$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa File: 16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa (raw, json) Hash identifier: FjfAEQDP4Jkt5Hyf/EI2uMYnhvhTmfHqfxE40Fys/w8= Subject key identifier: B3:DA:B4:53:BB:45:1D:5E:63:F0:C3:C8:F2:EA:B1:83:52:55:8F:06 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584D2BDA1D898932AFC8AE36EF40 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 271 IP address blocks: 142.231.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:1d:89:89:32:af:c8:ae:36:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=2976cb05-3962-4868-8b7b-2a7aed96efd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:eb:4d:1a:f7:fc:a4:8a:31:cf:d3:43:cc: 98:9d:f8:74:7c:fd:78:43:81:c7:de:56:f4:de:2f: a0:82:44:7b:57:23:bd:d1:09:3f:77:64:62:79:41: 10:c3:fc:3f:f8:7b:ec:bf:f6:da:89:73:0c:22:5b: f0:19:a9:38:ea:da:ba:cc:d4:40:ce:04:3e:e6:14: 07:ca:7c:7b:da:36:96:29:21:5e:91:e0:b0:aa:fd: b9:4d:62:d7:11:f7:52:29:c9:d4:2b:49:27:54:5e: 2c:9a:7c:97:c5:06:2a:bc:8e:72:a7:d9:cc:87:73: e8:ff:da:e5:2d:03:b2:a2:71:0a:a1:e4:fe:8a:09: b0:86:b1:08:67:c4:9d:98:52:cc:11:e0:fa:d6:3c: 71:e5:9c:69:92:87:b8:3a:24:4e:7c:41:b5:ac:d0: 85:78:38:02:78:60:82:40:77:1a:3f:a1:fb:08:d3: a0:3c:59:08:da:d7:b6:5c:02:5d:d0:92:2c:7d:5a: 53:b7:f7:98:60:11:eb:aa:8f:d9:1b:d2:87:9a:e6: 44:ca:87:ae:25:63:95:ef:73:25:a8:03:47:96:ef: 59:69:4c:36:81:d4:53:d3:ad:5c:70:31:44:56:54: 8d:90:a7:ef:28:e3:5d:33:f6:83:34:dc:47:4c:e7: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:B4:53:BB:45:1D:5E:63:F0:C3:C8:F2:EA:B1:83:52:55:8F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 142.231.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0b:ec:82:d6:94:c0:a1:2e:4d:63:39:5a:81:63:b2:f6:32: f9:b3:a9:08:82:9e:11:e0:95:9b:fd:0a:e2:f3:c9:f7:7b:2c: 12:86:3e:0b:29:e7:37:a5:28:d2:07:f3:30:e5:a2:39:11:66: 55:dc:be:f3:fd:66:be:97:33:7c:41:79:d7:b6:e4:0d:17:bc: d9:0b:2a:3d:b6:4e:85:14:53:1c:31:ba:77:d9:70:6e:e7:0c: fc:21:f6:55:9b:f8:f7:7d:c7:e9:e5:b5:a5:5a:8a:dc:db:5a: 5c:3b:b1:85:61:dc:d3:77:aa:96:0f:4d:da:2e:7f:e5:e9:a1: f5:7c:d9:46:e5:ca:3e:3d:1d:31:f4:d1:6d:e8:71:00:fa:4c: 75:db:de:d2:57:0d:f9:08:7b:b7:03:21:da:9b:d6:ae:7b:2e: 91:77:d3:e3:dc:7f:8a:fa:a2:12:56:c9:2b:41:86:6c:47:eb: 67:6d:20:22:08:71:d5:48:ce:9d:2d:49:86:e6:db:f0:97:d2: 8c:ea:96:38:12:8a:a3:f8:5a:f3:57:cf:68:93:b1:90:34:c5: 34:62:94:c8:07:24:71:1c:ee:2b:b6:a9:20:67:d1:ff:b7:92: 60:aa:b2:65:88:04:d1:68:e8:51:dd:71:9e:e7:9e:60:03:95: 9f:d0:02:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2h2JiTKvyK4270AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk Mjk3NmNiMDUtMzk2Mi00ODY4LThiN2ItMmE3YWVkOTZlZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL3rTRr3/KSKMc/TQ8yYnfh0fP14Q4HH3lb0 3i+ggkR7VyO90Qk/d2RieUEQw/w/+Hvsv/baiXMMIlvwGak46tq6zNRAzgQ+5hQH ynx72jaWKSFekeCwqv25TWLXEfdSKcnUK0knVF4smnyXxQYqvI5yp9nMh3Po/9rl LQOyonEKoeT+igmwhrEIZ8SdmFLMEeD61jxx5Zxpkoe4OiROfEG1rNCFeDgCeGCC QHcaP6H7CNOgPFkI2te2XAJd0JIsfVpTt/eYYBHrqo/ZG9KHmuZEyoeuJWOV73Ml qANHlu9ZaUw2gdRT061ccDFEVlSNkKfvKONdM/aDNNxHTOcIIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPatFO7RR1eY/DDyPLqsYNSVY8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMTYxNTBhNDItMTgyNi0z ZjViLTlmMmItMWRkOTAxNmVhY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjudtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQL7ILWlMChLk1jOVqBY7L2MvmzqQiCnhHglZv9CuLzyfd7LBKGPgsp 5zelKNIH8zDlojkRZlXcvvP9Zr6XM3xBede25A0XvNkLKj22ToUUUxwxunfZcG7n DPwh9lWb+Pd9x+nltaVaitzbWlw7sYVh3NN3qpYPTdouf+XpofV82Ublyj49HTH0 0W3ocQD6THXb3tJXDfkIe7cDIdqb1q57LpF30+Pcf4r6ohJWyStBhmxH62dtICII cdVIzp0tSYbm2/CX0ozqljgSiqP4WvNXz2iTsZA0xTRilMgHJHEc7iu2qSBn0f+3 kmCqsmWIBNFo6FHdcZ7nnmADlZ/QAlE= -----END CERTIFICATE-----Generated at Mon Mar 16 12:19:11 2026 by rpki-client