$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa File: cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa (raw, json) Hash identifier: XJva5efYf/PHHiG3VEuGEI35M8MHlVZxf8Qv3eut57Q= Subject key identifier: 3E:70:66:20:D7:C5:91:E3:AF:1C:0E:B1:3C:B1:79:41:FF:96:FA:4E Certificate issuer: /CN=545b8526-3b5a-46c2-b925-6c40139289cd Certificate serial: 010D0C9F4328584E3069ACB27D2AED59E29F0158 Authority key identifier: 9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa Signing time: Tue 16 Jun 2026 09:00:12 +0000 ROA not before: Tue 16 Jun 2026 09:00:12 +0000 ROA not after: Mon 14 Sep 2026 09:00:12 +0000 asID: 53388 IP address blocks: 142.249.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:69:ac:b2:7d:2a:ed:59:e2:9f:01:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=545b8526-3b5a-46c2-b925-6c40139289cd Validity Not Before: Jun 16 09:00:12 2026 GMT Not After : Sep 14 09:00:12 2026 GMT Subject: CN=13ddde12-1f9a-43ca-8c1e-3a74a2e979aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:3e:0d:e0:a2:29:1c:83:f3:12:e8:7f:d8: 2b:99:de:ce:32:88:df:b0:cb:f2:df:44:61:33:a0: 38:86:d8:0d:6b:e3:b7:74:24:07:31:2c:fc:59:b7: 24:00:64:14:73:81:30:f1:c2:ed:8f:17:64:02:19: 7b:d6:1f:f8:18:af:ba:53:9d:1b:4a:4d:03:25:5f: ca:5d:9d:be:8b:d4:aa:ef:10:f8:fe:f4:37:54:6f: 59:f6:eb:23:9a:11:9e:0d:c8:6d:c8:14:cd:11:25: b5:af:73:41:19:9d:49:af:22:96:c1:2e:7d:2b:1f: 9e:de:63:89:06:1a:7d:19:97:af:43:ec:46:ee:9a: cb:e8:cc:44:c7:3e:19:d9:3a:7b:06:91:f2:11:e0: 6d:d6:7f:78:ea:32:2a:6b:13:64:94:32:9f:60:59: 59:3c:db:6d:e3:f1:c3:da:68:0d:cd:b8:56:c1:1a: d5:27:31:e1:1b:1d:72:f0:2c:ae:70:6d:d6:4b:64: dc:44:1f:e2:8d:9a:02:64:46:c6:8e:bc:17:39:0c: 05:b7:5f:20:fd:a0:e0:d1:8a:7d:75:be:aa:6d:c2: 3c:18:6b:65:61:d9:34:9b:5b:94:1a:9a:6d:d8:29: f4:b9:65:be:e3:3f:8e:07:f5:ca:1f:ff:bc:dc:d3: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:70:66:20:D7:C5:91:E3:AF:1C:0E:B1:3C:B1:79:41:FF:96:FA:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl X509v3 Authority Key Identifier: keyid:9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer sbgp-ipAddrBlock: critical IPv4: 142.249.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e2:be:e7:28:90:29:79:ba:e2:f5:03:2a:79:8f:d1:54:a0: e0:40:ef:a3:ef:2e:e6:36:50:97:a3:6d:12:24:44:85:77:f0: 75:1a:1e:8f:8a:1d:a4:a4:e8:d6:30:7f:24:c3:2d:01:0b:dc: a1:b3:73:df:3a:f8:90:f7:cb:de:2e:75:54:7a:a7:24:5d:14: fd:dd:a8:ad:f8:4a:33:96:64:78:57:7e:63:70:2a:13:fd:66: ec:d1:84:5e:b6:f0:37:32:d7:7f:f3:19:61:a9:b1:18:72:c3: f8:3b:60:36:66:87:12:82:7e:81:8e:56:d4:ef:bb:1b:ea:90: ed:e9:19:82:5a:b0:59:30:c3:bd:db:c3:19:bf:4e:b7:ce:22: 47:0c:d5:97:68:a9:72:02:9f:d1:50:5b:1d:1b:b9:30:a2:f0: a5:f0:6b:5e:de:d5:6b:88:96:5d:53:89:13:c1:e6:d5:34:d1: 3a:92:2f:3d:68:6f:e3:a1:32:b8:93:8d:ad:8f:15:5b:c8:1d: 69:12:09:f1:0f:3d:b2:b0:49:d2:5e:ac:6a:98:4f:cc:f8:0e: 78:2c:46:7a:53:ce:47:db:15:d7:16:23:52:2b:74:94:aa:25: 51:4b:bf:b6:c6:a3:36:43:bb:c2:63:03:32:9d:7f:58:c7:68: a9:16:f0:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4waayyfSrtWeKfAVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ1Yjg1MjYtM2I1YS00NmMyLWI5MjUtNmM0MDEzOTI4 OWNkMB4XDTI2MDYxNjA5MDAxMloXDTI2MDkxNDA5MDAxMlowLzEtMCsGA1UEAxMk MTNkZGRlMTItMWY5YS00M2NhLThjMWUtM2E3NGEyZTk3OWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNY+DeCiKRyD8xLof9grmd7OMojfsMvy30Rh M6A4htgNa+O3dCQHMSz8WbckAGQUc4Ew8cLtjxdkAhl71h/4GK+6U50bSk0DJV/K XZ2+i9Sq7xD4/vQ3VG9Z9usjmhGeDchtyBTNESW1r3NBGZ1JryKWwS59Kx+e3mOJ Bhp9GZevQ+xG7prL6MxExz4Z2Tp7BpHyEeBt1n946jIqaxNklDKfYFlZPNtt4/HD 2mgNzbhWwRrVJzHhGx1y8CyucG3WS2TcRB/ijZoCZEbGjrwXOQwFt18g/aDg0Yp9 db6qbcI8GGtlYdk0m1uUGppt2Cn0uWW+4z+OB/XKH/+83NOi6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5wZiDXxZHjrxwOsTyxeUH/lvpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDVi ODUyNi0zYjVhLTQ2YzItYjkyNS02YzQwMTM5Mjg5Y2QvY2YzZjJhNDQtNjUxZC0z MDgwLWExZmQtMzE1ODRkMWQzY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQ1Yjg1MjYtM2I1YS00NmMyLWI5 MjUtNmM0MDEzOTI4OWNkLzU0NWI4NTI2LTNiNWEtNDZjMi1iOTI1LTZjNDAxMzky ODljZC5jcmwwHwYDVR0jBBgwFoAUm3H71WvhRr1EkTToTzVL0RJXo1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDViODUyNi0zYjVhLTQ2YzItYjkyNS02YzQw MTM5Mjg5Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnivucokCl5uuL1Ayp5j9FUoOBA76PvLuY2UJejbRIkRIV38HUaHo+K HaSk6NYwfyTDLQEL3KGzc986+JD3y94udVR6pyRdFP3dqK34SjOWZHhXfmNwKhP9 ZuzRhF628Dcy13/zGWGpsRhyw/g7YDZmhxKCfoGOVtTvuxvqkO3pGYJasFkww73b wxm/TrfOIkcM1ZdoqXICn9FQWx0buTCi8KXwa17e1WuIll1TiRPB5tU00TqSLz1o b+OhMriTja2PFVvIHWkSCfEPPbKwSdJerGqYT8z4DngsRnpTzkfbFdcWI1IrdJSq JVFLv7bGozZDu8JjAzKdf1jHaKkW8PI= -----END CERTIFICATE-----Generated at Sun Jun 28 04:36:52 2026 by rpki-client