$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/ace1e709-17e9-3f35-ad21-35fa7d91015c.roa File: ace1e709-17e9-3f35-ad21-35fa7d91015c.roa (raw, json) Hash identifier: pmA5ogQnTXfRAdpofAu7rpFMT5UkfDgyL5ScCzRz1D8= Subject key identifier: 15:6E:66:0C:36:12:BD:A5:1F:55:0C:C9:6B:E3:30:96:32:15:94:FC Certificate issuer: /CN=32652e19-5988-41fb-a45a-66b23c523f3b Certificate serial: 010D0C9F4328584D60E5122102CE6319E7B5CB00 Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/ace1e709-17e9-3f35-ad21-35fa7d91015c.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 210110 IP address blocks: 142.248.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:12:21:02:ce:63:19:e7:b5:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=4738e3f4-373a-4587-bf85-dd9b6ba48e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:15:44:a7:5c:c8:d1:23:ca:fd:16:9e:46: 6d:61:d5:2c:1f:91:3d:7a:44:a8:c5:b8:25:f7:81: f2:a1:4b:2f:16:d8:8a:2a:f3:e0:56:26:89:1c:e5: 50:8d:22:b7:de:c2:7c:cf:f2:d0:51:63:57:93:9f: d0:40:b2:1d:b7:70:e4:7c:01:97:ec:be:a8:e4:22: 07:ce:02:2e:44:01:e4:d1:62:1b:5d:af:71:d2:6e: ac:97:74:dc:69:25:d7:13:69:e9:11:d9:a8:45:46: 5a:65:4f:0b:e1:e4:0c:30:5e:13:3d:a9:0a:8c:e6: 8b:05:ee:32:66:c3:01:75:39:8c:09:29:f9:a1:0e: c1:88:50:24:03:53:b0:da:f8:3e:84:bd:12:44:c6: 3b:86:57:cf:d3:d7:63:63:67:1e:19:84:78:89:ae: 69:c9:68:77:ae:52:a7:6b:7d:de:58:be:9e:7c:33: c1:43:86:ab:3b:05:c0:5a:92:06:82:1e:99:02:de: c0:f3:8c:10:02:ae:df:30:ae:9f:0e:98:47:4d:45: 70:49:8b:12:4d:57:40:1e:e8:d5:7f:98:c2:b3:11: bf:db:c4:07:8b:be:39:d4:7d:05:cf:bc:ed:83:70: 3f:62:fc:df:91:38:4d:67:83:dd:15:9b:ae:31:f1: 37:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6E:66:0C:36:12:BD:A5:1F:55:0C:C9:6B:E3:30:96:32:15:94:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/ace1e709-17e9-3f35-ad21-35fa7d91015c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl X509v3 Authority Key Identifier: keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ed:2e:47:d2:2b:98:e5:5c:a8:2d:f0:cb:0d:0e:ff:df:c1: de:1c:61:db:e3:36:39:93:b5:ad:26:c0:02:04:56:68:db:58: ac:02:d8:0e:04:8f:5b:3f:45:0b:75:d8:26:81:e5:9c:81:9c: e0:e5:c3:1d:90:af:0b:62:d0:88:91:ac:53:3c:f3:d3:fc:f6: ef:a1:0e:83:ed:d1:ec:d1:7b:c2:5e:70:34:ca:6c:42:dd:3d: b6:7a:7f:aa:d5:e6:a1:df:32:46:1c:8d:77:33:e5:e2:ae:87: 58:f8:66:51:9d:cd:70:cc:92:09:95:66:f6:6b:1a:db:21:2b: 46:64:93:c8:49:e3:b6:47:2c:86:a9:cd:b7:8b:ea:62:d1:7d: 9e:ab:79:8e:03:0c:f0:fd:3c:ae:ea:fc:7a:9c:36:81:1e:2f: 26:ca:6e:d9:6f:0b:93:a8:6f:e7:79:17:71:69:79:92:fb:d8: 21:07:99:82:83:5c:56:6c:d9:a2:cc:51:72:a5:0d:cd:e8:7f: d0:9c:4b:35:22:4f:96:67:b3:db:46:13:17:84:73:35:78:b2: 9a:a6:13:c8:c4:81:be:a5:29:37:3f:33:a3:60:ca:e9:ba:27: df:4c:6d:aa:a2:ef:20:87:43:e1:fc:80:e6:32:ba:e4:fa:44: 3f:15:ac:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5RIhAs5jGee1ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI2NTJlMTktNTk4OC00MWZiLWE0NWEtNjZiMjNjNTIz ZjNiMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NDczOGUzZjQtMzczYS00NTg3LWJmODUtZGQ5YjZiYTQ4ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolwVRKdcyNEjyv0WnkZtYdUsH5E9ekSoxbgl 94HyoUsvFtiKKvPgViaJHOVQjSK33sJ8z/LQUWNXk5/QQLIdt3DkfAGX7L6o5CIH zgIuRAHk0WIbXa9x0m6sl3TcaSXXE2npEdmoRUZaZU8L4eQMMF4TPakKjOaLBe4y ZsMBdTmMCSn5oQ7BiFAkA1Ow2vg+hL0SRMY7hlfP09djY2ceGYR4ia5pyWh3rlKn a33eWL6efDPBQ4arOwXAWpIGgh6ZAt7A84wQAq7fMK6fDphHTUVwSYsSTVdAHujV f5jCsxG/28QHi7451H0Fz7ztg3A/YvzfkThNZ4PdFZuuMfE3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVuZgw2Er2lH1UMyWvjMJYyFZT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1 MmUxOS01OTg4LTQxZmItYTQ1YS02NmIyM2M1MjNmM2IvYWNlMWU3MDktMTdlOS0z ZjM1LWFkMjEtMzVmYTdkOTEwMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzI2NTJlMTktNTk4OC00MWZiLWE0 NWEtNjZiMjNjNTIzZjNiLzMyNjUyZTE5LTU5ODgtNDFmYi1hNDVhLTY2YjIzYzUy M2YzYi5jcmwwHwYDVR0jBBgwFoAUrWJ7cveJh0NtZMJTwuOF0WzytQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMjY1MmUxOS01OTg4LTQxZmItYTQ1YS02NmIy M2M1MjNmM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATtLkfSK5jlXKgt8MsNDv/fwd4cYdvjNjmTta0mwAIEVmjbWKwC2A4E j1s/RQt12CaB5ZyBnODlwx2Qrwti0IiRrFM889P89u+hDoPt0ezRe8JecDTKbELd PbZ6f6rV5qHfMkYcjXcz5eKuh1j4ZlGdzXDMkgmVZvZrGtshK0Zkk8hJ47ZHLIap zbeL6mLRfZ6reY4DDPD9PK7q/HqcNoEeLybKbtlvC5Oob+d5F3FpeZL72CEHmYKD XFZs2aLMUXKlDc3of9CcSzUiT5Zns9tGExeEczV4spqmE8jEgb6lKTc/M6Ngyum6 J99Mbaqi7yCHQ+H8gOYyuuT6RD8VrJU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:14:32 2026 by rpki-client