$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/b35b0921-1e78-3994-826e-db1aceee4813.roa File: b35b0921-1e78-3994-826e-db1aceee4813.roa (raw, json) Hash identifier: ckcRpjkiScDs82WkQSgiWyzOJdi5mUwhyz9/1NK7HCA= Subject key identifier: 78:2C:AC:62:06:34:FB:61:61:3F:35:AB:B5:05:88:C0:65:9A:33:71 Certificate issuer: /CN=81d86d00-f6e5-47a7-932c-048a6cc0c427 Certificate serial: 010D0C9F4328584E1A143EDAAE061EE11AFCD6C0 Authority key identifier: E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/b35b0921-1e78-3994-826e-db1aceee4813.roa Signing time: Mon 08 Jun 2026 09:00:12 +0000 ROA not before: Mon 08 Jun 2026 09:00:12 +0000 ROA not after: Sun 06 Sep 2026 09:00:12 +0000 asID: 400882 IP address blocks: 142.249.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:14:3e:da:ae:06:1e:e1:1a:fc:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81d86d00-f6e5-47a7-932c-048a6cc0c427 Validity Not Before: Jun 8 09:00:12 2026 GMT Not After : Sep 6 09:00:12 2026 GMT Subject: CN=535cc573-b5a1-4718-925f-84d621c5d77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ed:5e:f8:12:4a:32:70:39:0e:be:fd:ab:7b: e3:b3:40:26:b4:09:89:fb:a9:43:9f:3d:18:2a:57: 67:89:ff:81:05:45:61:7d:28:5c:ad:42:8a:ea:06: 14:fc:89:4d:7b:6e:04:c9:07:48:fd:9d:6f:61:d6: b9:59:26:f2:0f:5b:01:0d:98:97:04:d7:5c:19:f8: 1d:dd:ae:50:65:1a:c1:fc:bb:96:29:eb:35:e1:34: f9:11:6d:cb:b7:f8:9b:3a:6f:bd:8d:72:07:87:36: be:1b:fe:42:ac:95:a0:2a:54:9b:a2:f3:2d:65:fa: de:93:8d:45:2c:c2:83:fd:95:fa:f7:a9:7c:78:5a: c2:5a:c1:c8:ea:0c:c4:6d:ca:13:98:47:f2:af:14: 0e:50:f6:d3:33:3b:89:62:da:10:82:cb:df:7d:57: 14:ca:16:3e:4d:9c:18:7c:b7:8d:fd:d8:c6:3b:96: c4:f9:cd:a2:76:6f:a7:7d:4c:b9:89:c6:a1:98:60: e8:7e:f9:f0:8f:9f:b1:67:b6:7a:0f:8e:ae:d7:be: 8d:2b:32:78:0e:94:37:1e:3c:56:7e:cc:0f:cd:2a: 89:f0:2d:7c:0e:85:4b:e0:e5:1d:07:35:63:84:8b: 6b:9d:6b:e6:50:07:d8:05:0c:10:1c:55:c0:8a:fe: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2C:AC:62:06:34:FB:61:61:3F:35:AB:B5:05:88:C0:65:9A:33:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/b35b0921-1e78-3994-826e-db1aceee4813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl X509v3 Authority Key Identifier: keyid:E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer sbgp-ipAddrBlock: critical IPv4: 142.249.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:8c:85:7d:9d:39:6d:10:17:e7:2d:68:c6:f9:40:0b:2d:77: e0:70:f5:29:71:1d:b2:e2:80:19:b0:d6:24:94:ab:a9:b6:e2: 3d:df:70:77:73:b6:fe:5d:65:4c:4c:65:c8:91:37:24:33:cc: 94:9f:54:9f:7b:ad:d5:f9:f5:03:7c:32:85:d7:2e:23:5c:0a: bc:f9:98:e7:c4:7b:e2:74:13:37:81:da:72:db:46:8b:89:4e: 27:0d:bb:e1:46:d0:3e:0e:d0:fe:a7:d0:2e:54:56:0d:81:ed: 0e:fc:ff:68:d0:b3:53:66:c7:51:c1:ca:ea:0e:aa:c3:53:03: 47:0e:14:be:8c:b5:b9:fd:54:b7:9e:cf:c4:3d:1e:85:3a:bb: 34:b7:4b:e4:39:cd:12:75:ef:23:c6:89:40:36:2d:65:40:3b: 53:fa:fe:fc:7d:ef:bb:de:7c:89:6d:f9:5c:0c:07:e1:3a:45: f1:e4:54:3b:a1:39:d0:78:e1:91:1e:17:18:30:a8:65:0b:2b: 8a:84:f3:95:1a:dd:9f:c9:ab:74:c0:83:c6:09:87:1c:07:e6: 07:c2:18:1d:b6:d2:bd:ac:a2:11:8c:7f:5a:be:22:5e:07:fa: fb:dd:18:e9:15:0c:b9:64:8f:4f:94:7c:20:4d:ee:ad:93:f8: 2d:24:25:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4aFD7argYe4Rr81sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFkODZkMDAtZjZlNS00N2E3LTkzMmMtMDQ4YTZjYzBj NDI3MB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk NTM1Y2M1NzMtYjVhMS00NzE4LTkyNWYtODRkNjIxYzVkNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+u1e+BJKMnA5Dr79q3vjs0AmtAmJ+6lDnz0Y Kldnif+BBUVhfShcrUKK6gYU/IlNe24EyQdI/Z1vYda5WSbyD1sBDZiXBNdcGfgd 3a5QZRrB/LuWKes14TT5EW3Lt/ibOm+9jXIHhza+G/5CrJWgKlSbovMtZfrek41F LMKD/ZX696l8eFrCWsHI6gzEbcoTmEfyrxQOUPbTMzuJYtoQgsvffVcUyhY+TZwY fLeN/djGO5bE+c2idm+nfUy5icahmGDofvnwj5+xZ7Z6D46u176NKzJ4DpQ3HjxW fswPzSqJ8C18DoVL4OUdBzVjhItrnWvmUAfYBQwQHFXAiv6kHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgsrGIGNPthYT81q7UFiMBlmjNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWQ4 NmQwMC1mNmU1LTQ3YTctOTMyYy0wNDhhNmNjMGM0MjcvYjM1YjA5MjEtMWU3OC0z OTk0LTgyNmUtZGIxYWNlZWU0ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFkODZkMDAtZjZlNS00N2E3LTkz MmMtMDQ4YTZjYzBjNDI3LzgxZDg2ZDAwLWY2ZTUtNDdhNy05MzJjLTA0OGE2Y2Mw YzQyNy5jcmwwHwYDVR0jBBgwFoAU6edUqU0xhxQtXcuRSykkoYq7bvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MWQ4NmQwMC1mNmU1LTQ3YTctOTMyYy0wNDhh NmNjMGM0MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCMhX2dOW0QF+ctaMb5QAstd+Bw9SlxHbLigBmw1iSUq6m24j3fcHdz tv5dZUxMZciRNyQzzJSfVJ97rdX59QN8MoXXLiNcCrz5mOfEe+J0EzeB2nLbRouJ TicNu+FG0D4O0P6n0C5UVg2B7Q78/2jQs1Nmx1HByuoOqsNTA0cOFL6Mtbn9VLee z8Q9HoU6uzS3S+Q5zRJ17yPGiUA2LWVAO1P6/vx977vefIlt+VwMB+E6RfHkVDuh OdB44ZEeFxgwqGULK4qE85Ua3Z/Jq3TAg8YJhxwH5gfCGB220r2sohGMf1q+Il4H +vvdGOkVDLlkj0+UfCBN7q2T+C0kJQo= -----END CERTIFICATE-----Generated at Wed Jun 10 03:43:17 2026 by rpki-client