$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/a9d478a0-dd28-3241-80ee-f78ae660038e.roa File: a9d478a0-dd28-3241-80ee-f78ae660038e.roa (raw, json) Hash identifier: t0fFXodnm/YsN6WSnbA9Bdc6aZPZy6JaFmrfpxJav5M= Subject key identifier: 57:5D:3C:D3:B4:5C:23:99:15:0A:EE:76:DE:8B:08:FD:48:06:C2:47 Certificate issuer: /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Certificate serial: 010D0C9F4328584CAE572C9BB14573DB00938C80 Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/a9d478a0-dd28-3241-80ee-f78ae660038e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 32121 IP address blocks: 142.152.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2c:9b:b1:45:73:db:00:93:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d114ee72-a9df-42c2-8a2c-6a21393cd610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:ee:8a:37:28:61:b6:08:05:cd:52:7f:1b: 3d:09:e7:e9:74:d3:d5:b6:3a:fd:36:10:e6:f4:26: 72:7e:f8:31:d2:f8:f7:05:36:e9:7c:86:1b:94:9f: bd:e8:35:66:db:d5:0b:20:0c:68:85:d5:35:05:b4: 41:c5:b1:e2:53:5f:52:8e:f1:0b:7d:08:e6:77:e1: 09:ea:a2:f3:0d:b3:c9:14:1a:79:1c:20:8b:ea:fd: 88:b9:02:b1:77:30:58:c9:a5:48:59:35:17:4b:6e: db:ba:ea:41:3f:6e:14:b0:85:6a:5a:5e:19:5e:24: ff:67:a9:00:db:dd:05:b9:b3:cf:29:68:84:47:d1: 59:9d:a7:83:3b:8a:86:0d:20:54:cc:da:e0:e4:cf: 42:5e:83:ee:a4:41:8e:79:56:9e:8c:8f:8d:78:48: 3c:5f:34:5d:a2:5a:fe:6f:37:87:2d:2c:70:80:78: 91:d4:00:db:8f:0c:2f:23:f7:2a:86:0a:52:0e:37: 1f:bd:35:53:e4:07:99:c5:17:0b:68:34:f3:bc:be: 7b:01:e8:22:2a:e6:a5:fc:55:9e:cc:9d:7e:97:c2: f9:a4:cd:df:64:3b:6e:12:ee:19:7b:42:1a:c3:0d: f0:67:4e:0c:6b:39:90:ea:6f:15:51:16:60:a1:3c: d0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5D:3C:D3:B4:5C:23:99:15:0A:EE:76:DE:8B:08:FD:48:06:C2:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/a9d478a0-dd28-3241-80ee-f78ae660038e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl X509v3 Authority Key Identifier: keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer sbgp-ipAddrBlock: critical IPv4: 142.152.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fa:6e:79:36:1d:d6:e2:ae:0f:23:ff:04:a1:96:c1:53:9a: b0:f5:99:3a:db:26:ee:a3:a3:52:29:06:db:22:c2:25:06:45: 44:54:71:31:62:46:d7:bc:4e:62:6b:31:fa:c5:b4:62:fb:a1: 3d:fc:79:0f:d2:44:9d:11:ac:85:ea:a1:55:91:4b:96:29:72: 85:e3:2c:35:88:33:61:8e:7c:a7:9a:15:b5:d0:6f:d7:36:d5: f6:1e:44:7b:92:60:ed:26:07:d9:3e:fb:04:fb:c4:f7:b5:b2: 83:89:f9:d9:8f:dc:16:d3:75:11:21:27:82:92:2c:d9:b9:b9: 92:a1:17:df:9f:3a:3d:67:c7:e6:6c:fb:d5:dc:84:16:05:5d: 2f:40:5e:2c:37:b4:56:7b:88:75:80:e2:76:6e:5c:75:06:10: 1b:85:3c:8c:72:3d:40:b6:89:30:fb:0a:4a:fc:d3:9b:b2:1c: 01:b6:e0:9a:6d:b5:73:6a:a5:65:f2:15:6f:c4:a5:c3:cc:d1: 11:e9:d6:85:99:dd:2e:5b:01:84:88:ae:6e:fb:3c:2d:6f:4c: a7:3b:70:9e:77:a3:83:db:03:4b:2e:91:d2:6b:3c:3a:17:1a: c4:80:56:f3:0e:1e:a6:e3:cb:59:dd:3c:bf:c3:f9:27:fc:9d: 63:73:70:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyybsUVz2wCTjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE2YjNmOTEtNGQ5ZC00NTIwLThjYTktY2UyNjE2YzM3 ZjRkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDExNGVlNzItYTlkZi00MmMyLThhMmMtNmEyMTM5M2NkNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aruijcoYbYIBc1Sfxs9CefpdNPVtjr9NhDm 9CZyfvgx0vj3BTbpfIYblJ+96DVm29ULIAxohdU1BbRBxbHiU19SjvELfQjmd+EJ 6qLzDbPJFBp5HCCL6v2IuQKxdzBYyaVIWTUXS27buupBP24UsIVqWl4ZXiT/Z6kA 290FubPPKWiER9FZnaeDO4qGDSBUzNrg5M9CXoPupEGOeVaejI+NeEg8XzRdolr+ bzeHLSxwgHiR1ADbjwwvI/cqhgpSDjcfvTVT5AeZxRcLaDTzvL57AegiKual/FWe zJ1+l8L5pM3fZDtuEu4Ze0Iaww3wZ04MazmQ6m8VURZgoTzQdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFddPNO0XCOZFQrudt6LCP1IBsJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MTZi M2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZjMzdmNGQvYTlkNDc4YTAtZGQyOC0z MjQxLTgwZWUtZjc4YWU2NjAwMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzE2YjNmOTEtNGQ5ZC00NTIwLThj YTktY2UyNjE2YzM3ZjRkLzcxNmIzZjkxLTRkOWQtNDUyMC04Y2E5LWNlMjYxNmMz N2Y0ZC5jcmwwHwYDVR0jBBgwFoAUIIgDn4hmZ9pBaWSbn0ULX6FbXBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2 MTZjMzdmNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpg+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH6bnk2Hdbirg8j/wShlsFTmrD1mTrbJu6jo1IpBtsiwiUGRURUcTFi Rte8TmJrMfrFtGL7oT38eQ/SRJ0RrIXqoVWRS5YpcoXjLDWIM2GOfKeaFbXQb9c2 1fYeRHuSYO0mB9k++wT7xPe1soOJ+dmP3BbTdREhJ4KSLNm5uZKhF9+fOj1nx+Zs +9XchBYFXS9AXiw3tFZ7iHWA4nZuXHUGEBuFPIxyPUC2iTD7Ckr805uyHAG24Jpt tXNqpWXyFW/EpcPM0RHp1oWZ3S5bAYSIrm77PC1vTKc7cJ53o4PbA0sukdJrPDoX GsSAVvMOHqbjy1ndPL/D+Sf8nWNzcAU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:13:37 2026 by rpki-client