$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/1ec3a647-68b8-3e55-9160-09e582e5b0ce.roa File: 1ec3a647-68b8-3e55-9160-09e582e5b0ce.roa (raw, json) Hash identifier: OgXa0bpgRFSRvf24G+o4d8jSAscKU1yEQiC4kFSlt5c= Subject key identifier: B2:E2:28:5F:D0:79:7F:43:E1:42:68:8F:74:2A:F7:06:3C:0F:77:E8 Certificate issuer: /CN=34023f75-51e1-4feb-8257-4a0e4e1dafa9 Certificate serial: 010D0C9F4328584D0BC1668E42647A9FE978DA00 Authority key identifier: 31:01:7E:05:23:55:DB:00:65:36:81:5C:8D:73:E5:70:3F:E8:FE:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/1ec3a647-68b8-3e55-9160-09e582e5b0ce.roa Signing time: Tue 03 Mar 2026 13:05:09 +0000 ROA not before: Tue 03 Mar 2026 13:05:09 +0000 ROA not after: Mon 01 Jun 2026 12:05:09 +0000 asID: 19695 IP address blocks: 142.248.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/34023f75-51e1-4feb-8257-4a0e4e1dafa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/34023f75-51e1-4feb-8257-4a0e4e1dafa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:c1:66:8e:42:64:7a:9f:e9:78:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34023f75-51e1-4feb-8257-4a0e4e1dafa9 Validity Not Before: Mar 3 13:05:09 2026 GMT Not After : Jun 1 12:05:09 2026 GMT Subject: CN=f652dfef-bb57-479b-91de-a7f9a1e1d664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:3e:5b:d8:f8:80:28:07:8e:04:19:a3:ca: 24:18:bd:54:f8:99:31:0c:89:46:54:f6:44:4c:65: 37:29:c6:a1:c7:d6:2e:98:b9:11:58:0c:ea:a0:00: 96:f5:93:9f:1d:3b:04:4a:93:c3:7d:71:50:98:36: 33:b4:d3:df:d5:cf:58:82:71:be:3d:d1:85:dd:6a: 48:8d:aa:6f:fe:29:d6:9c:78:be:ff:57:c7:24:df: 13:ab:40:fe:fc:88:06:ff:63:86:ce:94:d6:75:9c: 00:fe:94:a9:d5:29:1c:22:6f:b1:ee:80:49:ff:4f: c7:54:89:42:a4:c8:ba:5d:48:35:e1:9b:01:07:42: b9:e9:3a:64:09:b0:20:74:ee:fd:bd:2d:57:78:82: 9c:99:e2:d7:53:d9:fa:36:8d:a7:7a:62:9c:9c:80: ba:99:e3:05:60:83:ba:3a:31:eb:be:ca:18:b7:ba: 07:c5:4b:e5:5e:29:b9:68:7f:da:2f:df:44:a2:aa: d6:90:a3:0a:2a:c0:b3:f6:65:f7:01:cd:b7:db:05: d5:32:03:4f:de:03:9d:6e:bb:a3:29:4d:d1:b8:08: e9:3d:02:5f:65:4a:af:9c:bb:38:ad:b9:fa:ec:53: e1:f7:f4:7a:2c:43:02:f5:02:4e:f5:6c:b4:5a:92: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E2:28:5F:D0:79:7F:43:E1:42:68:8F:74:2A:F7:06:3C:0F:77:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/1ec3a647-68b8-3e55-9160-09e582e5b0ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9/34023f75-51e1-4feb-8257-4a0e4e1dafa9.crl X509v3 Authority Key Identifier: keyid:31:01:7E:05:23:55:DB:00:65:36:81:5C:8D:73:E5:70:3F:E8:FE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/34023f75-51e1-4feb-8257-4a0e4e1dafa9.cer sbgp-ipAddrBlock: critical IPv4: 142.248.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2e:fe:b9:e7:cf:9a:3f:ea:e0:fb:14:e9:64:35:54:91:c5: 39:9a:32:37:bd:d8:2d:ec:2f:fb:ee:8e:0f:1d:6b:5b:1a:7d: 58:f8:f3:5f:d7:14:df:71:3c:61:55:bd:08:22:d3:c7:d0:09: 87:7a:6b:79:2a:e4:31:54:f9:92:09:a7:63:66:dc:f3:9e:a6: 33:75:fd:f2:bd:dd:3e:ae:11:6b:fb:ec:35:b5:3b:6e:bf:dd: b4:8f:95:25:cb:67:41:0d:27:8d:13:aa:8a:be:e8:de:10:3e: b0:eb:ff:9f:42:65:1f:0d:bc:78:91:f4:04:63:36:93:ce:85: 4a:9d:9a:41:76:bf:ba:8c:9a:e6:40:b8:82:41:7f:94:4e:03: c9:3d:5d:0a:f5:4c:23:ad:84:64:9a:17:90:ff:1d:3d:a5:36: c5:6d:fa:77:00:5b:22:f4:e2:7c:ac:d5:34:52:b5:53:8a:6d: 06:46:e1:95:68:69:fc:ac:94:a0:8e:29:9f:04:ff:83:c3:8e: dd:ef:59:67:c9:e4:b3:f9:f7:9c:3f:7a:f6:cd:e6:ed:73:4c: 98:ff:81:de:f4:a4:7e:8d:05:cb:97:b2:0b:2b:55:36:96:e3: 05:1c:66:ed:b5:a0:10:e9:6b:66:92:80:6c:22:49:9e:43:75: 26:38:f8:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0LwWaOQmR6n+l42gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQwMjNmNzUtNTFlMS00ZmViLTgyNTctNGEwZTRlMWRh ZmE5MB4XDTI2MDMwMzEzMDUwOVoXDTI2MDYwMTEyMDUwOVowLzEtMCsGA1UEAxMk ZjY1MmRmZWYtYmI1Ny00NzliLTkxZGUtYTdmOWExZTFkNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAc+W9j4gCgHjgQZo8okGL1U+JkxDIlGVPZE TGU3Kcahx9YumLkRWAzqoACW9ZOfHTsESpPDfXFQmDYztNPf1c9YgnG+PdGF3WpI japv/inWnHi+/1fHJN8Tq0D+/IgG/2OGzpTWdZwA/pSp1SkcIm+x7oBJ/0/HVIlC pMi6XUg14ZsBB0K56TpkCbAgdO79vS1XeIKcmeLXU9n6No2nemKcnIC6meMFYIO6 OjHrvsoYt7oHxUvlXim5aH/aL99EoqrWkKMKKsCz9mX3Ac232wXVMgNP3gOdbruj KU3RuAjpPQJfZUqvnLs4rbn67FPh9/R6LEMC9QJO9Wy0WpJ6fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLiKF/QeX9D4UJoj3Qq9wY8D3foMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNDAy M2Y3NS01MWUxLTRmZWItODI1Ny00YTBlNGUxZGFmYTkvMWVjM2E2NDctNjhiOC0z ZTU1LTkxNjAtMDllNTgyZTViMGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzQwMjNmNzUtNTFlMS00ZmViLTgy NTctNGEwZTRlMWRhZmE5LzM0MDIzZjc1LTUxZTEtNGZlYi04MjU3LTRhMGU0ZTFk YWZhOS5jcmwwHwYDVR0jBBgwFoAUMQF+BSNV2wBlNoFcjXPlcD/o/rgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zNDAyM2Y3NS01MWUxLTRmZWItODI1Ny00YTBl NGUxZGFmYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0u/rnnz5o/6uD7FOlkNVSRxTmaMje92C3sL/vujg8da1safVj481/X FN9xPGFVvQgi08fQCYd6a3kq5DFU+ZIJp2Nm3POepjN1/fK93T6uEWv77DW1O26/ 3bSPlSXLZ0ENJ40Tqoq+6N4QPrDr/59CZR8NvHiR9ARjNpPOhUqdmkF2v7qMmuZA uIJBf5ROA8k9XQr1TCOthGSaF5D/HT2lNsVt+ncAWyL04nys1TRStVOKbQZG4ZVo afyslKCOKZ8E/4PDjt3vWWfJ5LP595w/evbN5u1zTJj/gd70pH6NBcuXsgsrVTaW 4wUcZu21oBDpa2aSgGwiSZ5DdSY4+KM= -----END CERTIFICATE-----Generated at Wed Mar 4 04:56:31 2026 by rpki-client