$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/aefbd322-198b-3bb8-83c2-da9754713f29.roa File: aefbd322-198b-3bb8-83c2-da9754713f29.roa (raw, json) Hash identifier: s28jA9WdiD5aofSshi/8Ge8BVt+KCW7PYVfvVzv0iO8= Subject key identifier: 24:E5:62:18:55:9C:68:29:0F:32:92:90:20:69:AB:78:E4:2F:77:26 Certificate issuer: /CN=560f9b0f-2d95-4838-9074-cd56b1c21753 Certificate serial: 010D0C9F4328584D037CEE339E67D4394DBFFC00 Authority key identifier: AC:59:DA:A0:9C:05:E4:4D:00:21:33:E0:FD:3A:B7:CB:28:63:1D:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/aefbd322-198b-3bb8-83c2-da9754713f29.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 14618 IP address blocks: 142.249.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7c:ee:33:9e:67:d4:39:4d:bf:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560f9b0f-2d95-4838-9074-cd56b1c21753 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=da97cf3b-2a28-425e-8621-11053ee164b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:99:cf:af:db:9d:a6:0c:50:83:9a:12:21: ff:99:f6:fe:83:22:3b:16:d9:18:ed:70:34:f1:04: a8:7a:3b:4c:8b:34:cf:56:85:64:97:08:25:e1:29: bf:66:d4:22:f1:a2:77:14:53:3f:fc:f2:2d:c0:43: 15:73:16:4a:08:d1:b5:d0:ed:c9:96:fd:fb:02:11: 43:23:74:10:20:89:db:8d:cf:6f:5c:82:24:04:0e: 28:a6:74:4a:04:d3:c9:7c:35:6b:94:3f:d4:51:6a: 5d:43:0e:bb:55:8a:79:61:5f:f7:fc:e0:0f:3c:5e: a4:5c:59:2f:ff:98:04:0f:b2:f5:f1:23:93:00:c0: 22:c8:f1:f9:1a:31:1c:9f:67:48:d7:2c:18:54:75: bf:06:79:cf:4e:fa:22:33:94:c6:2a:eb:55:6d:db: ee:21:ba:92:1a:6f:10:17:32:61:c0:b8:c7:dd:cc: a9:1d:6a:bc:0c:8c:61:40:9d:59:f3:c1:22:93:3c: 50:3b:26:1b:e3:62:5a:54:34:c6:6c:5a:d0:5f:d0: 1e:6a:6f:03:bc:94:46:da:7d:91:50:30:65:06:57: 37:a1:3e:96:09:1d:f0:73:9e:78:45:df:f3:ce:04: e1:14:71:e5:74:42:95:43:95:15:ab:10:c1:e9:ef: 79:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E5:62:18:55:9C:68:29:0F:32:92:90:20:69:AB:78:E4:2F:77:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/aefbd322-198b-3bb8-83c2-da9754713f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.crl X509v3 Authority Key Identifier: keyid:AC:59:DA:A0:9C:05:E4:4D:00:21:33:E0:FD:3A:B7:CB:28:63:1D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer sbgp-ipAddrBlock: critical IPv4: 142.249.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9c:b2:43:9c:dc:c3:cf:10:5a:45:60:f1:78:c2:07:df:e8: de:3a:fc:db:a7:46:11:26:b4:88:b0:a7:c2:2f:31:e2:a6:6d: 4b:bf:97:06:2f:24:b3:99:7d:d1:12:b1:d9:04:c5:86:dc:cc: 0c:49:25:5d:c2:20:65:59:81:8c:19:a2:a9:b3:67:1c:4f:ad: 3b:e4:7c:4b:a4:e3:7b:a8:af:89:d5:f0:c4:4e:24:5b:a9:46: 37:49:ca:93:d1:64:43:73:52:4c:76:a5:56:6f:ce:71:ba:3f: 3a:c1:a0:1a:90:6b:bb:34:2a:01:31:b9:75:10:cc:7d:4b:2f: 09:db:5e:6e:43:34:a3:61:e4:97:39:f6:14:93:3c:e2:43:99: f8:3a:f6:68:67:89:45:22:80:b9:a8:40:21:82:2a:39:44:f9: 66:6c:93:15:ae:41:3f:d0:bf:46:92:b9:9e:e6:b8:29:f3:59: 0b:e8:5c:83:e1:28:b0:4e:f1:6e:9d:3f:2d:a4:65:0f:46:9d: d6:86:f4:37:44:ad:7f:23:59:75:bb:ca:c4:69:f6:81:f0:04: 0d:ae:81:87:f3:59:73:c9:07:74:68:9f:d6:d7:5b:0a:c5:8a: 43:e4:e1:b1:14:05:31:39:23:1c:c6:08:7d:4b:6d:ff:ff:8a: df:55:49:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfO4znmfUOU2//AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYwZjliMGYtMmQ5NS00ODM4LTkwNzQtY2Q1NmIxYzIx NzUzMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZGE5N2NmM2ItMmEyOC00MjVlLTg2MjEtMTEwNTNlZTE2NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXeZz6/bnaYMUIOaEiH/mfb+gyI7FtkY7XA0 8QSoejtMizTPVoVklwgl4Sm/ZtQi8aJ3FFM//PItwEMVcxZKCNG10O3Jlv37AhFD I3QQIInbjc9vXIIkBA4opnRKBNPJfDVrlD/UUWpdQw67VYp5YV/3/OAPPF6kXFkv /5gED7L18SOTAMAiyPH5GjEcn2dI1ywYVHW/BnnPTvoiM5TGKutVbdvuIbqSGm8Q FzJhwLjH3cypHWq8DIxhQJ1Z88EikzxQOyYb42JaVDTGbFrQX9Aeam8DvJRG2n2R UDBlBlc3oT6WCR3wc554Rd/zzgThFHHldEKVQ5UVqxDB6e954QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTlYhhVnGgpDzKSkCBpq3jkL3cmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NjBm OWIwZi0yZDk1LTQ4MzgtOTA3NC1jZDU2YjFjMjE3NTMvYWVmYmQzMjItMTk4Yi0z YmI4LTgzYzItZGE5NzU0NzEzZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTYwZjliMGYtMmQ5NS00ODM4LTkw NzQtY2Q1NmIxYzIxNzUzLzU2MGY5YjBmLTJkOTUtNDgzOC05MDc0LWNkNTZiMWMy MTc1My5jcmwwHwYDVR0jBBgwFoAUrFnaoJwF5E0AITPg/Tq3yyhjHVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NjBmOWIwZi0yZDk1LTQ4MzgtOTA3NC1jZDU2 YjFjMjE3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvmfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGycskOc3MPPEFpFYPF4wgff6N46/NunRhEmtIiwp8IvMeKmbUu/lwYv JLOZfdESsdkExYbczAxJJV3CIGVZgYwZoqmzZxxPrTvkfEuk43uor4nV8MROJFup RjdJypPRZENzUkx2pVZvznG6PzrBoBqQa7s0KgExuXUQzH1LLwnbXm5DNKNh5Jc5 9hSTPOJDmfg69mhniUUigLmoQCGCKjlE+WZskxWuQT/Qv0aSuZ7muCnzWQvoXIPh KLBO8W6dPy2kZQ9GndaG9DdErX8jWXW7ysRp9oHwBA2ugYfzWXPJB3Ron9bXWwrF ikPk4bEUBTE5IxzGCH1Lbf//it9VSX8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:45 2026 by rpki-client