$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa File: 955f3a04-020b-3de3-a057-2ce2758a7a1e.roa (raw, json) Hash identifier: 6jbnnXYdS7LRMpkvr2evHuMhu0wMJz3ipiCxOutiKfo= Subject key identifier: B7:09:2F:EE:A0:15:42:DB:45:E0:E9:93:54:2D:6B:B3:D7:93:65:25 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584D0217BAC2CEE71116F2121C80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 18779 IP address blocks: 142.252.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:ba:c2:ce:e7:11:16:f2:12:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=b236564a-3e30-46e2-90b4-7f6fe1540903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:36:bd:ef:ca:15:42:37:f7:e7:53:f6:c2: 20:3e:ff:c2:ef:4a:09:71:2b:a4:94:a4:f5:27:28: 02:f9:b7:d0:24:93:8e:46:4f:bd:7b:2f:35:c5:45: 27:6f:d5:5b:24:46:a6:aa:38:f3:bd:c0:98:1a:a9: 5e:a6:e5:d6:4c:87:2f:1c:a8:04:e5:e8:dc:b2:da: e4:8d:e7:37:ce:72:c9:36:01:7c:7c:cf:75:b3:ad: fc:3c:8e:ea:6c:95:d8:5b:30:e8:2c:75:26:43:a8: dc:be:db:c1:60:01:93:3e:6e:71:de:3a:ef:d8:c2: 1b:7f:a9:ee:9f:8a:64:be:d4:f9:b4:7f:b6:42:1b: 0f:6a:bc:fb:70:1b:c1:88:e4:f0:3a:1f:eb:db:5d: cc:43:53:f3:33:59:09:8c:10:33:a7:f8:7e:4f:89: f4:8e:57:14:0f:e1:8e:90:41:0d:b2:c2:3d:05:27: 70:56:ac:3c:3f:af:9f:09:8e:e6:c5:fb:11:3c:cf: 1b:dc:46:90:00:e9:7b:dc:89:3e:71:5d:27:86:c7: 89:15:4a:2d:fb:dd:c1:b4:d4:65:0f:89:86:c3:c9: 4a:90:fc:41:96:06:ec:4f:27:9e:ec:bf:60:63:e5: da:81:3f:44:ff:83:fb:f6:71:7b:3f:4c:77:fa:07: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:09:2F:EE:A0:15:42:DB:45:E0:E9:93:54:2D:6B:B3:D7:93:65:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/955f3a04-020b-3de3-a057-2ce2758a7a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:58:a5:8a:9a:f8:a9:af:9a:2f:80:63:39:43:fd:10:87:8f: 1b:9d:d1:63:7c:df:3e:d0:17:7f:ed:48:66:c8:ed:87:91:44: c8:be:a1:47:38:1c:68:90:ad:79:55:93:e6:84:d7:d6:bf:d6: 2c:27:33:cf:e3:39:62:b2:fa:e8:84:4b:2d:1e:5e:52:79:95: c9:a8:27:80:c5:82:42:09:1e:b9:59:02:60:95:45:ed:6f:06: 8e:f5:10:e8:f7:91:15:8a:50:dd:17:91:4f:1b:29:61:8c:97: bb:66:88:87:45:61:17:22:b7:99:d5:97:9f:37:db:95:eb:ec: c7:08:d9:9c:5f:e2:7b:57:e0:83:29:d6:fb:16:ca:4d:b6:f7: e4:da:75:70:d0:07:a2:0b:f7:ec:32:4c:bf:55:44:06:8b:9c: d8:81:e4:4c:73:98:7e:35:55:5c:c5:be:20:fc:bc:46:03:10: c9:f6:85:e6:cf:51:81:71:3b:f0:b3:e3:d1:9b:ea:0e:10:6d: f6:3e:4f:72:5b:ea:9c:eb:2e:76:75:63:5f:33:c3:99:7f:aa: 93:ae:83:67:b8:56:d3:6a:46:fe:74:63:e3:5e:0a:b0:e4:24: 50:85:ba:94:39:e3:0b:f5:fd:ef:1f:f4:fd:c0:4c:52:70:3c: d1:b7:9c:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF7rCzucRFvISHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjIzNjU2NGEtM2UzMC00NmUyLTkwYjQtN2Y2ZmUxNTQwOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopE2ve/KFUI39+dT9sIgPv/C70oJcSuklKT1 JygC+bfQJJOORk+9ey81xUUnb9VbJEamqjjzvcCYGqlepuXWTIcvHKgE5ejcstrk jec3znLJNgF8fM91s638PI7qbJXYWzDoLHUmQ6jcvtvBYAGTPm5x3jrv2MIbf6nu n4pkvtT5tH+2QhsParz7cBvBiOTwOh/r213MQ1PzM1kJjBAzp/h+T4n0jlcUD+GO kEENssI9BSdwVqw8P6+fCY7mxfsRPM8b3EaQAOl73Ik+cV0nhseJFUot+93BtNRl D4mGw8lKkPxBlgbsTyee7L9gY+XagT9E/4P79nF7P0x3+gdLbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcJL+6gFULbReDpk1Qta7PXk2UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOTU1ZjNhMDQtMDIwYi0z ZGUzLWEwNTctMmNlMjc1OGE3YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvwhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNYpYqa+Kmvmi+AYzlD/RCHjxud0WN83z7QF3/tSGbI7YeRRMi+oUc4 HGiQrXlVk+aE19a/1iwnM8/jOWKy+uiESy0eXlJ5lcmoJ4DFgkIJHrlZAmCVRe1v Bo71EOj3kRWKUN0XkU8bKWGMl7tmiIdFYRcit5nVl58325Xr7McI2Zxf4ntX4IMp 1vsWyk229+TadXDQB6IL9+wyTL9VRAaLnNiB5ExzmH41VVzFviD8vEYDEMn2hebP UYFxO/Cz49Gb6g4QbfY+T3Jb6pzrLnZ1Y18zw5l/qpOug2e4VtNqRv50Y+NeCrDk JFCFupQ54wv1/e8f9P3ATFJwPNG3nFI= -----END CERTIFICATE-----Generated at Sun Mar 1 19:20:51 2026 by rpki-client