$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/8601f692-9955-3e20-8a52-638414938344.roa File: 8601f692-9955-3e20-8a52-638414938344.roa (raw, json) Hash identifier: w/6u0ONdJJUhyHNkvHsVe3moDKS5ZEA6JIHwgZMUThU= Subject key identifier: FC:6B:B5:1E:C0:92:8F:AB:EB:23:62:97:FF:D8:94:20:60:CA:9A:05 Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584D55BA43FA8212E6FE62899900 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/8601f692-9955-3e20-8a52-638414938344.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 55002 IP address blocks: 142.0.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:43:fa:82:12:e6:fe:62:89:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b07eb2e0-08fa-4842-80e2-df740ef78325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:c3:64:87:cd:ed:88:ea:4f:ef:65:10:e3: b2:4c:55:da:76:7e:45:5f:ee:ed:ad:99:1e:3b:d6: 95:59:c1:53:f3:9e:59:fa:a0:2c:83:89:12:e8:0c: a8:a5:5d:c2:91:03:a1:5d:a9:de:f7:ee:b4:d6:62: f0:e3:e3:29:a4:8e:c1:ad:33:bb:1a:7c:ee:95:7a: fd:9e:08:e1:18:23:3a:dd:26:f9:d8:7a:75:00:b1: e7:cc:a1:ae:43:aa:db:78:72:58:b2:96:d8:1e:f2: de:89:9d:b6:8c:ca:9a:4a:1d:77:80:5a:d2:64:8b: 77:23:08:11:b2:13:fe:9a:ff:43:f6:98:7b:57:db: bd:84:f1:aa:8b:d9:7a:f0:12:09:bf:8b:6b:a5:3b: 5b:db:1a:a6:86:98:7e:b1:63:16:a8:91:90:e5:88: 6c:9d:a1:fa:c9:f4:83:08:cf:2b:cb:7a:05:35:c7: a1:4f:57:1a:de:ff:3e:50:58:52:b6:09:77:e8:af: 30:92:87:21:fe:ab:cc:c6:61:f7:73:6c:e7:1a:a4: ef:48:e3:63:a4:02:df:1f:d0:94:93:6e:bd:9b:1c: 06:4e:07:ba:97:fd:89:41:cb:e1:7e:b1:29:91:0b: 77:90:36:7c:7b:72:05:35:b7:98:79:4f:8d:96:f1: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6B:B5:1E:C0:92:8F:AB:EB:23:62:97:FF:D8:94:20:60:CA:9A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/8601f692-9955-3e20-8a52-638414938344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:99:11:fb:72:f0:b9:b4:78:3d:81:9d:41:d5:7e:a0:2e:ea: 85:00:26:25:5b:3f:40:e6:99:d8:1c:f7:86:89:40:2e:a4:9a: 8b:76:1f:e9:02:e5:f1:2f:c9:13:c7:b8:83:86:ca:13:f8:e3: 8f:2f:63:e5:05:b2:67:32:c3:50:95:f1:ca:e6:18:7a:5d:1a: 7f:cd:ae:7d:cf:a8:58:f5:8c:9b:32:02:2e:d0:e0:bd:0f:a8: bb:ff:29:40:eb:f6:11:23:9e:ef:5c:6e:7b:9c:2f:c0:e1:fa: 91:c7:20:d3:c8:30:e1:9d:4f:98:a9:1a:f3:72:0c:74:46:7f: c2:92:63:79:59:ef:80:13:ed:9e:db:88:ed:10:c2:92:68:f6: fe:33:cd:7a:6b:ee:76:c4:91:d4:ba:29:18:64:d1:5a:1c:b4: 23:72:c7:c9:dd:8d:b5:e7:e6:df:3e:87:15:dc:5b:b8:94:5f: 13:e2:f3:25:32:9c:25:d6:ef:8c:7b:19:bf:d0:b4:7e:b8:d2: 22:97:e6:14:45:c2:4c:75:ad:0d:14:e2:49:e8:05:e2:3f:a1: cc:e5:cc:14:4c:61:a7:6a:fc:44:9c:3f:0d:d3:07:0e:c6:ac: 43:6b:df:50:06:19:1f:4d:b7:9c:11:20:54:94:e5:ff:fd:cf: 6d:ab:e7:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukP6ghLm/mKJmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjA3ZWIyZTAtMDhmYS00ODQyLTgwZTItZGY3NDBlZjc4MzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr97DZIfN7YjqT+9lEOOyTFXadn5FX+7trZke O9aVWcFT855Z+qAsg4kS6AyopV3CkQOhXane9+601mLw4+MppI7BrTO7GnzulXr9 ngjhGCM63Sb52Hp1ALHnzKGuQ6rbeHJYspbYHvLeiZ22jMqaSh13gFrSZIt3IwgR shP+mv9D9ph7V9u9hPGqi9l68BIJv4trpTtb2xqmhph+sWMWqJGQ5YhsnaH6yfSD CM8ry3oFNcehT1ca3v8+UFhStgl36K8wkoch/qvMxmH3c2znGqTvSONjpALfH9CU k269mxwGTge6l/2JQcvhfrEpkQt3kDZ8e3IFNbeYeU+NlvE3NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxrtR7Ako+r6yNil//YlCBgypoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvODYwMWY2OTItOTk1NS0z ZTIwLThhNTItNjM4NDE0OTM4MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGZEfty8Lm0eD2BnUHVfqAu6oUAJiVbP0Dmmdgc94aJQC6kmot2H+kC 5fEvyRPHuIOGyhP4448vY+UFsmcyw1CV8crmGHpdGn/Nrn3PqFj1jJsyAi7Q4L0P qLv/KUDr9hEjnu9cbnucL8Dh+pHHINPIMOGdT5ipGvNyDHRGf8KSY3lZ74AT7Z7b iO0QwpJo9v4zzXpr7nbEkdS6KRhk0VoctCNyx8ndjbXn5t8+hxXcW7iUXxPi8yUy nCXW74x7Gb/QtH640iKX5hRFwkx1rQ0U4knoBeI/oczlzBRMYadq/EScPw3TBw7G rENr31AGGR9Nt5wRIFSU5f/9z22r5wM= -----END CERTIFICATE-----Generated at Mon Apr 13 17:18:57 2026 by rpki-client