$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa File: ef8708ad-3d66-3e70-a91d-773c52885e52.roa (raw, json) Hash identifier: 5mZVj3gq9QJJIxiscKvoZGS+HHO3/HGqIoh2NhFQszA= Subject key identifier: 37:19:62:7C:6E:0D:00:68:49:2B:5F:F8:94:AB:2E:93:C7:A1:F4:81 Certificate issuer: /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Certificate serial: 010D0C9F4328584CAE572CAD8EFE6D988009B980 Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 32121 IP address blocks: 142.152.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2c:ad:8e:fe:6d:98:80:09:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d674c49c-5e13-4e62-ab81-3dc95996adae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:98:8f:5c:7e:94:3e:eb:a8:07:7b:b0:bf: 2c:da:79:e6:5a:3f:b0:67:1b:cf:e5:b8:c3:b7:13: 55:7a:61:fe:f4:42:7c:48:20:7d:9d:38:b6:42:24: 58:07:21:02:b2:a1:09:98:05:a2:e9:50:67:71:4c: 4b:f7:d5:2a:bb:9c:a6:1c:e4:ae:c0:0f:c1:7f:1b: cf:7e:21:01:07:ba:a0:57:1e:44:bf:b9:a9:37:70: 13:ce:0c:9b:ee:3b:80:da:b3:ac:e5:66:01:56:ad: 45:39:10:fd:cf:b4:54:37:76:06:f9:c9:af:a7:78: 5a:73:85:6a:cf:cc:ed:78:59:85:d5:2b:cf:79:68: d2:cb:19:35:a6:7d:2e:da:dd:c5:17:1a:0b:5a:88: f4:44:3e:de:a2:62:ac:4c:4c:89:2f:0c:9e:77:15: 63:14:29:65:88:5e:2a:20:d3:a4:a8:0b:e2:b5:97: 7d:6a:7b:09:3c:67:eb:b7:f0:04:e3:a8:32:13:23: d4:34:39:1c:77:41:bd:53:32:7d:92:4a:49:e1:f0: d9:3d:c1:b5:ad:e9:a8:2b:26:b7:31:73:a1:5d:86: 82:c4:10:05:c1:c4:69:69:b0:87:5e:e3:72:bd:91: 19:18:ac:cf:97:8b:29:e8:b2:df:de:74:7a:35:f8: 59:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:19:62:7C:6E:0D:00:68:49:2B:5F:F8:94:AB:2E:93:C7:A1:F4:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/ef8708ad-3d66-3e70-a91d-773c52885e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl X509v3 Authority Key Identifier: keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer sbgp-ipAddrBlock: critical IPv4: 142.152.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:06:62:e7:b6:a0:ab:b0:71:57:6c:ec:f6:84:5b:33:50:a2: 9b:2b:0a:fb:87:ed:e8:15:ee:7d:85:b2:5e:cd:e4:da:c2:c4: 27:fa:91:8c:bf:64:af:bc:29:ad:30:61:d7:e9:94:72:36:2c: d1:02:e5:af:8e:5e:21:b9:07:14:fc:3c:8d:bf:62:09:0e:bb: 20:5c:70:35:e5:ad:5c:ca:8e:ff:d9:1d:63:b4:25:42:ce:0c: 53:76:24:6c:86:01:5b:c1:b8:c4:28:90:ec:7b:c8:60:27:f3: 5d:34:5a:fd:65:bd:1f:a5:75:e5:38:78:e8:50:58:e5:c6:9c: b2:4e:3e:82:11:d9:9e:d8:a0:f8:a3:6e:3f:71:bc:f7:24:9c: c1:b7:ed:1f:a7:74:7b:1a:49:48:4b:fa:3e:13:e6:49:06:06: 5f:42:27:f7:8e:19:64:9a:b8:8a:01:a2:a1:b9:15:f8:f0:19: 96:ee:37:d4:53:54:81:8a:e6:94:c8:a0:22:6a:3e:ab:ff:02: 5d:26:9d:b4:d2:4d:da:00:fd:96:98:c6:27:d1:ff:43:35:7c: 52:b4:30:51:af:24:fe:1e:54:94:d4:57:4e:c3:28:89:16:a5: 6e:02:90:2a:4d:0d:e8:68:36:8d:5f:36:fe:78:76:30:ca:c7: 42:1d:ba:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyytjv5tmIAJuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzE2YjNmOTEtNGQ5ZC00NTIwLThjYTktY2UyNjE2YzM3 ZjRkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDY3NGM0OWMtNWUxMy00ZTYyLWFiODEtM2RjOTU5OTZhZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVyYj1x+lD7rqAd7sL8s2nnmWj+wZxvP5bjD txNVemH+9EJ8SCB9nTi2QiRYByECsqEJmAWi6VBncUxL99Uqu5ymHOSuwA/BfxvP fiEBB7qgVx5Ev7mpN3ATzgyb7juA2rOs5WYBVq1FORD9z7RUN3YG+cmvp3hac4Vq z8zteFmF1SvPeWjSyxk1pn0u2t3FFxoLWoj0RD7eomKsTEyJLwyedxVjFClliF4q INOkqAvitZd9ansJPGfrt/AE46gyEyPUNDkcd0G9UzJ9kkpJ4fDZPcG1remoKya3 MXOhXYaCxBAFwcRpabCHXuNyvZEZGKzPl4sp6LLf3nR6NfhZmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcZYnxuDQBoSStf+JSrLpPHofSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MTZi M2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2MTZjMzdmNGQvZWY4NzA4YWQtM2Q2Ni0z ZTcwLWE5MWQtNzczYzUyODg1ZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzE2YjNmOTEtNGQ5ZC00NTIwLThj YTktY2UyNjE2YzM3ZjRkLzcxNmIzZjkxLTRkOWQtNDUyMC04Y2E5LWNlMjYxNmMz N2Y0ZC5jcmwwHwYDVR0jBBgwFoAUIIgDn4hmZ9pBaWSbn0ULX6FbXBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83MTZiM2Y5MS00ZDlkLTQ1MjAtOGNhOS1jZTI2 MTZjMzdmNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjphAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEGYue2oKuwcVds7PaEWzNQopsrCvuH7egV7n2Fsl7N5NrCxCf6kYy/ ZK+8Ka0wYdfplHI2LNEC5a+OXiG5BxT8PI2/YgkOuyBccDXlrVzKjv/ZHWO0JULO DFN2JGyGAVvBuMQokOx7yGAn8100Wv1lvR+ldeU4eOhQWOXGnLJOPoIR2Z7YoPij bj9xvPcknMG37R+ndHsaSUhL+j4T5kkGBl9CJ/eOGWSauIoBoqG5FfjwGZbuN9RT VIGK5pTIoCJqPqv/Al0mnbTSTdoA/ZaYxifR/0M1fFK0MFGvJP4eVJTUV07DKIkW pW4CkCpNDehoNo1fNv54djDKx0Idupw= -----END CERTIFICATE-----Generated at Mon Mar 2 05:01:28 2026 by rpki-client