$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa File: 346ff034-1c54-37d5-9980-289efa2829b6.roa (raw, json) Hash identifier: HGe4RTjm1uGIisawn+k4phUnGtz5bAc3CV/IzwrYEV0= Subject key identifier: 91:B1:07:7D:5D:D9:A0:55:3E:16:05:44:18:A6:72:A3:AB:4B:56:70 Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Certificate serial: 010D0C9F4328584D5E1A4AD2B6C113BC7EAAC2C0 Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 142.147.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:4a:d2:b6:c1:13:bc:7e:aa:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=cbeb7a49-8dc5-4ce5-97f5-6aeb15dd83df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:87:b1:6c:4a:aa:38:35:10:45:5b:21:47:a5: 33:20:f2:c5:0a:86:48:d7:53:59:fd:ab:2e:49:67: 77:0b:8e:8d:56:10:43:4a:70:61:da:85:60:96:a1: 5a:70:65:c3:95:ae:ad:83:97:85:0e:c7:6c:c9:7b: ad:24:a2:19:4b:ca:50:05:8c:36:83:c8:0d:bb:37: 6e:e4:a1:2b:81:9e:89:97:90:26:e3:44:22:33:5b: b7:40:ab:84:5a:09:0f:3c:b3:8a:fa:dd:7c:7b:14: 3c:02:d1:98:c0:08:8c:bc:34:33:e8:4f:fb:1a:12: ab:f9:96:cc:c1:75:ac:44:1b:f3:e8:1e:32:81:da: 21:72:43:5b:80:23:7a:b0:53:0f:c3:aa:43:9f:e2: a9:6e:a7:b9:11:6c:c5:02:f9:e4:86:1e:d4:6e:4e: a6:72:2e:df:56:a1:e3:80:f6:29:b6:b6:40:94:fb: 9c:91:ae:3b:08:36:47:00:6e:33:35:0b:2b:19:15: 2d:98:b6:97:9a:78:13:95:04:31:75:80:0f:06:af: 8d:0f:33:97:88:d2:94:c1:4a:f2:e4:d7:1a:1c:2a: 62:6d:35:a2:90:3d:15:5b:05:7d:3e:8a:56:e3:c2: 87:f4:60:17:84:f2:59:e6:70:cb:15:f6:e3:b1:f0: 41:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B1:07:7D:5D:D9:A0:55:3E:16:05:44:18:A6:72:A3:AB:4B:56:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl X509v3 Authority Key Identifier: keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer sbgp-ipAddrBlock: critical IPv4: 142.147.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:34:92:fa:06:bb:2e:dc:1a:73:d2:1b:82:8d:42:3b:5b:c4: ca:8e:59:a9:ce:31:16:97:18:03:64:de:4f:9f:4b:07:1b:26: 9b:88:a0:61:c1:14:5a:4d:2d:a9:fb:c2:1a:eb:c0:db:4f:30: 39:52:a6:4a:cf:b1:d6:89:b4:23:80:3f:22:ab:53:5a:10:43: 20:04:22:5c:cb:f4:2e:e7:a8:ad:e1:36:3e:1d:89:97:0f:8f: 36:99:6d:b7:a5:00:55:72:05:ea:1c:22:5b:1f:c9:45:73:8b: 65:bd:eb:bb:6d:46:27:b7:ad:41:7c:d7:85:3e:60:b1:3d:f5: 84:4a:f8:8b:59:21:bf:0f:5c:ac:7a:c3:82:03:88:9b:54:82: 86:eb:df:10:d1:68:12:39:c2:14:d6:aa:65:3b:24:6b:aa:89: 0b:7f:b2:71:7f:e3:59:8f:4b:8f:c5:e0:68:5d:7c:f0:3d:25: 69:67:38:37:33:56:52:09:8f:e0:07:6e:b2:7b:a2:b9:1d:0e: f5:ab:04:9d:97:8b:0c:09:46:e3:cd:3c:df:15:1b:9c:0d:92: 07:bd:10:23:18:32:76:64:12:d8:f2:af:14:3c:08:a1:30:d0: c5:76:37:15:6e:62:84:98:5b:25:45:1b:28:79:88:d0:1b:33: 50:cf:fb:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGkrStsETvH6qwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3 MGE0MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk Y2JlYjdhNDktOGRjNS00Y2U1LTk3ZjUtNmFlYjE1ZGQ4M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oexbEqqODUQRVshR6UzIPLFCoZI11NZ/asu SWd3C46NVhBDSnBh2oVglqFacGXDla6tg5eFDsdsyXutJKIZS8pQBYw2g8gNuzdu 5KErgZ6Jl5Am40QiM1u3QKuEWgkPPLOK+t18exQ8AtGYwAiMvDQz6E/7GhKr+ZbM wXWsRBvz6B4ygdohckNbgCN6sFMPw6pDn+Kpbqe5EWzFAvnkhh7Ubk6mci7fVqHj gPYptrZAlPucka47CDZHAG4zNQsrGRUtmLaXmngTlQQxdYAPBq+NDzOXiNKUwUry 5NcaHCpibTWikD0VWwV9PopW48KH9GAXhPJZ5nDLFfbjsfBBJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGxB31d2aBVPhYFRBimcqOrS1ZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMzQ2ZmYwMzQtMWM1NC0z N2Q1LTk5ODAtMjg5ZWZhMjgyOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0 YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5 NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpMKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg0kvoGuy7cGnPSG4KNQjtbxMqOWanOMRaXGANk3k+fSwcbJpuIoGHB FFpNLan7whrrwNtPMDlSpkrPsdaJtCOAPyKrU1oQQyAEIlzL9C7nqK3hNj4diZcP jzaZbbelAFVyBeocIlsfyUVzi2W967ttRie3rUF814U+YLE99YRK+ItZIb8PXKx6 w4IDiJtUgobr3xDRaBI5whTWqmU7JGuqiQt/snF/41mPS4/F4GhdfPA9JWlnODcz VlIJj+AHbrJ7orkdDvWrBJ2XiwwJRuPNPN8VG5wNkge9ECMYMnZkEtjyrxQ8CKEw 0MV2NxVuYoSYWyVFGyh5iNAbM1DP+/0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:28:45 2026 by rpki-client