$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/475e550c-fbf0-3859-a3cb-87c39eed7a0f.roa File: 475e550c-fbf0-3859-a3cb-87c39eed7a0f.roa (raw, json) Hash identifier: meih8rAOigt21WdKWKMFcoE9xGoPQQ4UfdsnuRhKwZI= Subject key identifier: E0:27:59:E3:7B:9A:0B:EF:75:46:B8:17:75:C9:9B:25:31:40:87:62 Certificate issuer: /CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da Certificate serial: 010D0C9F4328584E43F47489AF0972561324CC00 Authority key identifier: F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/475e550c-fbf0-3859-a3cb-87c39eed7a0f.roa Signing time: Tue 23 Jun 2026 09:00:12 +0000 ROA not before: Tue 23 Jun 2026 09:00:12 +0000 ROA not after: Mon 21 Sep 2026 09:00:12 +0000 asID: 35997 IP address blocks: 142.249.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:43:f4:74:89:af:09:72:56:13:24:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da Validity Not Before: Jun 23 09:00:12 2026 GMT Not After : Sep 21 09:00:12 2026 GMT Subject: CN=9adfd93f-2d02-41f4-92a9-ba01268b1691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:09:27:90:02:ba:c9:43:a8:02:78:d3:20: fb:22:c1:5b:c2:be:0e:5e:bc:cd:ed:38:21:0b:84: f6:4f:8c:d7:49:90:43:91:e7:48:ae:86:4d:9b:a5: d2:ad:57:fe:c8:ac:ca:c4:b7:1f:d2:8c:b2:d3:60: 67:6f:a0:3e:b6:fa:05:16:82:42:ef:41:f8:e2:3c: 16:4a:b1:72:92:f3:dd:40:65:c7:e4:bf:81:4b:ca: a4:14:43:df:bf:bb:c3:d1:dd:2c:4a:0d:f8:6e:50: 92:e9:c5:9f:12:c9:57:ba:c1:dc:de:5c:74:89:68: cb:17:29:e0:37:98:fd:1e:17:14:95:53:11:01:44: 65:25:1e:99:86:7e:d6:18:22:95:0c:19:4d:28:42: f4:a9:c4:ec:9d:b0:b1:43:d5:85:f3:14:3e:5c:0c: 94:81:e6:46:e6:4b:bd:7a:b0:fe:06:17:75:c8:25: 61:57:88:ec:79:e7:fa:c0:a9:25:6a:03:b9:13:71: 86:67:a4:ca:51:28:f3:aa:54:17:e2:31:d0:77:f0: 79:40:c5:7c:19:9f:08:d6:f5:b2:18:aa:9b:54:15: 76:41:a1:2e:c1:da:a5:98:88:c6:81:4a:ee:13:ef: 75:99:47:96:49:55:c5:1e:bd:d7:c9:0b:a5:c6:d4: c4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:27:59:E3:7B:9A:0B:EF:75:46:B8:17:75:C9:9B:25:31:40:87:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/475e550c-fbf0-3859-a3cb-87c39eed7a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl X509v3 Authority Key Identifier: keyid:F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer sbgp-ipAddrBlock: critical IPv4: 142.249.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:83:61:65:23:97:43:55:5b:61:8e:c0:98:a7:f1:41:39:59: b9:1c:aa:0a:ea:8a:f3:ec:82:a8:24:06:d0:5e:13:3d:bb:6a: 99:6e:32:49:52:8b:6a:a5:f4:ae:69:7b:8e:d5:ce:7a:c0:b1: a0:9a:0a:d5:c8:e6:65:27:9a:50:48:d4:37:52:48:ec:73:aa: 93:8f:31:9a:a0:4e:fd:05:26:08:a3:e4:da:1c:e4:81:06:1c: 4e:f3:a4:63:38:70:65:95:8e:46:95:43:61:26:0f:ce:db:9c: 42:fa:32:df:27:c4:b7:ce:ba:97:36:4e:62:8c:f6:ab:5e:cf: 29:7f:aa:24:3d:c8:16:3f:47:35:dd:d6:b8:cd:86:d3:06:eb: 56:23:30:a5:a8:6a:a2:0c:2c:25:32:28:32:48:5e:9a:34:21: 94:a5:7b:6b:78:2e:9e:b0:5e:00:69:fe:3a:b9:1b:40:b2:b7: 31:68:19:20:b9:0c:69:6b:84:aa:bb:3a:d7:38:9d:98:d8:83: a0:ed:a0:3a:33:42:3e:92:52:66:4e:8e:1a:64:e2:76:d4:a7: 13:de:59:1c:b5:21:b1:18:fa:ae:4e:24:ad:3d:a0:84:73:4a: b5:28:85:64:28:5c:86:3d:87:08:4f:2e:07:cb:b6:f0:1f:02: 83:e4:1b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5D9HSJrwlyVhMkzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA4YjA0YzQtM2Q1ZC00MWQ1LTgyNjMtY2Q1NzVmNGJk MmRhMB4XDTI2MDYyMzA5MDAxMloXDTI2MDkyMTA5MDAxMlowLzEtMCsGA1UEAxMk OWFkZmQ5M2YtMmQwMi00MWY0LTkyYTktYmEwMTI2OGIxNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlEJJ5ACuslDqAJ40yD7IsFbwr4OXrzN7Tgh C4T2T4zXSZBDkedIroZNm6XSrVf+yKzKxLcf0oyy02Bnb6A+tvoFFoJC70H44jwW SrFykvPdQGXH5L+BS8qkFEPfv7vD0d0sSg34blCS6cWfEslXusHc3lx0iWjLFyng N5j9HhcUlVMRAURlJR6Zhn7WGCKVDBlNKEL0qcTsnbCxQ9WF8xQ+XAyUgeZG5ku9 erD+Bhd1yCVhV4jseef6wKklagO5E3GGZ6TKUSjzqlQX4jHQd/B5QMV8GZ8I1vWy GKqbVBV2QaEuwdqlmIjGgUruE+91mUeWSVXFHr3XyQulxtTE9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAnWeN7mgvvdUa4F3XJmyUxQIdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhi MDRjNC0zZDVkLTQxZDUtODI2My1jZDU3NWY0YmQyZGEvNDc1ZTU1MGMtZmJmMC0z ODU5LWEzY2ItODdjMzllZWQ3YTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjA4YjA0YzQtM2Q1ZC00MWQ1LTgy NjMtY2Q1NzVmNGJkMmRhL2IwOGIwNGM0LTNkNWQtNDFkNS04MjYzLWNkNTc1ZjRi ZDJkYS5jcmwwHwYDVR0jBBgwFoAU9oKJRNA7zuFKJZRN6WdqjyxRIc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhiMDRjNC0zZDVkLTQxZDUtODI2My1jZDU3 NWY0YmQyZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmDYWUjl0NVW2GOwJin8UE5WbkcqgrqivPsgqgkBtBeEz27apluMklS i2ql9K5pe47VznrAsaCaCtXI5mUnmlBI1DdSSOxzqpOPMZqgTv0FJgij5Noc5IEG HE7zpGM4cGWVjkaVQ2EmD87bnEL6Mt8nxLfOupc2TmKM9qtezyl/qiQ9yBY/RzXd 1rjNhtMG61YjMKWoaqIMLCUyKDJIXpo0IZSle2t4Lp6wXgBp/jq5G0CytzFoGSC5 DGlrhKq7Otc4nZjYg6DtoDozQj6SUmZOjhpk4nbUpxPeWRy1IbEY+q5OJK09oIRz SrUohWQoXIY9hwhPLgfLtvAfAoPkG+g= -----END CERTIFICATE-----Generated at Mon Jul 13 08:41:34 2026 by rpki-client