$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa File: 8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa (raw, json) Hash identifier: +nL5l3nGK3ILG07eWXwqTPt5yLWxIvRise9i3Kc7uFs= Subject key identifier: BD:5E:38:A1:75:84:FC:08:B2:99:24:ED:AF:8A:15:17:DF:04:49:06 Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F4328584D1F4A41454BDFAB373E76BC80 Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 400211 IP address blocks: 142.202.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:41:45:4b:df:ab:37:3e:76:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=9e4736c4-9b2b-4d0d-a187-977bdccfa62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:10:6a:f4:52:1c:f0:59:47:76:c5:0c:6e: cb:65:3c:ae:5f:e7:5c:e8:77:18:8f:61:aa:4a:69: 85:03:89:13:2d:9a:57:1d:4e:d2:51:98:07:cd:5d: eb:5d:3c:29:8d:26:49:27:ff:5d:f6:7e:cd:a5:d9: b4:e9:d6:47:ff:83:98:38:cf:a1:92:a0:3b:48:b1: 87:8b:49:9a:b4:2b:f6:b9:e9:f6:ee:3c:ac:44:f4: ce:db:18:c4:04:1a:2c:7a:1b:c0:80:b6:75:85:be: e3:8a:70:38:c9:e5:75:e3:fe:08:70:7f:98:e1:73: cf:8b:bb:a5:03:4d:fa:5e:8f:e0:b8:0a:91:f2:e5: 55:ea:57:2c:ba:ef:dc:07:15:07:cc:e6:a6:89:b7: d2:60:7f:37:7a:62:0d:1d:fe:f0:f7:a5:e0:eb:82: a6:b7:bc:62:18:ad:2c:ee:2c:7b:74:ab:05:da:72: f9:45:69:39:be:8a:7d:ed:31:46:39:23:d1:5e:5b: b3:f4:5d:de:03:e8:b9:4d:3a:d2:3b:a9:c4:80:5a: a4:08:2b:47:18:f8:ce:2c:7f:ad:4e:4c:5e:e7:68: 8f:6c:7d:f2:1b:0e:a9:7f:43:2d:82:e8:e9:32:86: 10:8e:e0:90:94:13:54:fa:6d:29:bb:1a:28:a3:b8: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5E:38:A1:75:84:FC:08:B2:99:24:ED:AF:8A:15:17:DF:04:49:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: 142.202.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:95:a1:db:03:e3:d7:40:92:69:74:89:3b:f8:da:3f:df:0b: 66:4a:95:6f:7f:9c:07:16:b7:7b:f6:5f:29:11:50:c5:dd:5c: e1:dd:28:29:64:55:e3:5c:68:02:3a:ce:53:bf:2f:00:c7:20: b7:4f:87:31:e4:bc:d1:ec:bf:d5:44:3e:92:c9:ab:ca:51:2f: 9d:0d:ba:03:2f:bb:79:f1:f2:1f:b7:fa:cf:98:56:51:8d:8e: 5e:c3:bd:1f:a1:8b:27:74:6f:42:e7:5b:f7:2a:2a:89:77:f5: 5e:d8:f8:9e:66:4b:05:58:f2:20:73:7e:79:84:e3:ac:5a:2c: 24:84:15:7f:38:ca:65:84:a2:09:03:d4:45:9c:34:50:5e:74: c8:b2:38:43:77:0a:1a:2d:60:17:5f:c3:08:36:e0:b3:90:3f: ba:8e:0e:a9:72:5d:e0:c4:34:62:5e:45:56:6f:d9:d3:61:1a: 42:ff:c6:20:3e:90:58:17:d7:98:25:a0:8b:8c:2e:57:76:ad: d6:71:0b:7a:d7:6f:98:d6:61:ff:2b:1c:90:3a:62:4b:f1:15: ca:95:b8:47:b3:7f:03:e1:0b:3c:85:a6:a8:b1:3a:4a:e2:fe: 30:ba:61:a5:67:80:bb:3a:89:1b:6c:9e:03:d2:0c:7c:56:f2: 4d:5f:c8:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkFFS9+rNz52vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OWU0NzM2YzQtOWIyYi00ZDBkLWExODctOTc3YmRjY2ZhNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhUQavRSHPBZR3bFDG7LZTyuX+dc6HcYj2Gq SmmFA4kTLZpXHU7SUZgHzV3rXTwpjSZJJ/9d9n7Npdm06dZH/4OYOM+hkqA7SLGH i0matCv2uen27jysRPTO2xjEBBosehvAgLZ1hb7jinA4yeV14/4IcH+Y4XPPi7ul A036Xo/guAqR8uVV6lcsuu/cBxUHzOamibfSYH83emINHf7w96Xg64Kmt7xiGK0s 7ix7dKsF2nL5RWk5vop97TFGOSPRXluz9F3eA+i5TTrSO6nEgFqkCCtHGPjOLH+t Tkxe52iPbH3yGw6pf0MtgujpMoYQjuCQlBNU+m0puxooo7i8rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1eOKF1hPwIspkk7a+KFRffBEkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvOGM3ZTI3ZDMtYTM4NS0z ZDI2LTlkYmYtMGE4M2RjNjk1ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsrrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOVodsD49dAkml0iTv42j/fC2ZKlW9/nAcWt3v2XykRUMXdXOHdKClk VeNcaAI6zlO/LwDHILdPhzHkvNHsv9VEPpLJq8pRL50NugMvu3nx8h+3+s+YVlGN jl7DvR+hiyd0b0LnW/cqKol39V7Y+J5mSwVY8iBzfnmE46xaLCSEFX84ymWEogkD 1EWcNFBedMiyOEN3ChotYBdfwwg24LOQP7qODqlyXeDENGJeRVZv2dNhGkL/xiA+ kFgX15gloIuMLld2rdZxC3rXb5jWYf8rHJA6YkvxFcqVuEezfwPhCzyFpqixOkri /jC6YaVngLs6iRtsngPSDHxW8k1fyIE= -----END CERTIFICATE-----Generated at Mon Mar 23 15:50:39 2026 by rpki-client