$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa File: bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa (raw, json) Hash identifier: twALIas52wJFDkVuJ2PbsfTLnss7ndsX/LmmQAYDX0A= Subject key identifier: F7:78:81:98:1B:C0:49:CF:AF:42:E7:B5:AB:D7:11:70:14:EB:39:B0 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584E28099DD21AF2D41B727A3D40 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 153371 IP address blocks: 142.249.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:9d:d2:1a:f2:d4:1b:72:7a:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=27a870d3-f5c6-46a3-9ba8-dc49f44ea389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:fc:93:f9:30:01:db:b0:c2:17:27:2d:d6: 8e:00:37:ff:73:f9:42:84:83:95:dc:f9:f6:a2:77: 06:fe:fa:9e:6b:53:db:0d:ca:69:cd:f7:a1:a1:b5: ac:29:a3:08:53:c0:1c:bb:ce:4e:57:57:ed:18:ea: 54:4a:17:51:b5:09:34:18:77:c8:d2:33:47:8b:b6: e9:46:9d:df:5e:89:a7:3b:42:67:d9:27:3d:8f:0a: 08:82:3a:71:3b:3e:57:54:ac:0f:24:3f:d5:be:fa: ee:5c:b7:c2:78:1b:14:fd:1c:d9:19:fb:d2:b5:74: 51:d4:66:6f:07:f8:85:dd:47:48:cd:20:d5:de:8a: ec:82:22:0d:da:54:05:37:8d:38:38:78:84:82:31: 21:3f:be:aa:15:b6:6e:74:2e:fa:fd:96:d5:5b:13: 37:4f:55:5c:da:51:60:cf:0a:a2:3b:ea:8c:a6:63: a5:d0:88:b6:35:76:60:62:2a:66:07:0c:d3:11:63: fe:36:50:ce:22:dd:95:66:6d:bf:28:f6:2f:b2:92: 40:41:82:8c:dc:47:1a:ee:6a:90:f6:58:d4:12:6b: db:c3:2c:77:91:3c:e7:62:d8:d1:3c:d0:c5:3f:d9: 53:4b:cf:27:a5:61:43:58:99:88:eb:b0:20:77:2b: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:78:81:98:1B:C0:49:CF:AF:42:E7:B5:AB:D7:11:70:14:EB:39:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/bcf3ed6f-88a6-3d8a-afd1-b7e75ff57c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 142.249.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:eb:0d:ee:41:01:be:d8:74:e2:46:a1:c6:a5:ef:9c:c8:3d: 15:54:f6:ca:5c:5f:d1:aa:9e:5a:68:f1:b3:d8:4a:df:19:d9: eb:b0:f4:29:8d:d2:72:b0:ce:2f:74:4f:f2:02:31:51:d7:d2: 20:e3:a1:86:e3:01:3b:ad:9e:79:29:3a:ef:8e:a7:b4:28:02: 63:a7:fd:12:bd:fe:fd:bd:2f:19:ed:aa:ff:e8:af:7e:10:9f: 2b:61:41:2c:79:e2:5b:87:92:07:0d:d2:c4:d5:6a:b6:bf:a0: 1c:7f:de:ec:71:44:99:5a:4c:d3:75:0a:32:76:ef:2f:10:4d: 26:f3:8e:7b:7e:7f:bb:8b:63:b3:55:e0:26:c7:73:77:d9:4a: 94:10:83:69:12:56:41:51:ae:f0:9b:5f:a9:4e:ab:fc:29:a8: 10:32:cf:ee:ff:5d:11:41:50:ef:6e:a2:ae:cb:35:8f:8e:51: 1b:bb:52:c9:9f:51:81:de:6d:ba:6a:28:d7:5c:b1:d0:66:d1: 9c:04:ca:f9:4f:c8:0b:fe:e2:c8:dd:ff:28:7c:0c:9f:d1:a9: e3:2c:36:f0:7a:c0:66:e7:48:2b:d6:9c:82:af:e7:f0:e6:e4: e7:44:c7:b4:cd:dd:65:06:0f:2b:32:6a:86:88:05:e4:c8:9c: ed:43:b2:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCZ3SGvLUG3J6PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk MjdhODcwZDMtZjVjNi00NmEzLTliYTgtZGM0OWY0NGVhMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIz8k/kwAduwwhcnLdaOADf/c/lChIOV3Pn2 oncG/vqea1PbDcppzfehobWsKaMIU8Acu85OV1ftGOpUShdRtQk0GHfI0jNHi7bp Rp3fXomnO0Jn2Sc9jwoIgjpxOz5XVKwPJD/VvvruXLfCeBsU/RzZGfvStXRR1GZv B/iF3UdIzSDV3orsgiIN2lQFN404OHiEgjEhP76qFbZudC76/ZbVWxM3T1Vc2lFg zwqiO+qMpmOl0Ii2NXZgYipmBwzTEWP+NlDOIt2VZm2/KPYvspJAQYKM3Eca7mqQ 9ljUEmvbwyx3kTznYtjRPNDFP9lTS88npWFDWJmI67AgdyuDOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPd4gZgbwEnPr0LntavXEXAU6zmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvYmNmM2VkNmYtODhhNi0z ZDhhLWFmZDEtYjdlNzVmZjU3YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvrDe5BAb7YdOJGocal75zIPRVU9spcX9Gqnlpo8bPYSt8Z2euw9CmN 0nKwzi90T/ICMVHX0iDjoYbjATutnnkpOu+Op7QoAmOn/RK9/v29Lxntqv/or34Q nythQSx54luHkgcN0sTVara/oBx/3uxxRJlaTNN1CjJ27y8QTSbzjnt+f7uLY7NV 4CbHc3fZSpQQg2kSVkFRrvCbX6lOq/wpqBAyz+7/XRFBUO9uoq7LNY+OURu7Usmf UYHebbpqKNdcsdBm0ZwEyvlPyAv+4sjd/yh8DJ/RqeMsNvB6wGbnSCvWnIKv5/Dm 5OdEx7TN3WUGDysyaoaIBeTInO1DsoE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:49:27 2026 by rpki-client