$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/2dbc21e9-03c1-3a0d-9b34-c8f13853336a.roa File: 2dbc21e9-03c1-3a0d-9b34-c8f13853336a.roa (raw, json) Hash identifier: OJ+4JM9eE9FjmSi/2xB3YZj2A3PfxfN3s9RaqVZSLsE= Subject key identifier: E8:FC:80:FC:FF:6B:B3:7C:CA:6E:9D:7A:11:A2:1C:A1:33:1A:C3:2E Certificate issuer: /CN=04ec7da7-14e2-4c06-a815-18072c7f0f47 Certificate serial: 010D0C9F4328584DE5675649F58C02CC080725F0 Authority key identifier: 3C:2A:84:99:FA:8C:88:ED:48:2B:96:05:8D:BC:85:C1:30:B2:8F:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/2dbc21e9-03c1-3a0d-9b34-c8f13853336a.roa Signing time: Wed 20 May 2026 12:09:54 +0000 ROA not before: Wed 20 May 2026 12:09:54 +0000 ROA not after: Tue 18 Aug 2026 12:09:54 +0000 asID: 399138 IP address blocks: 142.249.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/04ec7da7-14e2-4c06-a815-18072c7f0f47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/04ec7da7-14e2-4c06-a815-18072c7f0f47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e5:67:56:49:f5:8c:02:cc:08:07:25:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04ec7da7-14e2-4c06-a815-18072c7f0f47 Validity Not Before: May 20 12:09:54 2026 GMT Not After : Aug 18 12:09:54 2026 GMT Subject: CN=c64e4c3f-35cb-4751-855b-dda52541cce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:03:a7:4e:cd:24:c3:3a:d1:ec:9f:8c:57:05: 8f:38:39:36:d9:69:e7:b9:09:c8:cc:12:7b:9b:bc: 86:fa:cf:9c:f2:27:2b:df:d8:26:6b:45:e9:79:e1: 4c:14:86:fc:21:c2:fd:e6:a3:1a:c4:82:16:ce:9e: 05:8b:34:5a:3b:a3:07:70:c2:ff:6c:b9:03:a1:ac: a4:f9:22:db:d1:a1:52:fd:96:a2:ad:8b:7f:85:f5: fd:63:ad:25:97:97:3c:64:f0:8a:55:24:4e:b8:50: bc:fa:5c:02:86:e5:bc:2f:d0:67:e4:44:54:8a:79: 66:5b:0c:8a:9c:69:2a:df:a0:6d:99:10:e0:48:6d: f6:f1:11:a3:ca:c1:af:c8:ec:06:40:5d:37:2d:56: bd:2a:a2:78:4c:9f:bc:91:6f:67:79:68:67:e4:f2: 53:62:3e:da:64:db:ec:14:25:25:75:26:0c:1f:62: af:70:02:17:50:3b:16:9f:87:0a:ce:da:6b:9c:0f: 85:23:b8:a7:47:78:50:e0:7e:59:13:29:23:e9:23: a3:af:43:c2:25:cc:4b:f7:2b:29:cd:53:8a:53:03: 4b:57:83:9e:dd:33:78:c3:8d:c3:20:01:c1:07:e2: 44:42:d0:17:48:de:ea:e8:c7:3c:32:c5:90:7f:24: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FC:80:FC:FF:6B:B3:7C:CA:6E:9D:7A:11:A2:1C:A1:33:1A:C3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/2dbc21e9-03c1-3a0d-9b34-c8f13853336a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/04ec7da7-14e2-4c06-a815-18072c7f0f47.crl X509v3 Authority Key Identifier: keyid:3C:2A:84:99:FA:8C:88:ED:48:2B:96:05:8D:BC:85:C1:30:B2:8F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47.cer sbgp-ipAddrBlock: critical IPv4: 142.249.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c6:66:7a:e3:9a:24:d5:59:4e:a3:42:d5:ea:ec:bd:36:4c: 2e:11:92:a9:83:61:2d:6d:bc:36:bc:9c:0c:0b:61:b7:6c:4f: c9:10:00:a8:0d:65:12:8c:9d:17:8d:07:39:0e:77:95:09:84: 53:25:f5:24:99:db:f8:4b:00:2f:ec:de:68:a3:7d:f5:03:a4: 2a:d6:97:4d:d9:5f:6b:dd:4a:e9:51:dc:b9:f3:e2:3c:3b:d4: 2a:e1:76:bc:91:38:32:97:21:02:b1:fd:f1:6f:ac:41:f5:52: 73:55:9a:77:ec:5b:99:5a:74:c6:95:2b:01:b6:bf:4e:17:3f: 6e:a0:cd:ad:aa:d1:a8:14:93:0f:35:3a:1c:98:5b:52:51:25: df:2e:cd:cf:39:6e:7d:dd:f8:4b:61:17:d0:59:67:dc:41:b4: 32:d6:6d:38:66:68:8f:8d:1b:2b:52:9d:0b:5a:0b:28:76:b4: 5a:5b:83:33:1e:d2:74:f5:08:4f:9d:c2:79:88:53:3d:2f:37: d0:d0:fa:f8:24:8e:69:22:7b:5f:39:ab:7d:83:de:80:2d:ae: e9:7e:30:ab:65:e2:34:be:86:62:d6:78:74:fd:9b:ad:48:aa: 87:bd:1b:ea:85:f2:e9:65:57:5b:6c:a6:99:e1:a8:f4:73:aa: 50:e5:7b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3lZ1ZJ9YwCzAgHJfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRlYzdkYTctMTRlMi00YzA2LWE4MTUtMTgwNzJjN2Yw ZjQ3MB4XDTI2MDUyMDEyMDk1NFoXDTI2MDgxODEyMDk1NFowLzEtMCsGA1UEAxMk YzY0ZTRjM2YtMzVjYi00NzUxLTg1NWItZGRhNTI1NDFjY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gOnTs0kwzrR7J+MVwWPODk22WnnuQnIzBJ7 m7yG+s+c8icr39gma0XpeeFMFIb8IcL95qMaxIIWzp4FizRaO6MHcML/bLkDoayk +SLb0aFS/ZairYt/hfX9Y60ll5c8ZPCKVSROuFC8+lwChuW8L9Bn5ERUinlmWwyK nGkq36BtmRDgSG328RGjysGvyOwGQF03LVa9KqJ4TJ+8kW9neWhn5PJTYj7aZNvs FCUldSYMH2KvcAIXUDsWn4cKztprnA+FI7inR3hQ4H5ZEykj6SOjr0PCJcxL9ysp zVOKUwNLV4Oe3TN4w43DIAHBB+JEQtAXSN7q6Mc8MsWQfyT8DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj8gPz/a7N8ym6dehGiHKEzGsMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNGVj N2RhNy0xNGUyLTRjMDYtYTgxNS0xODA3MmM3ZjBmNDcvMmRiYzIxZTktMDNjMS0z YTBkLTliMzQtYzhmMTM4NTMzMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDRlYzdkYTctMTRlMi00YzA2LWE4 MTUtMTgwNzJjN2YwZjQ3LzA0ZWM3ZGE3LTE0ZTItNGMwNi1hODE1LTE4MDcyYzdm MGY0Ny5jcmwwHwYDVR0jBBgwFoAUPCqEmfqMiO1IK5YFjbyFwTCyjywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNGVjN2RhNy0xNGUyLTRjMDYtYTgxNS0xODA3 MmM3ZjBmNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3GZnrjmiTVWU6jQtXq7L02TC4RkqmDYS1tvDa8nAwLYbdsT8kQAKgN ZRKMnReNBzkOd5UJhFMl9SSZ2/hLAC/s3mijffUDpCrWl03ZX2vdSulR3Lnz4jw7 1CrhdryRODKXIQKx/fFvrEH1UnNVmnfsW5ladMaVKwG2v04XP26gza2q0agUkw81 OhyYW1JRJd8uzc85bn3d+EthF9BZZ9xBtDLWbThmaI+NGytSnQtaCyh2tFpbgzMe 0nT1CE+dwnmIUz0vN9DQ+vgkjmkie185q32D3oAtrul+MKtl4jS+hmLWeHT9m61I qoe9G+qF8ullV1tsppnhqPRzqlDle8A= -----END CERTIFICATE-----Generated at Thu May 28 13:40:10 2026 by rpki-client