$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2ba0c8-c3c4-329d-b670-cce3211e543b.roa File: aa2ba0c8-c3c4-329d-b670-cce3211e543b.roa (raw, json) Hash identifier: SYUlm1Yum1hXteD6yewCONn5ajJ0Q2zP27dooBN/sbw= Subject key identifier: DB:BE:59:65:E4:69:E0:F2:25:FC:11:28:6E:CD:20:DF:DC:53:1D:7E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5E1A41F2C6285C6874574D40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2ba0c8-c3c4-329d-b670-cce3211e543b.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 30036 IP address blocks: 63.142.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:41:f2:c6:28:5c:68:74:57:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=7c5d788d-8b3f-4d23-a355-a2ce043e90b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d7:37:6e:ed:07:da:21:80:91:23:1a:4c:88: 89:7d:56:95:d1:d6:5f:18:64:fe:a7:6f:4d:33:d4: 01:2a:e9:37:11:94:d0:14:df:1c:5f:52:90:6c:85: 2a:8c:fa:f6:bc:fe:aa:e8:f2:77:6b:b1:8b:47:24: 46:f8:2a:bc:be:1b:7f:50:91:19:e5:cf:58:69:0c: 3e:ee:56:27:e0:cf:74:d0:1e:54:38:f0:53:20:9b: f2:58:cb:cb:1c:2c:5a:b5:7d:fb:1f:91:03:ea:75: aa:4e:92:c1:46:f8:07:c8:fb:c0:56:53:94:7d:e4: 1a:a0:20:54:b5:30:bd:96:df:5a:cd:44:cb:92:b1: 41:82:9b:2c:42:d7:24:76:ce:a5:e8:e6:ed:d2:e1: db:6a:97:e6:fa:77:2b:ae:8a:c9:b0:01:8f:ac:b2: d8:02:b5:69:72:bd:8b:db:6f:f5:4c:0b:2a:57:23: dc:bd:2e:73:4b:37:af:08:05:69:5e:44:40:ad:7f: 65:0c:66:ae:c0:51:71:18:37:38:cb:10:95:08:8b: f2:15:e0:a3:7b:5c:f4:3e:de:67:62:82:5e:15:a8: 9c:db:7f:bb:e5:e8:96:56:65:a9:62:21:23:67:a0: 4d:95:0c:6f:5a:b3:e2:a2:13:7e:41:80:93:55:2c: a8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BE:59:65:E4:69:E0:F2:25:FC:11:28:6E:CD:20:DF:DC:53:1D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2ba0c8-c3c4-329d-b670-cce3211e543b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 63.142.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:03:8b:34:44:f2:9f:3f:b6:ca:c2:bf:a3:1b:1e:4a:ed:38: 40:e0:b5:75:54:8e:a2:82:0e:6a:74:3e:9a:bb:00:f1:73:68: 9c:d8:af:8b:1b:40:f8:43:41:b1:70:de:41:fe:1b:4a:45:8d: 16:d0:2b:22:42:d9:e7:dd:9e:04:ea:88:6f:4d:24:bc:19:b5: 17:bb:a5:bc:44:ac:97:23:1b:e8:b8:cb:e5:31:68:62:50:9f: 79:cd:af:2f:12:a6:ff:8e:ff:c5:7f:bd:78:91:c3:65:d0:d9: 1a:99:2d:ea:21:ad:37:5d:30:49:11:7b:79:4d:8b:cc:1f:79: 67:fc:ae:66:46:0f:b2:84:07:bb:4c:67:3f:15:2a:a5:2f:1b: e2:91:27:6c:a7:bb:ec:86:d4:30:0f:34:d6:b3:fa:8e:29:16: c3:6b:56:d1:33:0c:bc:9f:52:a8:35:f5:1a:22:48:2b:2e:40: 5a:a5:78:a6:03:24:4a:3a:61:d6:fc:29:21:09:8d:38:44:b6: 9e:f1:60:0e:12:2d:97:9d:5f:c8:db:d9:a3:f6:88:5f:15:35: dc:43:57:ba:35:98:51:37:18:23:85:b2:23:cf:d9:72:64:46: 6f:fc:73:f3:9a:72:81:90:67:c4:0f:8f:01:a8:d0:ed:c4:0e: 98:d3:06:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGkHyxihcaHRXTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk N2M1ZDc4OGQtOGIzZi00ZDIzLWEzNTUtYTJjZTA0M2U5MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstc3bu0H2iGAkSMaTIiJfVaV0dZfGGT+p29N M9QBKuk3EZTQFN8cX1KQbIUqjPr2vP6q6PJ3a7GLRyRG+Cq8vht/UJEZ5c9YaQw+ 7lYn4M900B5UOPBTIJvyWMvLHCxatX37H5ED6nWqTpLBRvgHyPvAVlOUfeQaoCBU tTC9lt9azUTLkrFBgpssQtckds6l6Obt0uHbapfm+ncrrorJsAGPrLLYArVpcr2L 22/1TAsqVyPcvS5zSzevCAVpXkRArX9lDGauwFFxGDc4yxCVCIvyFeCje1z0Pt5n YoJeFaic23+75eiWVmWpYiEjZ6BNlQxvWrPiohN+QYCTVSyo1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu+WWXkaeDyJfwRKG7NIN/cUx1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEyYmEwYzgtYzNjNC0z MjlkLWI2NzAtY2NlMzIxMWU1NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP44nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwDizRE8p8/tsrCv6MbHkrtOEDgtXVUjqKCDmp0Ppq7APFzaJzYr4sb QPhDQbFw3kH+G0pFjRbQKyJC2efdngTqiG9NJLwZtRe7pbxErJcjG+i4y+UxaGJQ n3nNry8Spv+O/8V/vXiRw2XQ2RqZLeohrTddMEkRe3lNi8wfeWf8rmZGD7KEB7tM Zz8VKqUvG+KRJ2ynu+yG1DAPNNaz+o4pFsNrVtEzDLyfUqg19RoiSCsuQFqleKYD JEo6Ydb8KSEJjThEtp7xYA4SLZedX8jb2aP2iF8VNdxDV7o1mFE3GCOFsiPP2XJk Rm/8c/OacoGQZ8QPjwGo0O3EDpjTBtU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:01:24 2026 by rpki-client