$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa File: cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa (raw, json) Hash identifier: moC3r3SIY6PXgY6uc/wHTrpJqE7RX5pqQy++Kysb5FY= Subject key identifier: 9B:EC:E8:F0:FE:CF:C8:2A:51:F3:11:0D:F3:B5:8E:AE:71:4D:34:8F Certificate issuer: /CN=545b8526-3b5a-46c2-b925-6c40139289cd Certificate serial: 010D0C9F4328584D5024EEEE6F210FB9769A9880 Authority key identifier: 9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 53388 IP address blocks: 142.249.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:ee:ee:6f:21:0f:b9:76:9a:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=545b8526-3b5a-46c2-b925-6c40139289cd Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=635d37df-9a36-4198-ac37-526521584634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:7c:40:1d:a5:54:17:04:1f:e3:3d:3d:77: e9:06:c0:3a:54:27:8f:ba:a8:18:2a:d4:7d:c4:7a: e8:39:d8:b7:0b:7c:89:13:ec:e7:20:29:0c:83:9a: f9:c3:d4:8b:6d:b6:c8:04:72:3d:ed:f7:7a:18:cc: 98:56:76:64:ba:01:0c:2c:0a:a2:48:c4:af:e7:fd: 0d:4a:e4:65:89:4b:f7:c9:74:e4:e9:51:0e:14:7f: 7a:25:80:30:a7:fd:b8:8a:4c:c9:f3:a4:cb:c6:34: a7:b1:d8:b1:54:41:d3:8a:f8:ac:10:74:96:fd:0e: 25:3b:a6:f8:c3:03:c7:d7:a8:4f:ef:5d:5f:7e:0c: 42:7f:17:8c:ec:89:8e:b7:6e:b2:07:79:c8:b1:7c: 42:4a:5d:dc:59:05:71:2d:a4:b3:70:19:eb:b2:55: 5e:13:ce:ff:8f:8d:98:1d:1b:38:18:3c:48:70:00: 23:24:9b:59:83:92:8b:e2:39:88:62:68:5d:f6:32: 6f:af:e6:9f:72:16:7f:ba:84:b3:a1:16:6e:d2:9a: da:43:b8:d1:d4:3c:68:ab:bc:6e:8d:e1:55:e6:c4: a1:4d:50:df:5c:3a:3b:7b:60:18:3b:e0:4d:9e:ab: ca:e8:b3:48:ff:f8:9f:88:ef:5c:b8:1c:5c:9f:9b: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EC:E8:F0:FE:CF:C8:2A:51:F3:11:0D:F3:B5:8E:AE:71:4D:34:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/cf3f2a44-651d-3080-a1fd-31584d1d3cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.crl X509v3 Authority Key Identifier: keyid:9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer sbgp-ipAddrBlock: critical IPv4: 142.249.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c0:fb:fd:cd:86:99:32:42:2f:e2:18:b8:dd:8e:30:c9:7e: c9:74:2e:2c:6b:4f:a4:eb:e0:b0:e8:15:e9:e8:de:3e:7f:09: 0d:ae:81:87:63:12:c7:3f:60:9e:bd:91:a5:cf:b6:d4:2f:34: 8d:ee:78:91:0d:a9:ed:64:65:d8:08:6d:51:14:40:d4:c1:c1: 8c:fd:b8:06:ef:09:3f:65:c7:9d:af:77:da:64:f2:bf:4c:fd: 8a:9f:5d:63:6b:d6:d7:f8:b6:1b:10:a4:bc:3b:c5:c0:e4:34: d9:75:33:4d:48:d5:db:ba:91:05:76:e0:a3:e2:50:23:eb:fc: 08:6f:55:d2:1d:ce:e0:d7:a4:7a:06:ae:75:2c:67:3d:0d:b4: 32:af:28:6a:0c:01:42:a5:c4:da:87:f3:d5:89:0d:79:ee:ce: f5:a0:27:cc:9a:a2:79:a9:20:fe:54:61:98:78:b5:9b:8a:51: 72:98:69:d2:d7:a8:a6:64:b0:4e:81:b8:8e:7b:bd:0f:8e:d8: e6:ae:f2:91:f8:b3:65:e9:be:b2:14:b0:e2:c0:51:3f:2b:26: e2:a4:e6:d7:df:6a:26:7f:1f:bb:53:92:79:aa:3a:e4:77:52: 38:f3:4a:58:28:96:9b:4f:27:2d:e9:bb:c8:6e:b9:fc:99:47: 68:a5:9d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJO7ubyEPuXaamIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ1Yjg1MjYtM2I1YS00NmMyLWI5MjUtNmM0MDEzOTI4 OWNkMB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk NjM1ZDM3ZGYtOWEzNi00MTk4LWFjMzctNTI2NTIxNTg0NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha58QB2lVBcEH+M9PXfpBsA6VCePuqgYKtR9 xHroOdi3C3yJE+znICkMg5r5w9SLbbbIBHI97fd6GMyYVnZkugEMLAqiSMSv5/0N SuRliUv3yXTk6VEOFH96JYAwp/24ikzJ86TLxjSnsdixVEHTivisEHSW/Q4lO6b4 wwPH16hP711ffgxCfxeM7ImOt26yB3nIsXxCSl3cWQVxLaSzcBnrslVeE87/j42Y HRs4GDxIcAAjJJtZg5KL4jmIYmhd9jJvr+afchZ/uoSzoRZu0praQ7jR1Dxoq7xu jeFV5sShTVDfXDo7e2AYO+BNnqvK6LNI//ifiO9cuBxcn5v/8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvs6PD+z8gqUfMRDfO1jq5xTTSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDVi ODUyNi0zYjVhLTQ2YzItYjkyNS02YzQwMTM5Mjg5Y2QvY2YzZjJhNDQtNjUxZC0z MDgwLWExZmQtMzE1ODRkMWQzY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQ1Yjg1MjYtM2I1YS00NmMyLWI5 MjUtNmM0MDEzOTI4OWNkLzU0NWI4NTI2LTNiNWEtNDZjMi1iOTI1LTZjNDAxMzky ODljZC5jcmwwHwYDVR0jBBgwFoAUm3H71WvhRr1EkTToTzVL0RJXo1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDViODUyNi0zYjVhLTQ2YzItYjkyNS02YzQw MTM5Mjg5Y2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADA+/3NhpkyQi/iGLjdjjDJfsl0LixrT6Tr4LDoFeno3j5/CQ2ugYdj Esc/YJ69kaXPttQvNI3ueJENqe1kZdgIbVEUQNTBwYz9uAbvCT9lx52vd9pk8r9M /YqfXWNr1tf4thsQpLw7xcDkNNl1M01I1du6kQV24KPiUCPr/AhvVdIdzuDXpHoG rnUsZz0NtDKvKGoMAUKlxNqH89WJDXnuzvWgJ8yaonmpIP5UYZh4tZuKUXKYadLX qKZksE6BuI57vQ+O2Oau8pH4s2XpvrIUsOLAUT8rJuKk5tffaiZ/H7tTknmqOuR3 UjjzSlgolptPJy3pu8huufyZR2ilnbQ= -----END CERTIFICATE-----Generated at Sat Mar 28 15:35:49 2026 by rpki-client