$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/067fad80-42b2-338d-af63-9a05b02605a1.roa File: 067fad80-42b2-338d-af63-9a05b02605a1.roa (raw, json) Hash identifier: 9K3/+ewvTqrNbeIpysFPVdn6pluBZt5NpA8vZAxszFk= Subject key identifier: 58:BB:04:A9:3E:16:7E:0C:8A:3B:81:76:20:E5:39:69:FB:A1:E9:36 Certificate issuer: /CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da Certificate serial: 010D0C9F4328584DE2B5F573B5C7491FE0158280 Authority key identifier: F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/067fad80-42b2-338d-af63-9a05b02605a1.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 203 IP address blocks: 142.249.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f5:73:b5:c7:49:1f:e0:15:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=3e50916f-09b2-4dde-9eb5-eab1a71fd925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:70:fd:81:4a:07:70:da:2f:99:ef:1a:20:c1: 11:b3:7f:98:f4:0f:b1:33:91:18:57:8d:0f:4c:4b: a5:a4:39:14:1e:f0:c2:6e:a3:bc:e6:85:43:89:a0: ae:d6:74:33:a2:9e:c0:a1:cb:35:ad:21:f0:08:f2: ec:80:4c:83:cc:60:cf:b3:68:b9:f0:92:1a:13:ef: 79:2a:14:f7:8f:d0:3d:c5:05:50:e7:b7:c5:06:1b: 4f:a6:97:c4:e2:f6:b7:51:a7:75:8e:af:c1:ea:a0: 39:9c:40:3b:f0:c2:2c:02:a3:19:73:ca:fa:0a:0e: 0a:a4:9e:1c:b3:40:bb:10:57:c1:7d:8c:db:c6:fd: c6:e9:97:48:06:89:11:1d:69:de:e7:2c:b2:b6:26: fe:62:b3:7b:3c:cf:53:dc:7d:ae:86:6e:3e:f9:b2: 01:a4:86:30:3a:e4:bd:52:08:c6:ae:f7:42:2e:59: 62:01:50:35:80:3f:64:d2:64:76:a8:21:f3:da:58: 5c:cb:ab:ae:48:83:57:5c:cc:4a:91:36:c6:02:ce: e3:bb:95:d6:72:b0:cf:3c:27:00:34:45:d7:8b:33: 83:cd:0d:ad:39:99:1d:0b:a4:c9:b8:0e:98:2d:ba: cc:a7:77:ab:3b:fa:84:40:47:e2:6e:cf:18:da:2c: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BB:04:A9:3E:16:7E:0C:8A:3B:81:76:20:E5:39:69:FB:A1:E9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/067fad80-42b2-338d-af63-9a05b02605a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl X509v3 Authority Key Identifier: keyid:F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer sbgp-ipAddrBlock: critical IPv4: 142.249.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4f:09:d7:78:de:72:5b:60:4f:0f:c3:2b:e2:36:ac:dd:15: 35:11:97:30:50:54:31:31:2f:c5:4c:bc:bb:af:a6:d8:1a:db: 73:b6:8e:8a:90:eb:ae:fc:7e:a7:52:9e:23:63:64:ee:f3:b6: 42:67:b3:c0:22:08:0c:aa:bc:54:4d:18:8c:63:a9:4c:aa:83: b8:4c:db:07:25:85:61:39:d9:1f:b9:3e:3e:25:b3:f3:b6:a7: e8:b0:8b:cd:1b:bb:08:d3:c0:20:d5:52:fe:74:c4:50:47:e8: 5b:0d:23:e2:3d:87:49:52:05:4e:8d:e8:af:34:d0:b4:ec:80: fc:75:2f:46:e0:e6:06:a3:83:64:0a:6b:95:5b:75:4d:fc:61: 98:1f:0e:e3:69:8d:35:b1:6b:ad:be:fe:12:55:62:88:93:b6: ce:d7:28:54:4c:c5:f8:45:82:d8:6a:06:2a:18:4d:68:3c:3e: 9f:55:73:a9:f9:e6:50:4a:b7:00:0f:a2:1f:92:82:02:b2:1c: a3:a8:2c:d4:85:4b:bc:22:84:22:dc:3c:24:51:9b:a7:ac:5c: 4e:33:4d:c4:0b:66:0b:7b:a0:ed:58:9f:07:54:c2:a5:c0:bc: 26:dc:bb:58:44:d3:16:b1:98:24:e6:40:13:a5:86:e6:d3:be: ed:21:c6:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itfVztcdJH+AVgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA4YjA0YzQtM2Q1ZC00MWQ1LTgyNjMtY2Q1NzVmNGJk MmRhMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk M2U1MDkxNmYtMDliMi00ZGRlLTllYjUtZWFiMWE3MWZkOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXD9gUoHcNovme8aIMERs3+Y9A+xM5EYV40P TEulpDkUHvDCbqO85oVDiaCu1nQzop7Aocs1rSHwCPLsgEyDzGDPs2i58JIaE+95 KhT3j9A9xQVQ57fFBhtPppfE4va3Uad1jq/B6qA5nEA78MIsAqMZc8r6Cg4KpJ4c s0C7EFfBfYzbxv3G6ZdIBokRHWne5yyytib+YrN7PM9T3H2uhm4++bIBpIYwOuS9 UgjGrvdCLlliAVA1gD9k0mR2qCHz2lhcy6uuSINXXMxKkTbGAs7ju5XWcrDPPCcA NEXXizODzQ2tOZkdC6TJuA6YLbrMp3erO/qEQEfibs8Y2ixLSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi7BKk+Fn4MijuBdiDlOWn7oek2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhi MDRjNC0zZDVkLTQxZDUtODI2My1jZDU3NWY0YmQyZGEvMDY3ZmFkODAtNDJiMi0z MzhkLWFmNjMtOWEwNWIwMjYwNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjA4YjA0YzQtM2Q1ZC00MWQ1LTgy NjMtY2Q1NzVmNGJkMmRhL2IwOGIwNGM0LTNkNWQtNDFkNS04MjYzLWNkNTc1ZjRi ZDJkYS5jcmwwHwYDVR0jBBgwFoAU9oKJRNA7zuFKJZRN6WdqjyxRIc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhiMDRjNC0zZDVkLTQxZDUtODI2My1jZDU3 NWY0YmQyZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFPCdd43nJbYE8PwyviNqzdFTURlzBQVDExL8VMvLuvptga23O2joqQ 6678fqdSniNjZO7ztkJns8AiCAyqvFRNGIxjqUyqg7hM2wclhWE52R+5Pj4ls/O2 p+iwi80buwjTwCDVUv50xFBH6FsNI+I9h0lSBU6N6K800LTsgPx1L0bg5gajg2QK a5VbdU38YZgfDuNpjTWxa62+/hJVYoiTts7XKFRMxfhFgthqBioYTWg8Pp9Vc6n5 5lBKtwAPoh+SggKyHKOoLNSFS7wihCLcPCRRm6esXE4zTcQLZgt7oO1YnwdUwqXA vCbcu1hE0xaxmCTmQBOlhubTvu0hxvU= -----END CERTIFICATE-----Generated at Thu May 28 20:59:37 2026 by rpki-client