$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8e4d208c-373b-410f-87be-547efd3233ae/ac304d28-4162-3e96-8a01-1f27d38b94ff.roa File: ac304d28-4162-3e96-8a01-1f27d38b94ff.roa (raw, json) Hash identifier: 2XUF+rZuA0LmRkWhuOO8kxuf5IPpPbOrBAsypNbcHoM= Subject key identifier: 3F:65:BC:67:F9:08:A8:EA:C2:80:CB:33:3E:3A:3E:C7:1B:B7:20:08 Certificate issuer: /CN=8e4d208c-373b-410f-87be-547efd3233ae Certificate serial: 010D0C9F4328584D0BDDBDF4368EF58D69DBF550 Authority key identifier: 51:F2:D1:0F:3A:E9:A1:DA:25:AE:6D:8A:AD:08:BD:10:24:13:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8e4d208c-373b-410f-87be-547efd3233ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8e4d208c-373b-410f-87be-547efd3233ae/ac304d28-4162-3e96-8a01-1f27d38b94ff.roa Signing time: Tue 03 Mar 2026 14:02:15 +0000 ROA not before: Tue 03 Mar 2026 14:02:15 +0000 ROA not after: Mon 01 Jun 2026 13:02:15 +0000 asID: 393427 IP address blocks: 142.249.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8e4d208c-373b-410f-87be-547efd3233ae/8e4d208c-373b-410f-87be-547efd3233ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8e4d208c-373b-410f-87be-547efd3233ae/8e4d208c-373b-410f-87be-547efd3233ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8e4d208c-373b-410f-87be-547efd3233ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:bd:f4:36:8e:f5:8d:69:db:f5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e4d208c-373b-410f-87be-547efd3233ae Validity Not Before: Mar 3 14:02:15 2026 GMT Not After : Jun 1 13:02:15 2026 GMT Subject: CN=c815cadd-7731-47cc-966a-c90f81a0144c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:84:7b:dd:7b:cc:bd:3d:66:94:56:ad:e3: 07:20:74:18:62:36:d7:13:04:e5:9b:3f:cf:a1:90: dc:6e:c1:13:47:68:ec:f1:11:d4:b4:78:00:c8:bd: 7e:e1:58:de:4c:4a:d0:a5:be:8a:09:e8:1f:e4:ae: 87:79:f7:73:1d:c5:b2:11:01:44:34:1a:e5:82:0f: e8:ea:21:2c:b1:fc:ac:12:d8:86:a4:64:36:37:60: 15:1f:d4:6a:d8:6f:08:57:d1:01:e4:ff:61:e1:4d: cc:2e:a2:c3:de:df:7f:67:66:da:46:0e:f5:ff:ca: 58:6d:96:21:e7:53:b4:2f:83:b8:e5:93:3b:ad:5c: 47:42:8f:58:5f:dd:b7:45:36:10:5d:fb:f3:d5:ea: 41:29:ee:11:d9:a4:3f:dc:20:3a:d6:da:a1:1d:1f: 4d:04:b5:0b:c7:59:ed:13:5d:d7:a9:98:03:14:88: 38:68:d9:bd:f5:30:48:19:c4:fd:e5:91:2d:d9:20: af:b4:c2:7d:e2:cb:29:39:95:19:71:a3:a4:34:05: 20:39:82:35:f5:c2:18:2a:f3:98:bc:1e:1f:21:0e: 9a:fa:84:6f:f0:0e:32:83:17:c5:e4:0c:19:a7:53: 29:32:17:e9:82:5d:6f:69:b7:78:5f:7f:7e:51:e5: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:65:BC:67:F9:08:A8:EA:C2:80:CB:33:3E:3A:3E:C7:1B:B7:20:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8e4d208c-373b-410f-87be-547efd3233ae/ac304d28-4162-3e96-8a01-1f27d38b94ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8e4d208c-373b-410f-87be-547efd3233ae/8e4d208c-373b-410f-87be-547efd3233ae.crl X509v3 Authority Key Identifier: keyid:51:F2:D1:0F:3A:E9:A1:DA:25:AE:6D:8A:AD:08:BD:10:24:13:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8e4d208c-373b-410f-87be-547efd3233ae.cer sbgp-ipAddrBlock: critical IPv4: 142.249.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:50:74:5f:a4:51:13:a7:17:81:18:72:a9:f2:93:6a:6f:bc: f5:02:2d:e2:34:67:f0:27:12:d5:df:fb:22:0b:ad:50:d7:14: c4:33:64:b8:dc:b5:45:51:69:d9:6c:c6:31:20:ef:68:b9:ef: d4:e1:02:54:09:51:bf:a5:ab:1a:25:98:a0:0d:56:2e:a5:2d: 15:9f:c9:3c:bb:5f:e2:f0:4c:3e:c6:38:ad:96:f8:9c:d4:db: 88:be:50:1b:05:a7:af:2c:b1:83:b1:fc:9c:55:4e:ec:b4:dd: 0d:7d:47:cf:9c:4f:2b:5f:b4:b7:25:d2:bc:21:2e:b6:74:5c: 27:b1:72:41:b5:39:df:2d:d1:54:2e:17:25:2b:7c:80:cd:19: 25:94:ac:54:72:44:db:80:41:9a:6e:13:a6:88:46:72:f1:b6: 3d:97:d8:3a:68:b9:5a:c1:db:c2:3b:13:f7:d2:86:93:fd:38: 4d:20:94:0a:b6:cb:8d:cc:27:ec:63:d8:39:87:c6:37:36:c0: 8d:f8:f5:81:56:e3:66:2e:1c:96:a0:17:52:0a:33:27:7e:06: ce:16:eb:88:a2:1b:01:e0:f6:8d:6b:e2:01:9a:03:09:2d:d4: bc:35:1b:83:57:59:83:7e:d9:49:dd:6b:a0:1d:57:eb:b6:6d: 79:ad:db:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3b30No71jWnb9VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0ZDIwOGMtMzczYi00MTBmLTg3YmUtNTQ3ZWZkMzIz M2FlMB4XDTI2MDMwMzE0MDIxNVoXDTI2MDYwMTEzMDIxNVowLzEtMCsGA1UEAxMk YzgxNWNhZGQtNzczMS00N2NjLTk2NmEtYzkwZjgxYTAxNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPiEe917zL09ZpRWreMHIHQYYjbXEwTlmz/P oZDcbsETR2js8RHUtHgAyL1+4VjeTErQpb6KCegf5K6HefdzHcWyEQFENBrlgg/o 6iEssfysEtiGpGQ2N2AVH9Rq2G8IV9EB5P9h4U3MLqLD3t9/Z2baRg71/8pYbZYh 51O0L4O45ZM7rVxHQo9YX923RTYQXfvz1epBKe4R2aQ/3CA61tqhHR9NBLULx1nt E13XqZgDFIg4aNm99TBIGcT95ZEt2SCvtMJ94sspOZUZcaOkNAUgOYI19cIYKvOY vB4fIQ6a+oRv8A4ygxfF5AwZp1MpMhfpgl1vabd4X39+UeWBIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9lvGf5CKjqwoDLMz46PscbtyAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84ZTRk MjA4Yy0zNzNiLTQxMGYtODdiZS01NDdlZmQzMjMzYWUvYWMzMDRkMjgtNDE2Mi0z ZTk2LThhMDEtMWYyN2QzOGI5NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGU0ZDIwOGMtMzczYi00MTBmLTg3 YmUtNTQ3ZWZkMzIzM2FlLzhlNGQyMDhjLTM3M2ItNDEwZi04N2JlLTU0N2VmZDMy MzNhZS5jcmwwHwYDVR0jBBgwFoAUUfLRDzrpodolrm2KrQi9ECQTRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84ZTRkMjA4Yy0zNzNiLTQxMGYtODdiZS01NDdl ZmQzMjMzYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNQdF+kUROnF4EYcqnyk2pvvPUCLeI0Z/AnEtXf+yILrVDXFMQzZLjc tUVRadlsxjEg72i579ThAlQJUb+lqxolmKANVi6lLRWfyTy7X+LwTD7GOK2W+JzU 24i+UBsFp68ssYOx/JxVTuy03Q19R8+cTytftLcl0rwhLrZ0XCexckG1Od8t0VQu FyUrfIDNGSWUrFRyRNuAQZpuE6aIRnLxtj2X2DpouVrB28I7E/fShpP9OE0glAq2 y43MJ+xj2DmHxjc2wI349YFW42YuHJagF1IKMyd+Bs4W64iiGwHg9o1r4gGaAwkt 1Lw1G4NXWYN+2Unda6AdV+u2bXmt20M= -----END CERTIFICATE-----Generated at Tue Mar 24 04:35:34 2026 by rpki-client