$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/3e8733c1-a2e2-3edd-b8f2-070a2d598f1f.roa File: 3e8733c1-a2e2-3edd-b8f2-070a2d598f1f.roa (raw, json) Hash identifier: nS5aygJUlAw5YdQRR6MWwW7QJ1lSa/HDfDiNsLt8nV8= Subject key identifier: 2C:23:59:17:1F:04:75:D9:A1:53:D6:2C:23:F6:C9:82:F4:6A:65:FB Certificate issuer: /CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Certificate serial: 010D0C9F4328584EA5AA634891095ACC4E7B3E80 Authority key identifier: 96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/3e8733c1-a2e2-3edd-b8f2-070a2d598f1f.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 36038 IP address blocks: 142.249.21.0/24 maxlen: 24 142.249.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:63:48:91:09:5a:cc:4e:7b:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=a862ddca-e718-4a33-8516-d9e1d6be6116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:86:49:65:4e:3d:8d:f9:06:45:1b:b0:18: 35:d6:f9:30:7e:5e:ca:91:89:14:32:6c:48:d3:53: 74:e6:ce:92:5b:bc:57:98:e6:e4:ac:31:98:fb:85: 3c:57:cc:3f:68:d6:4c:50:5d:d1:86:0c:a5:22:e7: 5f:97:54:41:07:96:e1:5c:ff:5c:37:f0:24:35:03: cd:a7:52:80:ee:e3:29:87:6d:ef:36:d5:d7:12:1a: 22:be:7b:b5:70:f2:08:15:e7:77:93:54:e5:fe:65: 57:58:06:6e:d3:29:da:de:ba:05:64:07:f4:3e:b8: 7f:60:74:04:a6:cd:3f:49:13:90:92:65:05:1e:15: 99:a4:06:74:79:1c:58:d5:1e:fa:e7:07:d6:8a:5c: 84:1b:78:a5:38:41:8d:fa:11:a8:47:61:27:cb:64: f0:3e:5e:66:ab:b0:09:91:37:ff:04:69:0d:ff:a7: 96:d1:25:57:0c:e7:ee:32:52:e1:ce:fe:75:e1:7d: 99:53:22:2b:71:d3:bb:08:1c:b8:db:88:07:45:12: b7:03:0c:d0:73:f8:1f:1b:9d:dd:8f:ba:4b:a6:7f: 05:7f:bd:f1:b5:6d:e5:21:98:2b:45:a3:20:a7:32: c5:6f:5d:73:f3:75:35:b6:72:38:c4:fa:e2:eb:e2: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:23:59:17:1F:04:75:D9:A1:53:D6:2C:23:F6:C9:82:F4:6A:65:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/3e8733c1-a2e2-3edd-b8f2-070a2d598f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl X509v3 Authority Key Identifier: keyid:96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer sbgp-ipAddrBlock: critical IPv4: 142.249.21.0-142.249.22.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a8:03:e7:db:0c:a2:a4:73:4d:f1:5a:fc:a7:5f:79:f3:f0: 3d:31:49:12:9c:eb:19:68:de:c3:43:10:bb:32:1f:25:cf:a2: dc:f9:2a:ff:a0:21:ec:25:08:df:5b:01:db:6e:2c:ce:9a:55: 7f:c5:b6:1d:51:f5:7d:f8:95:a7:04:87:c6:cf:7d:3f:11:7d: 5f:98:32:29:d9:02:d9:bb:55:c1:19:a4:91:a6:51:8c:3e:90: 38:cd:b9:82:9b:ea:e7:5a:30:9e:4a:e1:28:03:33:cd:c6:4e: 34:15:23:ea:cd:0e:9a:27:f2:ab:eb:2a:10:a4:f0:6a:cb:55: 49:30:3a:b3:3f:28:1e:8d:4f:c5:e9:58:ef:84:44:87:c9:ac: 9d:d7:9b:7b:6f:ca:4d:27:64:aa:9a:44:ec:c3:f4:fd:f0:0a: 9e:36:5d:9f:44:c7:68:2d:b1:a5:76:6c:6d:bc:e3:e2:db:78: 2b:bb:45:db:0d:bc:5e:85:04:b4:b5:2c:d4:40:9a:58:da:67: c3:e5:f3:b3:cd:81:75:0c:8f:72:dd:a8:62:7b:ab:68:07:50: 6c:46:47:70:8d:79:b8:9a:6b:de:39:0c:1f:a4:6b:38:15:6b: 66:37:30:22:5b:9f:d1:fe:bb:f9:77:b5:64:be:d0:99:df:d7: e9:9b:67:c8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6lqmNIkQlazE57PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwYjk1MWUtNzUzOC00MWZiLTk3ZDItMmRkOTM5M2Qz NTQxMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk YTg2MmRkY2EtZTcxOC00YTMzLTg1MTYtZDllMWQ2YmU2MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VCGSWVOPY35BkUbsBg11vkwfl7KkYkUMmxI 01N05s6SW7xXmObkrDGY+4U8V8w/aNZMUF3RhgylIudfl1RBB5bhXP9cN/AkNQPN p1KA7uMph23vNtXXEhoivnu1cPIIFed3k1Tl/mVXWAZu0yna3roFZAf0Prh/YHQE ps0/SROQkmUFHhWZpAZ0eRxY1R765wfWilyEG3ilOEGN+hGoR2Eny2TwPl5mq7AJ kTf/BGkN/6eW0SVXDOfuMlLhzv514X2ZUyIrcdO7CBy424gHRRK3AwzQc/gfG53d j7pLpn8Ff73xtW3lIZgrRaMgpzLFb11z83U1tnI4xPri6+IOkQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCwjWRcfBHXZoVPWLCP2yYL0amX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBi OTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5MzkzZDM1NDEvM2U4NzMzYzEtYTJlMi0z ZWRkLWI4ZjItMDcwYTJkNTk4ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTIwYjk1MWUtNzUzOC00MWZiLTk3 ZDItMmRkOTM5M2QzNTQxL2EyMGI5NTFlLTc1MzgtNDFmYi05N2QyLTJkZDkzOTNk MzU0MS5jcmwwHwYDVR0jBBgwFoAUlidlPsa9hFYOtlcmlFHIUQMD2IgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBiOTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5 MzkzZDM1NDEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACO+RUD BACO+RYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEASKgD59sMoqRzTfFa/KdfefPwPTFJEpzrGWjew0MQuzIf Jc+i3Pkq/6Ah7CUI31sB224szppVf8W2HVH1ffiVpwSHxs99PxF9X5gyKdkC2btV wRmkkaZRjD6QOM25gpvq51ownkrhKAMzzcZONBUj6s0Omifyq+sqEKTwastVSTA6 sz8oHo1PxelY74REh8msndebe2/KTSdkqppE7MP0/fAKnjZdn0THaC2xpXZsbbzj 4tt4K7tF2w28XoUEtLUs1ECaWNpnw+Xzs82BdQyPct2oYnuraAdQbEZHcI15uJpr 3jkMH6RrOBVrZjcwIluf0f67+Xe1ZL7Qmd/X6ZtnyA== -----END CERTIFICATE-----Generated at Wed Jul 29 14:14:05 2026 by rpki-client