$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/f71ddcd1-bad1-3544-96ec-1a572beee366.roa File: f71ddcd1-bad1-3544-96ec-1a572beee366.roa (raw, json) Hash identifier: pIozsHDwuAGJp3qzGhrHFdjywV7NW9tRgmnUyA43hDc= Subject key identifier: 59:51:74:53:B7:1D:BE:CC:C8:33:98:32:4E:B6:1F:26:26:59:69:03 Certificate issuer: /CN=cff1a08e-9692-475a-9b04-916530111389 Certificate serial: 010D0C9F4328584DD625CCECBAEA157143704180 Authority key identifier: FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/f71ddcd1-bad1-3544-96ec-1a572beee366.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 4540 IP address blocks: 142.249.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:cc:ec:ba:ea:15:71:43:70:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff1a08e-9692-475a-9b04-916530111389 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=b5688af5-79ab-4b15-b694-f708f5d5a727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:f9:7f:ed:dc:cf:a4:64:48:6f:8c:a4:69: eb:49:6d:45:a0:fd:fc:f2:41:5b:f6:7e:c5:c2:aa: cb:b1:3f:9c:58:e3:45:20:82:08:ef:f1:2f:2f:25: 5f:d7:75:6c:a3:eb:1d:ce:e7:58:a4:b4:3a:10:8f: 9a:5b:8d:58:51:88:9f:5a:88:a6:2e:de:37:fc:71: 14:f0:41:f1:00:32:24:75:b3:6f:e7:5a:8d:01:70: 25:5e:b4:85:36:1c:65:79:e1:4f:3a:f2:14:2a:e6: e7:73:d3:c6:07:17:50:84:aa:87:3d:c9:a8:33:c4: dc:a3:b0:07:a5:7e:d1:34:df:88:e5:dd:67:cb:65: 04:c1:60:b9:d0:18:48:c2:fe:27:4a:d6:52:75:b4: d3:f4:d8:19:a4:43:f0:a0:86:81:fe:9b:02:7a:2f: 84:0f:1b:e2:d3:9a:ae:80:5a:91:e2:ad:cd:b5:c7: ec:10:b1:77:b5:ef:79:2e:bd:f0:69:2e:7a:53:24: 4b:d8:8d:1e:a3:a0:dc:51:b0:66:fc:ad:4d:f1:3f: 7d:50:e1:d1:84:65:b4:1a:39:37:18:37:15:2e:c0: a2:c7:19:19:65:fe:19:73:c2:33:1d:78:ae:35:a7: 84:9e:79:97:60:db:31:9d:aa:f8:bb:f6:20:f5:65: e9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:51:74:53:B7:1D:BE:CC:C8:33:98:32:4E:B6:1F:26:26:59:69:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/f71ddcd1-bad1-3544-96ec-1a572beee366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl X509v3 Authority Key Identifier: keyid:FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer sbgp-ipAddrBlock: critical IPv4: 142.249.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0a:4a:a4:5b:41:36:58:62:0e:8e:ae:da:0f:21:db:ce:fd: f2:d2:35:0d:d5:42:6f:b2:76:4d:d4:f6:62:fc:80:d2:4d:03: 7e:56:0f:b2:19:81:d0:ce:d5:82:8b:86:46:bd:d0:84:b4:61: be:34:af:7a:b9:b3:24:4f:1d:24:ad:98:9b:26:2a:f0:9f:f9: 20:29:f0:2d:37:f3:86:61:4f:c5:ee:a4:02:6d:4e:dd:c8:9b: 1c:87:ba:22:83:b6:01:81:27:92:d6:bf:5d:f3:64:4c:c4:9f: 82:b1:ed:41:de:a0:41:f5:54:5b:8b:55:50:ff:85:c3:4c:5a: b8:d1:be:2c:32:2e:90:93:d6:50:fa:e4:16:7b:f3:2f:2c:6a: 54:f4:11:ae:27:bc:23:aa:52:a9:88:8e:c5:44:68:64:43:b9: 5e:4e:62:7d:72:ee:dd:a1:9e:65:08:15:39:72:e1:4e:3a:c4: 9d:4f:09:3d:bf:ff:26:2a:6d:ed:fe:22:92:17:3d:e3:bf:cd: 02:33:dd:f5:cf:d5:09:6d:7c:5a:35:41:cc:29:7f:56:21:68: 5a:12:91:c0:d1:2c:1f:17:28:90:c0:91:18:3b:62:e3:e7:6d: 35:fd:a8:0e:fb:dc:65:1e:3f:e7:c2:82:bb:fe:04:5a:6e:25: f2:28:e7:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJczsuuoVcUNwQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmMWEwOGUtOTY5Mi00NzVhLTliMDQtOTE2NTMwMTEx Mzg5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk YjU2ODhhZjUtNzlhYi00YjE1LWI2OTQtZjcwOGY1ZDVhNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEn5f+3cz6RkSG+MpGnrSW1FoP388kFb9n7F wqrLsT+cWONFIIII7/EvLyVf13Vso+sdzudYpLQ6EI+aW41YUYifWoimLt43/HEU 8EHxADIkdbNv51qNAXAlXrSFNhxleeFPOvIUKubnc9PGBxdQhKqHPcmoM8Tco7AH pX7RNN+I5d1ny2UEwWC50BhIwv4nStZSdbTT9NgZpEPwoIaB/psCei+EDxvi05qu gFqR4q3NtcfsELF3te95Lr3waS56UyRL2I0eo6DcUbBm/K1N8T99UOHRhGW0Gjk3 GDcVLsCixxkZZf4Zc8IzHXiuNaeEnnmXYNsxnar4u/Yg9WXpiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlRdFO3Hb7MyDOYMk62HyYmWWkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYx YTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1MzAxMTEzODkvZjcxZGRjZDEtYmFkMS0z NTQ0LTk2ZWMtMWE1NzJiZWVlMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2ZmMWEwOGUtOTY5Mi00NzVhLTli MDQtOTE2NTMwMTExMzg5L2NmZjFhMDhlLTk2OTItNDc1YS05YjA0LTkxNjUzMDEx MTM4OS5jcmwwHwYDVR0jBBgwFoAU/7vAmoVMMQwbnO/bc4IcyxC59LEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZmYxYTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1 MzAxMTEzODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkKSqRbQTZYYg6OrtoPIdvO/fLSNQ3VQm+ydk3U9mL8gNJNA35WD7IZ gdDO1YKLhka90IS0Yb40r3q5syRPHSStmJsmKvCf+SAp8C0384ZhT8XupAJtTt3I mxyHuiKDtgGBJ5LWv13zZEzEn4Kx7UHeoEH1VFuLVVD/hcNMWrjRviwyLpCT1lD6 5BZ78y8salT0Ea4nvCOqUqmIjsVEaGRDuV5OYn1y7t2hnmUIFTly4U46xJ1PCT2/ /yYqbe3+IpIXPeO/zQIz3fXP1QltfFo1Qcwpf1YhaFoSkcDRLB8XKJDAkRg7YuPn bTX9qA773GUeP+fCgrv+BFpuJfIo5zc= -----END CERTIFICATE-----Generated at Fri May 29 19:21:51 2026 by rpki-client