$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/43dfe8dc-5e47-3d0e-b267-46fd61a19331.roa File: 43dfe8dc-5e47-3d0e-b267-46fd61a19331.roa (raw, json) Hash identifier: b1M0BONEsjSdzMN3F+1g7O9UGxVSap4DDKAoQRJZtdo= Subject key identifier: 92:8A:1C:57:57:48:DD:AF:76:06:6C:E7:48:86:EC:BC:C5:AE:3F:A5 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584DF4DB9967C0BA495F273F8C00 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/43dfe8dc-5e47-3d0e-b267-46fd61a19331.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 6079 IP address blocks: 142.147.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:99:67:c0:ba:49:5f:27:3f:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=9bad1cce-5d9a-4d33-9890-2ff95762d987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7a:64:c0:02:a1:10:c8:64:02:2c:1c:a8:69: 6c:9c:a4:98:f1:f2:9a:06:4d:76:f2:0a:49:56:98: d9:b8:ef:ba:05:3f:42:b8:22:40:5e:96:aa:18:cb: e3:ce:e3:a0:7b:5c:71:5d:a2:6d:a2:d5:1d:87:43: 38:31:70:bc:9b:10:77:4a:e4:65:c2:80:dc:80:76: 32:eb:0d:60:18:7d:bd:19:89:e0:c3:e1:93:b9:94: c7:03:15:bf:d4:c2:47:4d:4c:5c:1f:a0:60:b3:0b: 60:12:87:e9:c1:c1:ce:42:1f:10:3c:41:53:8b:50: 57:69:3d:a9:f1:91:cb:04:16:8e:db:ba:06:ec:36: 04:0f:3b:bd:f9:73:ca:ac:f1:ad:22:dc:8b:77:2b: 2f:f9:9b:d5:13:30:2a:59:9b:29:dc:62:75:48:81: 17:96:f2:65:64:eb:7c:58:3d:3a:37:a2:97:8c:2b: 35:66:b5:d2:69:0e:c9:b7:11:21:36:8a:b8:30:2f: 3b:cd:28:df:fe:23:d2:5b:14:23:4d:65:87:c6:af: fa:3f:22:7e:a7:41:70:13:10:f0:f0:01:bf:4e:83: 35:05:6a:53:2f:e7:63:89:a0:11:99:36:ac:4f:5f: 8a:6d:fd:21:16:a8:3b:82:64:11:42:8a:2e:bd:2b: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8A:1C:57:57:48:DD:AF:76:06:6C:E7:48:86:EC:BC:C5:AE:3F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/43dfe8dc-5e47-3d0e-b267-46fd61a19331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 142.147.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:63:a5:7a:74:00:90:f9:88:3a:15:15:be:54:35:4b:41:2e: 50:5b:bb:41:89:2c:50:c6:2e:92:0c:97:a3:3e:c9:7c:4f:f2: 50:df:d8:17:0a:1a:ed:48:63:92:da:09:a8:1f:ca:e6:27:62: b1:1c:fe:0d:61:01:8d:84:b4:cc:d7:3f:17:af:80:71:c1:6f: 7c:f2:3c:8c:13:fb:f3:36:ad:8b:9a:48:f6:6e:80:3d:19:53: b9:df:56:32:2a:e1:93:14:66:38:cb:17:20:2e:23:77:64:21: 2a:60:99:9c:96:45:7d:76:93:8d:b2:cb:a5:18:ce:06:c9:ae: fb:1f:73:6f:70:2b:09:5c:60:6c:78:eb:9c:a7:3f:8e:27:05: 9c:e4:f0:4a:63:de:a7:cb:2c:db:ab:ef:12:a4:07:35:41:0d: 70:19:be:4d:a4:df:ba:94:b2:be:79:86:85:f1:8c:59:e6:46: ae:0a:8c:cf:b5:6f:08:3c:ea:28:98:fc:17:b0:48:6d:0e:c4: c7:d6:93:66:70:0c:14:e0:6f:7c:9c:49:4f:3a:f1:27:c5:6b: 99:93:89:f5:64:57:81:95:76:74:37:58:66:a4:59:df:b4:78: 34:23:e7:07:a7:f4:21:62:c4:9c:9d:5b:40:97:53:c4:2b:e6: bb:32:a2:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3025lnwLpJXyc/jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk OWJhZDFjY2UtNWQ5YS00ZDMzLTk4OTAtMmZmOTU3NjJkOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43pkwAKhEMhkAiwcqGlsnKSY8fKaBk128gpJ VpjZuO+6BT9CuCJAXpaqGMvjzuOge1xxXaJtotUdh0M4MXC8mxB3SuRlwoDcgHYy 6w1gGH29GYngw+GTuZTHAxW/1MJHTUxcH6BgswtgEofpwcHOQh8QPEFTi1BXaT2p 8ZHLBBaO27oG7DYEDzu9+XPKrPGtItyLdysv+ZvVEzAqWZsp3GJ1SIEXlvJlZOt8 WD06N6KXjCs1ZrXSaQ7JtxEhNoq4MC87zSjf/iPSWxQjTWWHxq/6PyJ+p0FwExDw 8AG/ToM1BWpTL+djiaARmTasT1+Kbf0hFqg7gmQRQoouvSuEQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKKHFdXSN2vdgZs50iG7LzFrj+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvNDNkZmU4ZGMtNWU0Ny0z ZDBlLWIyNjctNDZmZDYxYTE5MzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjpOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJjpXp0AJD5iDoVFb5UNUtBLlBbu0GJLFDGLpIMl6M+yXxP8lDf2BcK Gu1IY5LaCagfyuYnYrEc/g1hAY2EtMzXPxevgHHBb3zyPIwT+/M2rYuaSPZugD0Z U7nfVjIq4ZMUZjjLFyAuI3dkISpgmZyWRX12k42yy6UYzgbJrvsfc29wKwlcYGx4 65ynP44nBZzk8Epj3qfLLNur7xKkBzVBDXAZvk2k37qUsr55hoXxjFnmRq4KjM+1 bwg86iiY/BewSG0OxMfWk2ZwDBTgb3ycSU868SfFa5mTifVkV4GVdnQ3WGakWd+0 eDQj5wen9CFixJydW0CXU8Qr5rsyorM= -----END CERTIFICATE-----Generated at Thu Jun 4 11:08:48 2026 by rpki-client