$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa File: 3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa (raw, json) Hash identifier: qOtxjz4ZD5vHl4qTKDB+EkEUd30nh+bHvk8TsUzUmdk= Subject key identifier: 17:82:73:97:23:26:8D:A6:CE:1C:CD:05:20:41:AF:64:5E:22:F3:04 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584D1B1A038AF88684062D5DF400 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 203020 IP address blocks: 142.147.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:03:8a:f8:86:84:06:2d:5d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=1a124b4f-f1d7-44d3-9218-20d7f8491b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d3:c1:87:ee:f6:a7:0a:b1:f0:26:1d:e8:0b: 54:5a:48:52:02:f0:fa:96:a5:ed:5b:4f:f2:4e:95: cb:e2:96:da:1e:78:ed:0e:38:74:d5:c2:4e:28:4a: d5:b2:8e:fb:11:72:f8:bf:97:da:9b:d7:64:7b:d5: a4:88:40:d0:d0:e1:a8:d2:eb:eb:0c:b5:98:a4:70: 0b:d6:13:47:e7:76:29:57:24:a6:43:55:27:71:29: f1:6a:c3:58:93:93:5e:a2:30:f0:40:ee:ef:57:0b: 21:28:31:db:b0:0a:93:6e:77:b9:27:d8:a4:99:27: ca:c9:30:5f:bf:e7:51:f5:ce:a7:66:da:f0:aa:fa: 21:9f:46:d3:72:2a:c2:ce:41:ef:3d:ee:15:fa:2f: e6:15:70:d1:e6:61:f8:65:90:7c:c1:9a:69:51:31: 00:3e:b2:57:ee:62:28:21:79:05:0c:c7:80:50:ad: 18:9b:fb:cd:74:b6:b3:9b:97:b7:eb:c3:4e:a2:77: df:0d:ea:44:5e:5e:c8:52:a2:d2:03:98:71:c2:7d: ca:92:21:f3:4b:5b:64:8e:f0:e8:d6:67:e6:7f:63: 5c:68:ff:93:9b:80:08:ea:38:1c:94:3a:12:e4:1b: ab:1b:91:77:51:ae:38:d6:ee:9c:5b:56:d8:05:46: 5b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:82:73:97:23:26:8D:A6:CE:1C:CD:05:20:41:AF:64:5E:22:F3:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 142.147.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:14:bc:ea:02:15:4a:03:79:31:21:bc:3f:16:12:eb:ed:6e: 42:54:b5:36:95:39:ae:f9:69:40:6c:00:6b:a4:7a:c7:d7:f9: 5c:b1:06:56:44:fa:fe:f7:8b:50:5e:48:87:e0:d3:fa:2f:de: 15:55:f0:e5:89:d8:bc:1c:94:f4:32:de:b4:75:27:46:b3:f2: ad:87:68:fc:73:e4:8b:65:72:bc:12:ff:c5:50:a8:bd:1f:e1: 44:d0:3b:6a:13:b4:75:80:26:e8:02:3b:a0:a0:4f:4e:89:38: dd:3f:38:6f:5c:e7:fe:0f:3f:ec:e7:ec:af:1f:2a:3b:c7:a3: dd:13:f4:85:51:cf:03:fd:4b:6a:37:8c:90:b1:8d:e3:b7:8a: 4c:2b:f9:47:5c:6e:38:ac:7a:e2:f5:14:6d:b5:1a:65:dc:86: ae:3d:9f:39:62:78:45:54:4d:60:aa:16:af:63:be:42:c1:4f: 45:39:be:9f:6f:d0:2e:44:a5:75:13:8f:16:5a:66:4e:14:0c: 52:3c:5f:65:cc:e2:72:c8:8a:1b:30:42:56:eb:44:d7:18:cb: be:84:79:f1:af:c3:6e:d3:96:69:ac:b1:be:22:d8:b7:11:c7: c4:20:19:27:a7:b7:f7:0f:33:59:9c:aa:f8:06:fd:e9:d1:e4: 22:d6:ce:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGgOK+IaEBi1d9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MWExMjRiNGYtZjFkNy00NGQzLTkyMTgtMjBkN2Y4NDkxYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtPBh+72pwqx8CYd6AtUWkhSAvD6lqXtW0/y TpXL4pbaHnjtDjh01cJOKErVso77EXL4v5fam9dke9WkiEDQ0OGo0uvrDLWYpHAL 1hNH53YpVySmQ1UncSnxasNYk5NeojDwQO7vVwshKDHbsAqTbne5J9ikmSfKyTBf v+dR9c6nZtrwqvohn0bTcirCzkHvPe4V+i/mFXDR5mH4ZZB8wZppUTEAPrJX7mIo IXkFDMeAUK0Ym/vNdLazm5e368NOonffDepEXl7IUqLSA5hxwn3KkiHzS1tkjvDo 1mfmf2NcaP+Tm4AI6jgclDoS5BurG5F3Ua441u6cW1bYBUZbzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeCc5cjJo2mzhzNBSBBr2ReIvMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvM2ZiMDM5OGQtOTZhMC0z ZTVhLWJiMjEtNmM4N2U1ZDI4NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjpOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUUvOoCFUoDeTEhvD8WEuvtbkJUtTaVOa75aUBsAGukesfX+VyxBlZE +v73i1BeSIfg0/ov3hVV8OWJ2LwclPQy3rR1J0az8q2HaPxz5ItlcrwS/8VQqL0f 4UTQO2oTtHWAJugCO6CgT06JON0/OG9c5/4PP+zn7K8fKjvHo90T9IVRzwP9S2o3 jJCxjeO3ikwr+UdcbjiseuL1FG21GmXchq49nzlieEVUTWCqFq9jvkLBT0U5vp9v 0C5EpXUTjxZaZk4UDFI8X2XM4nLIihswQlbrRNcYy76EefGvw27Tlmmssb4i2LcR x8QgGSent/cPM1mcqvgG/enR5CLWzgI= -----END CERTIFICATE-----Generated at Thu Mar 26 09:54:23 2026 by rpki-client