$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/af21acb2-d957-39f9-8f3b-1d4755add99f.roa File: af21acb2-d957-39f9-8f3b-1d4755add99f.roa (raw, json) Hash identifier: 5mDdYzN8b0xbsHpSpL3qerkL1QDEgsjiamfxIe+yGGI= Subject key identifier: 01:EC:EB:3F:EA:9F:11:44:51:48:62:3F:AA:F0:00:24:F0:15:AB:B1 Certificate issuer: /CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad Certificate serial: 010D0C9F4328584D4394DD3E92606CC5FDFF9EC0 Authority key identifier: C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/af21acb2-d957-39f9-8f3b-1d4755add99f.roa Signing time: Mon 23 Mar 2026 13:00:39 +0000 ROA not before: Mon 23 Mar 2026 13:00:39 +0000 ROA not after: Sun 21 Jun 2026 13:00:39 +0000 asID: 20118 IP address blocks: 142.248.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:94:dd:3e:92:60:6c:c5:fd:ff:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad Validity Not Before: Mar 23 13:00:39 2026 GMT Not After : Jun 21 13:00:39 2026 GMT Subject: CN=a88764bc-c310-4b90-aa43-98a1661e462b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:cd:b1:31:f9:db:2b:76:df:b0:5c:f5:f7: 00:9d:15:1a:b6:f5:b5:1e:a2:e6:00:cc:00:a0:10: 73:d4:d0:6f:ee:01:4c:11:a4:ee:80:8e:4f:ed:ee: 61:9c:b0:fe:c8:b1:53:08:a4:b6:88:5c:34:81:d9: 81:7e:25:b5:79:96:3e:42:8f:57:1c:a7:8b:da:b1: b8:a6:6e:bf:11:b6:31:c2:a7:ce:1e:14:d5:16:a1: c3:e7:d7:73:ef:2d:75:d9:da:56:73:a3:e2:7f:f7: d2:78:c8:7c:de:bc:36:66:68:cb:f9:fa:0e:f4:82: 81:3b:52:dd:7b:30:2a:3c:cf:e0:9c:30:e1:4e:ab: 3d:8c:3b:0c:f5:a1:47:2f:9e:00:1c:7e:54:d3:0c: ba:60:b5:de:98:93:90:79:90:e5:88:54:30:2d:15: ff:f4:d7:8a:ef:12:35:9e:54:7b:c4:80:7d:3b:94: 10:5d:b5:e0:5a:b8:73:35:74:1f:7b:1b:79:53:e0: 5d:7a:83:a9:3f:71:7b:e6:d6:94:65:c4:84:a7:ff: bc:bf:34:67:2a:9a:22:17:7d:c1:31:57:33:3d:cd: 8e:0f:0c:c2:86:63:39:e8:f0:da:7c:51:54:b8:8c: 14:1d:ca:2d:20:df:82:74:5f:f9:cb:d8:30:e4:c8: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EC:EB:3F:EA:9F:11:44:51:48:62:3F:AA:F0:00:24:F0:15:AB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/af21acb2-d957-39f9-8f3b-1d4755add99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.crl X509v3 Authority Key Identifier: keyid:C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer sbgp-ipAddrBlock: critical IPv4: 142.248.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:27:38:fd:d8:fc:2c:32:a5:60:13:82:b2:c1:c2:b2:4c:f1: 72:f9:83:27:89:7b:2a:55:90:3f:a2:fd:78:41:a8:f4:ea:df: e4:14:99:b9:a0:f4:19:0a:eb:70:ed:89:95:1f:7d:cb:6c:b7: 06:df:d5:56:aa:54:38:c2:e5:eb:8c:51:be:85:07:d2:f2:ca: c9:e8:4c:f8:92:ee:55:8a:75:36:bf:f0:66:06:51:97:1d:a9: 25:0c:fa:05:01:46:a4:86:da:90:87:59:40:f7:f9:62:fb:e5: 81:ad:98:5d:58:19:94:d4:fb:f9:af:9c:02:e9:3a:96:a9:37: 6d:9d:b5:ff:d0:e1:d9:33:cd:d6:b7:33:7d:d4:53:0b:e3:5e: f0:97:a0:cf:62:11:3a:40:42:5b:02:39:7d:45:14:e0:70:3d: 61:fd:e8:e6:ae:94:c1:35:24:3c:37:85:8a:d7:ed:05:56:a9: dc:be:bb:b3:a2:70:46:02:2d:37:b8:c6:de:d0:41:93:67:ee: 29:34:24:8e:ac:b0:78:44:5e:59:56:3c:d4:06:7e:18:a8:e3: 99:6a:1a:05:cd:8a:16:4e:0d:f3:fc:b2:8a:e7:a1:16:d7:dc: 42:37:a9:81:20:bf:9d:a1:56:3a:51:32:52:dc:a9:ce:d6:c7: 3a:18:73:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1DlN0+kmBsxf3/nsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFkN2EzMTEtMzUxOC00NGQyLWFhNDgtZWViMjkyNjNh NmFkMB4XDTI2MDMyMzEzMDAzOVoXDTI2MDYyMTEzMDAzOVowLzEtMCsGA1UEAxMk YTg4NzY0YmMtYzMxMC00YjkwLWFhNDMtOThhMTY2MWU0NjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUnNsTH52yt237Bc9fcAnRUatvW1HqLmAMwA oBBz1NBv7gFMEaTugI5P7e5hnLD+yLFTCKS2iFw0gdmBfiW1eZY+Qo9XHKeL2rG4 pm6/EbYxwqfOHhTVFqHD59dz7y112dpWc6Pif/fSeMh83rw2ZmjL+foO9IKBO1Ld ezAqPM/gnDDhTqs9jDsM9aFHL54AHH5U0wy6YLXemJOQeZDliFQwLRX/9NeK7xI1 nlR7xIB9O5QQXbXgWrhzNXQfext5U+BdeoOpP3F75taUZcSEp/+8vzRnKpoiF33B MVczPc2ODwzChmM56PDafFFUuIwUHcotIN+CdF/5y9gw5MhmWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHs6z/qnxFEUUhiP6rwACTwFauxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kMWQ3 YTMxMS0zNTE4LTQ0ZDItYWE0OC1lZWIyOTI2M2E2YWQvYWYyMWFjYjItZDk1Ny0z OWY5LThmM2ItMWQ0NzU1YWRkOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDFkN2EzMTEtMzUxOC00NGQyLWFh NDgtZWViMjkyNjNhNmFkL2QxZDdhMzExLTM1MTgtNDRkMi1hYTQ4LWVlYjI5MjYz YTZhZC5jcmwwHwYDVR0jBBgwFoAUxhmSlwtkSgIFr8R2Y4qy9ezDolYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kMWQ3YTMxMS0zNTE4LTQ0ZDItYWE0OC1lZWIy OTI2M2E2YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjvhcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAnOP3Y/CwypWATgrLBwrJM8XL5gyeJeypVkD+i/XhBqPTq3+QUmbmg 9BkK63DtiZUffctstwbf1VaqVDjC5euMUb6FB9LyysnoTPiS7lWKdTa/8GYGUZcd qSUM+gUBRqSG2pCHWUD3+WL75YGtmF1YGZTU+/mvnALpOpapN22dtf/Q4dkzzda3 M33UUwvjXvCXoM9iETpAQlsCOX1FFOBwPWH96OaulME1JDw3hYrX7QVWqdy+u7Oi cEYCLTe4xt7QQZNn7ik0JI6ssHhEXllWPNQGfhio45lqGgXNihZODfP8sornoRbX 3EI3qYEgv52hVjpRMlLcqc7WxzoYczE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:19 2026 by rpki-client