$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/edf7067b-47be-35b5-80dc-82c3ba48aa19.roa File: edf7067b-47be-35b5-80dc-82c3ba48aa19.roa (raw, json) Hash identifier: oVmi3m9NKN2Ub7ZAqLDUB5rmM7tSs/2ugeqRL0BxigU= Subject key identifier: 1F:04:E0:60:47:E2:5F:9D:5A:7F:6E:8D:63:B1:D3:48:29:DA:87:52 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584D4D5A5EEFDA6DB7A6A4E6C200 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/edf7067b-47be-35b5-80dc-82c3ba48aa19.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 139267 IP address blocks: 142.202.192.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:5e:ef:da:6d:b7:a6:a4:e6:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=cd802aae-c868-47d8-bb4f-991b909e8b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:1b:2c:8f:f9:af:69:fc:b2:3d:5f:32:bf: ef:45:7d:60:fc:21:01:52:2b:fe:49:9c:df:ac:a6: 81:69:75:bc:e1:2b:6a:09:d0:33:8d:76:3d:cf:93: 0f:35:67:78:c8:37:76:7f:35:75:b3:b4:7a:65:af: 79:ba:dd:6f:20:13:99:b8:9d:c6:24:0c:a3:6e:4a: 65:36:68:ee:7e:09:9b:b2:8a:91:fc:7a:a0:fb:84: 46:4e:72:24:49:9b:4f:e4:06:97:e0:85:e3:13:41: 77:68:04:a0:7c:71:9f:c1:22:fa:8d:e6:56:a7:dc: e3:76:46:12:f7:25:49:39:fd:1f:54:f9:94:98:f9: 1f:34:b5:31:95:86:49:a6:03:cf:2b:46:4e:f7:c0: 5f:e0:c3:35:49:c3:01:10:71:e0:72:f0:01:dd:62: 9c:6e:31:2e:5b:da:0f:cd:c2:dd:b0:9a:c9:92:e7: 82:c1:db:61:23:31:23:26:93:fa:2a:c8:2c:7d:94: 25:5c:f9:03:a0:0f:c2:0c:52:72:9d:4b:da:88:eb: 07:5a:c4:d8:68:fb:c4:2c:c8:dc:0e:29:b9:80:66: a1:8e:60:58:1a:92:58:f7:00:28:26:e4:e0:59:9a: 0b:e2:1b:08:16:ce:c5:6a:f0:92:e5:38:b0:df:f7: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:04:E0:60:47:E2:5F:9D:5A:7F:6E:8D:63:B1:D3:48:29:DA:87:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/edf7067b-47be-35b5-80dc-82c3ba48aa19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 142.202.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:94:25:08:0d:a8:98:d2:72:f6:04:4a:d1:68:c7:42:52:cf: 6f:fa:db:25:35:82:d1:63:17:15:f9:ca:63:94:6c:8f:ae:e9: 41:6c:fb:55:84:41:8c:89:d8:6c:11:5d:96:79:fc:f1:9e:b8: c9:06:af:14:6d:c4:77:a8:d5:7b:28:02:2b:41:72:02:28:3d: f4:3d:1d:1f:f8:e1:28:e8:95:b5:3d:eb:a8:85:27:ed:eb:e8: 80:79:e7:23:92:77:39:31:dd:99:67:2b:9b:e1:c8:e4:5a:4c: 92:2e:e5:ee:5d:5d:ac:04:6e:74:76:b1:bc:08:74:fc:51:6b: 0c:b5:1e:cd:74:3c:09:55:63:19:d1:90:07:fd:ce:a4:ff:cd: d6:11:4c:73:e6:3b:88:a9:6c:9f:12:ab:da:75:0b:b5:14:0a: 07:05:02:c8:9a:ac:5b:70:c9:1b:93:36:eb:2c:ea:52:4d:7e: 3d:ae:51:aa:be:8b:5e:38:04:17:70:98:f6:50:e9:4c:41:1e: 9f:af:c1:4b:7d:70:14:15:b6:51:ac:fd:4f:3d:cb:13:b4:b7: 40:ce:24:37:1b:68:0d:8b:17:1c:5d:b1:5c:d6:28:90:ca:24: 20:c0:26:45:20:34:f5:95:1b:57:34:69:3a:61:48:63:b4:a4: 3a:f7:cf:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWl7v2m23pqTmwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk Y2Q4MDJhYWUtYzg2OC00N2Q4LWJiNGYtOTkxYjkwOWU4YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0UbLI/5r2n8sj1fMr/vRX1g/CEBUiv+SZzf rKaBaXW84StqCdAzjXY9z5MPNWd4yDd2fzV1s7R6Za95ut1vIBOZuJ3GJAyjbkpl NmjufgmbsoqR/Hqg+4RGTnIkSZtP5AaX4IXjE0F3aASgfHGfwSL6jeZWp9zjdkYS 9yVJOf0fVPmUmPkfNLUxlYZJpgPPK0ZO98Bf4MM1ScMBEHHgcvAB3WKcbjEuW9oP zcLdsJrJkueCwdthIzEjJpP6KsgsfZQlXPkDoA/CDFJynUvaiOsHWsTYaPvELMjc Dim5gGahjmBYGpJY9wAoJuTgWZoL4hsIFs7FavCS5Tiw3/eqcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8E4GBH4l+dWn9ujWOx00gp2odSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvZWRmNzA2N2ItNDdiZS0z NWI1LTgwZGMtODJjM2JhNDhhYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKUJQgNqJjScvYEStFox0JSz2/62yU1gtFjFxX5ymOUbI+u6UFs+1WE QYyJ2GwRXZZ5/PGeuMkGrxRtxHeo1XsoAitBcgIoPfQ9HR/44SjolbU966iFJ+3r 6IB55yOSdzkx3ZlnK5vhyORaTJIu5e5dXawEbnR2sbwIdPxRawy1Hs10PAlVYxnR kAf9zqT/zdYRTHPmO4ipbJ8Sq9p1C7UUCgcFAsiarFtwyRuTNuss6lJNfj2uUaq+ i144BBdwmPZQ6UxBHp+vwUt9cBQVtlGs/U89yxO0t0DOJDcbaA2LFxxdsVzWKJDK JCDAJkUgNPWVG1c0aTphSGO0pDr3zwQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:59 2026 by rpki-client