$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa File: 3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa (raw, json) Hash identifier: zLiki7KzbwVGrS9XAOsVAF05CfGIXuwfYL4Dw8UoxqI= Subject key identifier: F6:51:AA:B9:F3:62:CD:57:A6:D7:33:4B:E7:2E:0B:A5:DD:FD:FD:5F Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584DFBD5DCED8730FE90E1092100 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 203020 IP address blocks: 142.147.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:dc:ed:87:30:fe:90:e1:09:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=848fefe7-256d-4577-b95d-a602aa73895e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d0:81:74:90:48:79:ff:c6:a3:2a:f6:f2:74: 91:f6:45:dc:28:cb:41:68:73:f6:86:f1:98:41:bc: d5:77:4f:d6:21:ae:6a:95:86:d1:17:27:56:9d:8e: a8:03:eb:62:85:de:ff:93:db:2c:b0:a7:9b:19:c7: 3b:0e:83:8c:22:c0:ff:e9:00:16:99:b8:0c:6c:d8: d4:8f:58:c1:7e:2e:ae:91:6b:55:d2:d9:76:05:fa: f9:87:96:b6:5c:56:f2:1b:88:19:bf:0b:fe:cd:e9: ec:ab:6b:ce:05:ac:c4:b4:36:74:1e:f7:b8:1d:44: b7:84:6e:85:ed:67:fe:2b:3f:46:c0:3c:64:3b:f2: 08:f4:52:a6:4f:41:fd:65:ab:51:13:be:bf:82:96: f9:45:9f:b6:48:09:f4:84:ed:43:71:4d:c7:79:74: 3d:f9:43:3e:ce:46:e4:cb:81:75:69:fa:07:e5:2b: 36:ce:73:fd:6b:31:c5:f9:e2:f7:84:29:e5:8d:0b: d4:d8:6c:d2:9d:d0:92:d1:43:3b:9a:b6:61:7d:ea: 55:82:83:1e:02:fe:d2:fa:30:c3:59:21:62:2d:75: ce:8b:94:02:cb:e4:e4:5f:58:73:51:bc:a3:dd:58: 7c:e6:4b:7f:9a:43:e4:8f:04:63:2f:aa:92:42:9f: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:51:AA:B9:F3:62:CD:57:A6:D7:33:4B:E7:2E:0B:A5:DD:FD:FD:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 142.147.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ae:1c:3e:02:21:e1:66:3a:95:47:25:c0:3d:30:c1:cc:91: 40:6e:ca:ed:73:8c:f9:d7:ab:88:76:db:1e:45:d9:f0:4c:ba: 38:ba:b5:e1:7f:ed:3c:80:90:2c:b7:dd:0c:91:39:b3:4b:c6: 54:87:2b:24:5e:79:c3:ff:b2:d3:48:eb:37:bd:91:31:41:30: b6:a3:c4:69:71:39:2c:2f:2c:4f:0b:8e:33:9a:9e:4a:d6:1a: e5:3a:f7:15:68:2b:28:7e:25:2c:2f:af:c7:76:cd:4e:d8:fd: d9:1b:fd:77:00:62:9b:7b:52:99:0c:1e:e5:9e:85:b5:9a:cf: 50:38:20:76:6a:98:05:b5:45:68:64:2f:e9:77:ab:b4:82:47: 83:87:19:c4:02:d1:6b:56:f2:6b:13:71:59:ef:89:c9:e9:39: 0f:9e:75:d0:37:9a:2f:3a:5b:85:a2:33:28:22:6c:b5:75:b1: 94:26:af:40:e3:d0:8b:78:96:e4:2a:3a:53:46:b6:50:a4:ad: af:73:5e:10:bd:1d:96:b0:2e:81:11:7c:82:26:4c:29:20:4a: f7:41:31:57:76:5c:a8:66:f8:bb:c0:21:4a:25:f3:7b:98:a4: 63:26:e1:6a:6f:79:ca:0f:57:99:4e:98:36:27:78:68:47:15: 3a:eb:11:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371dzthzD+kOEJIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk ODQ4ZmVmZTctMjU2ZC00NTc3LWI5NWQtYTYwMmFhNzM4OTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19CBdJBIef/Goyr28nSR9kXcKMtBaHP2hvGY QbzVd0/WIa5qlYbRFydWnY6oA+tihd7/k9sssKebGcc7DoOMIsD/6QAWmbgMbNjU j1jBfi6ukWtV0tl2Bfr5h5a2XFbyG4gZvwv+zensq2vOBazEtDZ0Hve4HUS3hG6F 7Wf+Kz9GwDxkO/II9FKmT0H9ZatRE76/gpb5RZ+2SAn0hO1DcU3HeXQ9+UM+zkbk y4F1afoH5Ss2znP9azHF+eL3hCnljQvU2GzSndCS0UM7mrZhfepVgoMeAv7S+jDD WSFiLXXOi5QCy+TkX1hzUbyj3Vh85kt/mkPkjwRjL6qSQp8oswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZRqrnzYs1XptczS+cuC6Xd/f1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvM2ZiMDM5OGQtOTZhMC0z ZTVhLWJiMjEtNmM4N2U1ZDI4NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjpOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJauHD4CIeFmOpVHJcA9MMHMkUBuyu1zjPnXq4h22x5F2fBMuji6teF/ 7TyAkCy33QyRObNLxlSHKyReecP/stNI6ze9kTFBMLajxGlxOSwvLE8LjjOankrW GuU69xVoKyh+JSwvr8d2zU7Y/dkb/XcAYpt7UpkMHuWehbWaz1A4IHZqmAW1RWhk L+l3q7SCR4OHGcQC0WtW8msTcVnvicnpOQ+eddA3mi86W4WiMygibLV1sZQmr0Dj 0It4luQqOlNGtlCkra9zXhC9HZawLoERfIImTCkgSvdBMVd2XKhm+LvAIUol83uY pGMm4WpvecoPV5lOmDYneGhHFTrrEXE= -----END CERTIFICATE-----Generated at Thu Jun 4 13:06:51 2026 by rpki-client