$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/f545aa0c-e002-3648-87b3-571af6d2656f.roa File: f545aa0c-e002-3648-87b3-571af6d2656f.roa (raw, json) Hash identifier: l6swmHj1/D4Qsyv68uennHi+V0nvKfoOZaim+d3pAzQ= Subject key identifier: 09:13:18:44:E5:C5:8D:E9:7A:7B:73:A2:F6:EE:FC:04:E5:72:03:2E Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Certificate serial: 010D0C9F4328584D9063F457C28D06862FF61D80 Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/f545aa0c-e002-3648-87b3-571af6d2656f.roa Signing time: Mon 20 Apr 2026 01:19:22 +0000 ROA not before: Mon 20 Apr 2026 01:19:22 +0000 ROA not after: Sun 19 Jul 2026 01:19:22 +0000 asID: 19416 IP address blocks: 142.245.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:63:f4:57:c2:8d:06:86:2f:f6:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Validity Not Before: Apr 20 01:19:22 2026 GMT Not After : Jul 19 01:19:22 2026 GMT Subject: CN=d0798057-3311-4c53-ad14-075d1a707386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:c3:6b:e0:a5:89:ce:df:d8:6a:dd:5e:a1: 68:1e:f2:88:30:93:1d:7e:30:64:09:11:21:df:b2: eb:8b:7c:b2:0d:fb:f1:dd:3a:68:32:58:7f:a9:99: f8:92:67:dd:cb:87:0e:63:fc:47:af:6a:1e:79:63: f3:c2:c7:64:de:87:c1:e0:9b:2a:bc:3c:2a:a5:61: fc:91:a2:52:6e:0f:2c:cc:97:e1:f8:fc:15:3d:6b: 04:a3:aa:06:8e:1e:67:00:31:78:22:8b:5b:10:4a: 83:35:7c:29:73:5b:b5:9e:ae:b4:f4:10:c1:be:01: 3d:db:eb:24:e0:9f:d3:81:56:2a:e4:d0:c4:fc:9a: ae:b8:6d:37:28:68:63:38:06:b7:b2:e9:4d:08:da: da:7d:06:f4:f2:c0:48:66:2f:ab:db:57:f7:60:9a: 6a:e5:de:ad:13:d8:e6:16:e9:99:ce:af:5e:92:2b: c5:b4:66:f8:f9:df:96:c7:dc:15:69:a8:b6:04:6d: 08:15:4b:22:36:84:d9:88:e1:a4:06:ef:8b:9f:52: 95:2d:77:00:c2:a5:51:0d:77:3f:d6:eb:1b:46:6f: 26:d4:0b:4a:11:f0:0a:21:0f:70:7c:8b:5f:4a:01: 8f:62:99:44:03:94:06:6b:b1:27:7b:b4:bb:07:5e: 3c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:13:18:44:E5:C5:8D:E9:7A:7B:73:A2:F6:EE:FC:04:E5:72:03:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/f545aa0c-e002-3648-87b3-571af6d2656f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl X509v3 Authority Key Identifier: keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer sbgp-ipAddrBlock: critical IPv4: 142.245.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:49:67:1e:64:c3:65:79:3f:75:5f:da:22:af:63:c2:b8:d0: 2c:2a:56:f9:af:3d:4e:bd:e3:35:f8:04:7d:0f:86:e6:6c:2b: be:8f:e4:87:16:17:c7:43:f6:14:52:db:8a:74:43:42:96:52: 4f:26:e1:a4:95:83:da:7d:87:ab:89:22:2e:5d:e4:1b:35:ec: d1:62:94:eb:db:1a:38:2c:a9:3c:66:40:e2:34:74:83:8f:13: 18:8a:bf:9f:32:60:69:98:43:6c:6c:8a:33:c8:e5:31:1b:01: 66:37:49:7c:76:35:4d:4e:05:32:bc:0d:6a:b1:53:47:cf:17: 20:c2:82:4a:9e:f9:e7:26:3e:77:d1:50:ca:1f:c1:e8:7e:de: fc:d1:36:46:74:22:77:d5:d4:09:92:08:d8:c2:4f:2c:8b:67: 65:51:78:cd:c4:14:ce:9c:2b:45:c0:3c:c5:e0:35:3e:5e:3f: 17:48:1d:7c:27:8b:af:b5:6a:61:8b:8f:84:0b:46:57:fb:c6: 85:b5:72:13:f2:db:05:81:f1:ac:6c:25:47:de:78:67:71:df: a7:4f:79:4f:43:40:fd:e6:f1:89:82:c7:4b:2d:a5:99:5c:d9: f6:49:ec:1e:af:b0:49:e0:77:61:77:b6:17:dd:88:b8:08:cc: b4:5f:56:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QY/RXwo0Ghi/2HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk ZDdiMB4XDTI2MDQyMDAxMTkyMloXDTI2MDcxOTAxMTkyMlowLzEtMCsGA1UEAxMk ZDA3OTgwNTctMzMxMS00YzUzLWFkMTQtMDc1ZDFhNzA3Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvLDa+Clic7f2GrdXqFoHvKIMJMdfjBkCREh 37Lri3yyDfvx3TpoMlh/qZn4kmfdy4cOY/xHr2oeeWPzwsdk3ofB4JsqvDwqpWH8 kaJSbg8szJfh+PwVPWsEo6oGjh5nADF4IotbEEqDNXwpc1u1nq609BDBvgE92+sk 4J/TgVYq5NDE/JquuG03KGhjOAa3sulNCNrafQb08sBIZi+r21f3YJpq5d6tE9jm FumZzq9ekivFtGb4+d+Wx9wVaai2BG0IFUsiNoTZiOGkBu+Ln1KVLXcAwqVRDXc/ 1usbRm8m1AtKEfAKIQ9wfItfSgGPYplEA5QGa7Ene7S7B148LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkTGETlxY3pentzovbu/ATlcgMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvZjU0NWFhMGMtZTAwMi0z NjQ4LTg3YjMtNTcxYWY2ZDI2NTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4 NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz ZDIzYmRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtJZx5kw2V5P3Vf2iKvY8K40CwqVvmvPU694zX4BH0PhuZsK76P5IcW F8dD9hRS24p0Q0KWUk8m4aSVg9p9h6uJIi5d5Bs17NFilOvbGjgsqTxmQOI0dIOP ExiKv58yYGmYQ2xsijPI5TEbAWY3SXx2NU1OBTK8DWqxU0fPFyDCgkqe+ecmPnfR UMofweh+3vzRNkZ0InfV1AmSCNjCTyyLZ2VReM3EFM6cK0XAPMXgNT5ePxdIHXwn i6+1amGLj4QLRlf7xoW1chPy2wWB8axsJUfeeGdx36dPeU9DQP3m8YmCx0stpZlc 2fZJ7B6vsEngd2F3thfdiLgIzLRfVus= -----END CERTIFICATE-----Generated at Mon Apr 27 11:15:49 2026 by rpki-client