ad:84: 49:8c:7f:49:2a:06:6a:be:95:92:80:3a:ff:ac:d5:f5:2f:22: 98:da:e8:96:69:27:c1:bb:e8:98:ea:50:df:a5:87:d2:0e:8a: b1:57:6a:46:7b:09:e2:62:d6:bf:00:0e:ba:f4:17:0d:0f:fb: 52:63:c4:83:4c:81:21:ce:c5:d5:ef:98:14:e7:be:d5:0c:5d: b3:15:5d:b8:e8:3b:21:03:a3:0b:a2:d6:a1:17:aa:63:e6:71: 34:b3:3c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajk8d6h+INPLfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZmIxMTFmMDMtZWNhNC00M2RiLWFiYTAtMzdjMmI2MjdjOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSLrj9uqJ6vUpBxQPRLCtwDYiT7th0uVYTwA I6jeifdIjR0Anqhnv7J8geALMBzugNZJn6lpfjXArZn4mC1X97Bu0q2KSTb2bYRc JN4g8dFwM3gpF3mV7ymBkKNBpfHXfxGuqRjHzyA1xgyNjqUYB0bxiOH2oGpli5FM /63aZTau2J5BfC7M4N76ZHzrq/az7WrzqA1T28KAIzrPB5wr2gKIuOJmtjy+tREP oqCNM8iO22Rq24R9Wv9VoMerjwfOR1Fd+ekItk6F7mzLhf7ZYXKdyXOwFag1YiBX X1WQSTcBXgRFBtzZ/1FV0pePILGDk6R83vCCLcYmMtHIC+pSywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVbbtHh2A2eCzU1foDKC+yJC9huMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvNDMzMThkNDMtMTA3YS0z YzM1LTkzN2MtMzVjYzI1MjBhY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjsxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN7DDraiVTgg3gk7b/REuL3zSFSRx6kWNrqtwxwWDoSzhIU7Cqo1Dz2/ dZSbKU2n1lOJK/si2lY2x4uD9Lc2Wp+hgFfBR5Lu8I5oSMpY0Rwt7i74OsQanvE6 gvXtYqjR36vZQzq5H1p4innNch0vMW0HbGuvurfrvnaLXFOQQd0MwPz2dRfZpDzI lthfrBCtTRDYVJzQius1FFu8mMrXs9OthEmMf0kqBmq+lZKAOv+s1fUvIpja6JZp J8G76JjqUN+lh9IOirFXakZ7CeJi1r8ADrr0Fw0P+1JjxINMgSHOxdXvmBTnvtUM XbMVXbjoOyEDowui1qEXqmPmcTSzPPI= -----END CERTIFICATE-----Generated at Fri Mar 27 00:56:12 2026 by rpki-client