$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/4708b10c-3648-3373-9acf-3645bce5eb34.roa File: 4708b10c-3648-3373-9acf-3645bce5eb34.roa (raw, json) Hash identifier: QuSwx2T7acnxGRzkjLDBdY08wak4lCcjgO/BOUhgJZ8= Subject key identifier: CB:75:1F:FC:B8:84:F9:01:37:1B:67:DE:D1:6B:4A:DF:2A:F6:50:A4 Certificate issuer: /CN=a6cb961c-bbec-4bf2-94ad-a034b3fd3cba Certificate serial: 010D0C9F4328584D667A57F69D1030E0BA3BD600 Authority key identifier: E0:84:FF:89:3A:B6:40:3A:5C:30:5B:96:93:7C:3A:A7:E3:1E:0B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/4708b10c-3648-3373-9acf-3645bce5eb34.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 40156 IP address blocks: 142.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:57:f6:9d:10:30:e0:ba:3b:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6cb961c-bbec-4bf2-94ad-a034b3fd3cba Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=50d1957b-8445-4124-aa50-be1f8bbef247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9c:1e:46:d9:b4:de:c3:9f:0e:5c:26:a1:f7: 2d:06:c9:5c:62:fb:d7:b1:6a:74:b8:7f:c5:11:76: 8e:a9:4f:ee:35:07:8b:fd:bc:e4:da:a8:af:dc:cd: a7:bc:0f:55:65:38:90:05:2d:48:48:2c:6b:82:89: 12:bf:46:a1:5b:09:75:48:ab:64:18:85:bb:fd:83: 28:14:e2:c9:ae:2f:82:b7:22:1e:ec:ee:25:8f:41: 42:8d:29:0d:f3:4a:3e:6b:23:65:53:ce:2f:e2:92: 2d:e3:53:3e:ab:d7:8e:fb:85:53:97:b8:02:c6:6b: cc:ae:bc:ed:ce:35:aa:c7:9e:df:2f:e9:56:02:9d: f9:74:6d:6c:f4:1b:04:0d:06:8a:f3:6b:09:e3:e5: 17:47:9b:21:cb:e5:97:47:23:ac:5f:f7:82:7e:de: dc:f8:f6:72:07:a7:35:82:50:f0:ed:89:65:be:57: 2d:6b:5e:d5:37:1d:f0:92:d0:c8:7f:26:f0:7f:94: 81:33:1c:41:7f:79:cf:17:0a:fb:6e:f5:0a:b2:49: 8a:6d:6e:8d:e5:8a:1a:e7:9b:6f:0e:5f:19:bb:15: 3d:1e:36:5b:db:6c:94:32:c8:7e:50:6b:60:07:62: da:8f:31:f7:ef:6f:62:60:aa:58:94:77:45:a6:ab: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:75:1F:FC:B8:84:F9:01:37:1B:67:DE:D1:6B:4A:DF:2A:F6:50:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/4708b10c-3648-3373-9acf-3645bce5eb34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.crl X509v3 Authority Key Identifier: keyid:E0:84:FF:89:3A:B6:40:3A:5C:30:5B:96:93:7C:3A:A7:E3:1E:0B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.cer sbgp-ipAddrBlock: critical IPv4: 142.249.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:73:1c:dd:5c:0f:ea:56:9b:d7:5f:16:94:de:73:0b:d0:71: 90:b6:a2:50:bb:84:f6:d7:94:f7:21:88:f7:59:90:e6:1d:a2: 1e:45:97:de:19:a0:ab:bd:f3:93:80:98:4c:d3:2c:b0:14:fb: 98:bd:79:e3:62:e2:01:30:43:72:aa:38:24:02:a4:c4:17:9d: d5:08:17:ee:c8:cf:5a:fc:dd:d2:e3:4f:6b:b9:66:bc:36:f9: 6e:5c:d5:fb:f7:f5:1c:f2:7b:07:ba:b7:05:3c:ac:68:53:89: b2:b6:36:d5:15:2e:52:8b:b0:a5:cc:90:36:72:46:14:e7:43: 78:53:15:0b:c7:5b:63:17:dc:ea:69:4b:a1:b0:cd:5a:a3:1b: d0:39:c3:5b:bf:8d:cb:5a:fe:ad:d7:12:27:20:1f:05:e4:2c: 29:7f:24:65:28:31:3b:7c:51:14:ad:b8:14:e6:12:d2:7b:1b: dd:47:17:e7:93:30:08:fe:49:93:47:07:de:43:52:e1:e3:64: 8e:94:33:9c:59:21:11:4e:d6:8d:85:9b:05:7c:96:c7:d4:ee: a4:e9:89:cb:4f:5a:62:fa:2a:f0:90:16:61:2e:10:c9:21:19: 4b:26:3e:55:b4:c9:fc:59:b1:64:4b:10:4d:c4:a6:c6:5a:fa: a4:c0:db:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melf2nRAw4Lo71gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZjYjk2MWMtYmJlYy00YmYyLTk0YWQtYTAzNGIzZmQz Y2JhMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk NTBkMTk1N2ItODQ0NS00MTI0LWFhNTAtYmUxZjhiYmVmMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZweRtm03sOfDlwmofctBslcYvvXsWp0uH/F EXaOqU/uNQeL/bzk2qiv3M2nvA9VZTiQBS1ISCxrgokSv0ahWwl1SKtkGIW7/YMo FOLJri+CtyIe7O4lj0FCjSkN80o+ayNlU84v4pIt41M+q9eO+4VTl7gCxmvMrrzt zjWqx57fL+lWAp35dG1s9BsEDQaK82sJ4+UXR5shy+WXRyOsX/eCft7c+PZyB6c1 glDw7Yllvlcta17VNx3wktDIfybwf5SBMxxBf3nPFwr7bvUKskmKbW6N5Yoa55tv Dl8ZuxU9HjZb22yUMsh+UGtgB2LajzH3729iYKpYlHdFpqv65QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMt1H/y4hPkBNxtn3tFrSt8q9lCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNmNi OTYxYy1iYmVjLTRiZjItOTRhZC1hMDM0YjNmZDNjYmEvNDcwOGIxMGMtMzY0OC0z MzczLTlhY2YtMzY0NWJjZTVlYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTZjYjk2MWMtYmJlYy00YmYyLTk0 YWQtYTAzNGIzZmQzY2JhL2E2Y2I5NjFjLWJiZWMtNGJmMi05NGFkLWEwMzRiM2Zk M2NiYS5jcmwwHwYDVR0jBBgwFoAU4IT/iTq2QDpcMFuWk3w6p+MeC4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNmNiOTYxYy1iYmVjLTRiZjItOTRhZC1hMDM0 YjNmZDNjYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNzHN1cD+pWm9dfFpTecwvQcZC2olC7hPbXlPchiPdZkOYdoh5Fl94Z oKu985OAmEzTLLAU+5i9eeNi4gEwQ3KqOCQCpMQXndUIF+7Iz1r83dLjT2u5Zrw2 +W5c1fv39Rzyewe6twU8rGhTibK2NtUVLlKLsKXMkDZyRhTnQ3hTFQvHW2MX3Opp S6GwzVqjG9A5w1u/jcta/q3XEicgHwXkLCl/JGUoMTt8URStuBTmEtJ7G91HF+eT MAj+SZNHB95DUuHjZI6UM5xZIRFO1o2FmwV8lsfU7qTpictPWmL6KvCQFmEuEMkh GUsmPlW0yfxZsWRLEE3EpsZa+qTA2xY= -----END CERTIFICATE-----Generated at Mon Apr 13 12:03:35 2026 by rpki-client