$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa File: b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa (raw, json) Hash identifier: 42BmFuE00Oyap1lox2nLahDac0QRCBRB66dzf2rcu7Y= Subject key identifier: 5D:41:FE:63:52:55:8D:92:B8:11:05:E8:D8:D2:2B:77:33:E9:94:DA Certificate issuer: /CN=f9c367c2-ae39-45af-aac9-ca536571d493 Certificate serial: 010D0C9F4328584D55BA43DEDF65B0D5D25BB800 Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 53658 IP address blocks: 142.0.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:43:de:df:65:b0:d5:d2:5b:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c951bcaf-1b18-4dd8-997c-54f6e94b593b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:57:11:3b:25:78:c7:53:28:0e:ad:f0:53:ad: e6:3f:14:85:0e:21:e7:21:ab:f8:c9:5b:94:31:f9: 00:4d:cd:83:76:33:a7:35:e5:45:0c:94:48:07:71: 7d:e5:37:31:25:a8:dd:82:6e:cf:d6:ca:8d:1a:84: f6:a3:da:3c:2c:b2:01:48:57:76:ca:7d:ef:08:6e: 04:c4:ae:9d:1b:4b:4c:2d:30:5e:94:68:25:33:37: c3:d0:10:40:f1:f0:85:2c:8f:a1:e6:c0:d4:4d:ff: 70:7d:a5:67:ce:56:ed:41:49:c3:fe:1d:8c:6f:d1: 48:f5:6c:38:ec:e7:ac:b5:45:e0:c2:a3:99:6a:56: 39:2a:6b:12:85:e6:83:c4:8b:e9:e8:48:7a:1a:5a: 14:bc:ea:f4:69:ee:de:56:cd:b4:99:b3:71:4e:0e: 9d:ee:97:51:ea:02:08:eb:65:70:b8:ba:c2:ed:0a: 8f:15:bd:58:f2:4a:ba:30:6f:6e:fb:8a:5e:4c:9a: 3a:32:3a:e2:dd:17:aa:6a:89:a8:53:c6:a3:76:d3: 3b:72:cf:e0:bb:9a:b9:f2:f0:92:56:b1:2b:d2:f5: 26:f4:ad:8c:1e:fa:1a:d3:5a:d4:1a:f9:48:23:98: 1f:b5:fe:77:52:d5:81:80:ca:fe:cb:1c:24:8c:b3: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:41:FE:63:52:55:8D:92:B8:11:05:E8:D8:D2:2B:77:33:E9:94:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/b5af53c5-a1c4-3da8-99c5-f5582ad0fd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl X509v3 Authority Key Identifier: keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer sbgp-ipAddrBlock: critical IPv4: 142.0.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:28:cb:e3:1a:56:47:71:e0:27:c8:40:80:9e:52:56:cf:21: fe:2e:97:0e:d9:bc:34:d1:70:d0:88:18:e2:b2:13:b9:f0:34: a3:1a:c1:cb:9e:7f:55:f9:a2:f0:91:76:7f:c2:ce:37:ec:d0: 7b:d7:5e:17:4d:8f:bb:cb:73:c3:4e:10:05:89:50:d1:90:0f: a8:54:4a:94:17:f6:0e:c9:0f:3b:48:64:94:8e:7b:1f:d0:ed: 44:32:43:96:83:e7:fb:ae:b3:7a:68:5a:ad:f7:74:67:aa:e6: 02:5f:2d:81:21:70:4d:73:6c:92:b3:c2:5a:82:84:e4:08:1e: 2c:21:43:ab:95:43:36:40:0b:d3:61:05:76:be:54:67:bd:6e: 43:6e:65:f6:65:ff:e2:8e:be:71:3f:c9:aa:02:6a:76:4a:4e: 81:a2:ae:ca:86:fc:9a:5d:d6:11:dd:6f:f6:66:a7:e1:4f:59: 5c:5b:54:6a:e7:c5:2a:12:c2:ab:be:62:b4:7a:d4:b9:05:ca: 38:e8:63:f2:e9:44:df:27:6d:ed:c5:7e:6b:69:a0:bc:65:8b: b7:56:16:f7:18:b0:0c:65:4b:cc:e6:cd:8d:a4:99:4d:7b:d9: b9:9b:4c:a5:83:8e:db:25:ac:50:89:d6:a9:a7:c0:8b:68:5a: d9:b9:f1:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukPe32Ww1dJbuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljMzY3YzItYWUzOS00NWFmLWFhYzktY2E1MzY1NzFk NDkzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Yzk1MWJjYWYtMWIxOC00ZGQ4LTk5N2MtNTRmNmU5NGI1OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VcROyV4x1MoDq3wU63mPxSFDiHnIav4yVuU MfkATc2DdjOnNeVFDJRIB3F95TcxJajdgm7P1sqNGoT2o9o8LLIBSFd2yn3vCG4E xK6dG0tMLTBelGglMzfD0BBA8fCFLI+h5sDUTf9wfaVnzlbtQUnD/h2Mb9FI9Ww4 7OestUXgwqOZalY5KmsSheaDxIvp6Eh6GloUvOr0ae7eVs20mbNxTg6d7pdR6gII 62VwuLrC7QqPFb1Y8kq6MG9u+4peTJo6Mjri3ReqaomoU8ajdtM7cs/gu5q58vCS VrEr0vUm9K2MHvoa01rUGvlII5gftf53UtWBgMr+yxwkjLM2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1B/mNSVY2SuBEF6NjSK3cz6ZTaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMz NjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUzNjU3MWQ0OTMvYjVhZjUzYzUtYTFjNC0z ZGE4LTk5YzUtZjU1ODJhZDBmZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjljMzY3YzItYWUzOS00NWFmLWFh YzktY2E1MzY1NzFkNDkzL2Y5YzM2N2MyLWFlMzktNDVhZi1hYWM5LWNhNTM2NTcx ZDQ5My5jcmwwHwYDVR0jBBgwFoAUMplxZjowEaL2SVBbM9OH2n84vacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOWMzNjdjMi1hZTM5LTQ1YWYtYWFjOS1jYTUz NjU3MWQ0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjgC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsoy+MaVkdx4CfIQICeUlbPIf4ulw7ZvDTRcNCIGOKyE7nwNKMawcue f1X5ovCRdn/Czjfs0HvXXhdNj7vLc8NOEAWJUNGQD6hUSpQX9g7JDztIZJSOex/Q 7UQyQ5aD5/uus3poWq33dGeq5gJfLYEhcE1zbJKzwlqChOQIHiwhQ6uVQzZAC9Nh BXa+VGe9bkNuZfZl/+KOvnE/yaoCanZKToGirsqG/Jpd1hHdb/Zmp+FPWVxbVGrn xSoSwqu+YrR61LkFyjjoY/LpRN8nbe3FfmtpoLxli7dWFvcYsAxlS8zmzY2kmU17 2bmbTKWDjtslrFCJ1qmnwItoWtm58W0= -----END CERTIFICATE-----Generated at Mon Apr 13 17:21:06 2026 by rpki-client