$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/795e35c7-74bf-3f59-839a-450438e81357.roa File: 795e35c7-74bf-3f59-839a-450438e81357.roa (raw, json) Hash identifier: +3NVkoSwnAYJXDsO+OWpVdBA150uxSguTWvz7K0r1WM= Subject key identifier: 91:75:22:98:85:99:CD:DF:29:7D:BD:8F:4E:36:52:EB:0D:A0:03:25 Certificate issuer: /CN=bc8c9e11-62a7-43d6-880c-f7147230bfa0 Certificate serial: 010D0C9F4328584D386A56908D4D406CD67A5780 Authority key identifier: B7:B0:8A:4C:E3:E0:AA:1A:06:48:C7:D4:A1:EE:3C:B4:4B:A8:A0:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/795e35c7-74bf-3f59-839a-450438e81357.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 8075 IP address blocks: 142.249.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:56:90:8d:4d:40:6c:d6:7a:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc8c9e11-62a7-43d6-880c-f7147230bfa0 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=74741b9d-e53f-43c1-b9a6-fbe6c3fe0608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:1d:91:bb:db:b6:94:11:13:90:a9:e4:6f: 6e:b0:10:34:55:b3:5c:4e:1b:00:74:c3:5d:c7:45: 2e:5c:50:6f:da:44:6d:d9:82:32:3a:1d:34:cc:ed: 6b:96:64:86:da:73:9a:de:46:18:2a:4b:26:88:d2: 15:96:22:ec:7f:e9:54:f6:ac:72:65:1b:65:04:15: 65:5e:e3:20:31:63:7b:87:98:e0:48:21:78:b8:de: 02:e9:24:2b:f9:ed:53:7f:e7:03:6e:89:46:01:d6: 1d:d1:18:8d:0f:b1:b3:6f:d8:0e:c6:71:1f:6c:4e: 6d:98:a0:ac:e9:18:0b:fe:6c:36:22:d6:74:a0:34: 85:a1:dc:d0:19:17:87:e6:ff:64:56:f8:f9:90:af: 34:85:26:69:62:8d:d0:98:d0:f8:c2:3a:39:6c:ae: d7:86:ae:b7:3d:a3:50:37:26:1a:03:e9:86:b6:ba: 68:f4:8d:87:1b:c7:a4:a1:66:21:8a:88:6e:fe:45: 5a:b1:71:21:ac:53:1c:d8:c5:4b:d9:1c:26:4c:32: ad:38:11:a7:69:a0:33:42:49:49:de:2f:2e:35:d7: a1:4c:16:b9:0b:98:f9:f0:6b:ef:4d:55:76:75:7f: 88:59:8a:d3:fc:0c:2f:cd:43:95:ff:b6:89:c9:6e: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:22:98:85:99:CD:DF:29:7D:BD:8F:4E:36:52:EB:0D:A0:03:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/795e35c7-74bf-3f59-839a-450438e81357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0/bc8c9e11-62a7-43d6-880c-f7147230bfa0.crl X509v3 Authority Key Identifier: keyid:B7:B0:8A:4C:E3:E0:AA:1A:06:48:C7:D4:A1:EE:3C:B4:4B:A8:A0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bc8c9e11-62a7-43d6-880c-f7147230bfa0.cer sbgp-ipAddrBlock: critical IPv4: 142.249.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ff:ba:f0:58:a8:9a:dc:e9:f5:b6:8c:e8:2a:b4:b7:e6:fb: 75:03:c3:08:80:18:8f:53:a6:a9:7f:77:63:41:8f:64:31:1e: b2:e3:e6:7e:0d:0b:4c:93:ae:6b:02:95:dd:48:ff:e2:7e:19: 34:75:98:53:3b:88:0e:4b:f5:58:8f:6b:cc:c2:e5:f2:06:cd: f6:28:94:2d:9b:eb:63:81:8d:eb:62:fd:80:1d:a3:00:25:13: 75:e4:d8:88:5b:ec:e2:b9:d8:91:da:89:3b:5d:35:94:c5:e3: ef:17:14:16:46:e6:42:77:88:e7:ff:bd:2c:72:2c:c3:52:ce: 48:bc:9c:1d:43:65:1a:72:b7:be:8d:c2:12:4f:9b:e2:35:b0: 3d:1d:c0:3b:9b:98:0f:a0:95:05:ae:d9:f1:f7:1a:c3:23:57: cf:2a:e3:f3:6f:10:ff:59:7b:e5:66:80:23:ec:51:d9:f5:43: d4:ea:bd:05:0d:81:71:d9:38:c6:b7:8d:ec:06:4b:b4:76:1f: a1:e5:dc:62:80:14:02:f3:f3:ab:5e:d3:4c:e6:99:90:fb:1b: 70:fd:d2:bd:87:7f:0d:df:0c:86:2e:49:18:0b:d8:a2:50:50: 54:34:ef:02:65:ab:bc:fd:39:0d:9f:64:79:e7:08:1e:3b:bb: 9d:55:bb:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alaQjU1AbNZ6V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM4YzllMTEtNjJhNy00M2Q2LTg4MGMtZjcxNDcyMzBi ZmEwMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NzQ3NDFiOWQtZTUzZi00M2MxLWI5YTYtZmJlNmMzZmUwNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqYdkbvbtpQRE5Cp5G9usBA0VbNcThsAdMNd x0UuXFBv2kRt2YIyOh00zO1rlmSG2nOa3kYYKksmiNIVliLsf+lU9qxyZRtlBBVl XuMgMWN7h5jgSCF4uN4C6SQr+e1Tf+cDbolGAdYd0RiND7Gzb9gOxnEfbE5tmKCs 6RgL/mw2ItZ0oDSFodzQGReH5v9kVvj5kK80hSZpYo3QmND4wjo5bK7Xhq63PaNQ NyYaA+mGtrpo9I2HG8ekoWYhiohu/kVasXEhrFMc2MVL2RwmTDKtOBGnaaAzQklJ 3i8uNdehTBa5C5j58GvvTVV2dX+IWYrT/AwvzUOV/7aJyW6XPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF1IpiFmc3fKX29j042UusNoAMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYzhj OWUxMS02MmE3LTQzZDYtODgwYy1mNzE0NzIzMGJmYTAvNzk1ZTM1YzctNzRiZi0z ZjU5LTgzOWEtNDUwNDM4ZTgxMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmM4YzllMTEtNjJhNy00M2Q2LTg4 MGMtZjcxNDcyMzBiZmEwL2JjOGM5ZTExLTYyYTctNDNkNi04ODBjLWY3MTQ3MjMw YmZhMC5jcmwwHwYDVR0jBBgwFoAUt7CKTOPgqhoGSMfUoe48tEuooHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYzhjOWUxMS02MmE3LTQzZDYtODgwYy1mNzE0 NzIzMGJmYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvlfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG//uvBYqJrc6fW2jOgqtLfm+3UDwwiAGI9Tpql/d2NBj2QxHrLj5n4N C0yTrmsCld1I/+J+GTR1mFM7iA5L9ViPa8zC5fIGzfYolC2b62OBjeti/YAdowAl E3Xk2Ihb7OK52JHaiTtdNZTF4+8XFBZG5kJ3iOf/vSxyLMNSzki8nB1DZRpyt76N whJPm+I1sD0dwDubmA+glQWu2fH3GsMjV88q4/NvEP9Ze+VmgCPsUdn1Q9TqvQUN gXHZOMa3jewGS7R2H6Hl3GKAFALz86te00zmmZD7G3D90r2Hfw3fDIYuSRgL2KJQ UFQ07wJlq7z9OQ2fZHnnCB47u51Vuyk= -----END CERTIFICATE-----Generated at Thu Mar 26 02:12:36 2026 by rpki-client