$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/b3418295-8f71-389d-81e6-f83ff4e201a7.roa File: b3418295-8f71-389d-81e6-f83ff4e201a7.roa (raw, json) Hash identifier: ZTbpNFb6e8ca16qTNgKHjitbw0Bzef/q4g/pmQ4mxEw= Subject key identifier: D8:87:5E:C3:56:02:15:F5:86:33:22:7D:7C:12:49:B7:9A:5A:BA:67 Certificate issuer: /CN=a2f16351-7ad6-41a4-92cd-1031003a6a0d Certificate serial: 010D0C9F4328584D0217830DBFD892B67D7AB900 Authority key identifier: EC:69:3A:E3:0B:EC:FA:1E:6B:86:19:A5:DE:40:F2:B0:F6:69:40:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/b3418295-8f71-389d-81e6-f83ff4e201a7.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 399138 IP address blocks: 142.248.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/a2f16351-7ad6-41a4-92cd-1031003a6a0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/a2f16351-7ad6-41a4-92cd-1031003a6a0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:83:0d:bf:d8:92:b6:7d:7a:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f16351-7ad6-41a4-92cd-1031003a6a0d Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=68a26f1c-c8f7-41e5-867c-3c40a1ced940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:4b:f9:e8:c2:99:54:a1:24:2b:f3:ab:25: 7e:e0:ab:06:d0:e2:8e:30:89:f4:d5:a6:82:74:86: 97:ee:dd:bc:17:a1:7d:55:e7:43:8c:d7:22:45:48: 98:d2:96:85:95:88:f6:1a:fa:61:c7:ba:e2:74:d4: 25:37:08:ff:74:a8:71:3d:25:ea:11:cf:51:27:ca: 47:32:cc:53:f0:f3:4a:7c:c0:81:d7:d4:3c:d8:92: d0:c2:75:59:90:e7:5e:79:4d:db:50:56:57:82:89: 54:a4:2c:8e:50:11:be:7f:22:57:10:99:c2:97:7a: ce:c4:22:df:b1:55:6e:02:bc:ab:a0:f0:8b:37:c0: c7:4f:1d:5b:45:d5:7e:05:b3:6c:12:3f:89:00:4b: 3e:b9:f1:f6:15:02:42:9f:a8:e6:71:8d:ee:a2:be: 9b:f8:bf:09:c8:26:6c:ec:c4:8c:25:d7:13:80:d4: 62:30:a0:93:6f:98:f3:bd:12:53:86:72:31:22:7a: c2:97:14:fc:94:f2:03:a0:d1:0a:e3:e9:16:68:e2: 8c:c2:f6:c5:d8:54:f1:b3:54:aa:ac:c9:29:2d:a5: 7d:dd:29:ce:a9:b3:b4:f8:3a:a1:03:79:bb:4e:7e: f1:d7:08:87:be:22:d6:54:aa:e3:2a:cd:53:37:d1: 32:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:87:5E:C3:56:02:15:F5:86:33:22:7D:7C:12:49:B7:9A:5A:BA:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/b3418295-8f71-389d-81e6-f83ff4e201a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/a2f16351-7ad6-41a4-92cd-1031003a6a0d.crl X509v3 Authority Key Identifier: keyid:EC:69:3A:E3:0B:EC:FA:1E:6B:86:19:A5:DE:40:F2:B0:F6:69:40:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d.cer sbgp-ipAddrBlock: critical IPv4: 142.248.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:87:2d:04:91:01:e3:cb:7a:6b:7e:1c:cb:50:30:fc:df:0b: 57:dd:f9:60:bf:e2:89:0d:7e:2e:fb:85:08:42:3f:7c:f9:f4: 41:1a:96:4a:a2:1a:97:1d:6b:eb:f4:35:7e:18:c2:64:ad:b2: 2e:44:24:1d:fb:3e:9d:50:27:f2:20:a7:bb:0c:b6:9a:39:fc: 66:a4:ec:c3:e4:fe:13:ef:91:08:2d:3e:21:59:01:00:98:75: db:91:f9:c8:54:d8:d3:a6:62:79:72:da:31:2d:94:fe:25:ed: 55:ec:17:a2:38:9b:9e:f7:cc:7e:28:db:77:70:ca:09:e3:a5: 84:b2:64:f1:b4:f6:c3:7a:92:72:d3:fd:14:cd:fa:99:0d:5d: de:7d:f6:5e:ea:f7:c5:60:06:36:a1:75:4f:b5:bc:ef:b0:c8: b0:fc:97:1c:90:1c:5b:8e:f6:2c:7d:4f:32:d2:1a:41:b2:2f: 2a:8c:c3:60:33:26:1e:49:5e:c1:91:29:19:91:ef:2e:24:4d: ba:17:de:07:fd:2c:99:d5:4b:7b:e9:af:c0:87:32:11:ba:44: 07:4c:00:ee:3f:34:9f:47:b6:4a:72:63:6e:63:0d:b6:e0:5d: 8c:6c:63:20:f0:5e:9e:e0:75:7c:83:e0:ee:ec:ec:1c:72:96: e2:ed:ae:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF4MNv9iStn16uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJmMTYzNTEtN2FkNi00MWE0LTkyY2QtMTAzMTAwM2E2 YTBkMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjhhMjZmMWMtYzhmNy00MWU1LTg2N2MtM2M0MGExY2VkOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3pL+ejCmVShJCvzqyV+4KsG0OKOMIn01aaC dIaX7t28F6F9VedDjNciRUiY0paFlYj2Gvphx7ridNQlNwj/dKhxPSXqEc9RJ8pH MsxT8PNKfMCB19Q82JLQwnVZkOdeeU3bUFZXgolUpCyOUBG+fyJXEJnCl3rOxCLf sVVuAryroPCLN8DHTx1bRdV+BbNsEj+JAEs+ufH2FQJCn6jmcY3uor6b+L8JyCZs 7MSMJdcTgNRiMKCTb5jzvRJThnIxInrClxT8lPIDoNEK4+kWaOKMwvbF2FTxs1Sq rMkpLaV93SnOqbO0+DqhA3m7Tn7x1wiHviLWVKrjKs1TN9EyFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiHXsNWAhX1hjMifXwSSbeaWrpnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmYx NjM1MS03YWQ2LTQxYTQtOTJjZC0xMDMxMDAzYTZhMGQvYjM0MTgyOTUtOGY3MS0z ODlkLTgxZTYtZjgzZmY0ZTIwMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTJmMTYzNTEtN2FkNi00MWE0LTky Y2QtMTAzMTAwM2E2YTBkL2EyZjE2MzUxLTdhZDYtNDFhNC05MmNkLTEwMzEwMDNh NmEwZC5jcmwwHwYDVR0jBBgwFoAU7Gk64wvs+h5rhhml3kDysPZpQNgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmYxNjM1MS03YWQ2LTQxYTQtOTJjZC0xMDMx MDAzYTZhMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCHLQSRAePLemt+HMtQMPzfC1fd+WC/4okNfi77hQhCP3z59EEalkqi Gpcda+v0NX4YwmStsi5EJB37Pp1QJ/Igp7sMtpo5/Gak7MPk/hPvkQgtPiFZAQCY dduR+chU2NOmYnly2jEtlP4l7VXsF6I4m573zH4o23dwygnjpYSyZPG09sN6knLT /RTN+pkNXd599l7q98VgBjahdU+1vO+wyLD8lxyQHFuO9ix9TzLSGkGyLyqMw2Az Jh5JXsGRKRmR7y4kTboX3gf9LJnVS3vpr8CHMhG6RAdMAO4/NJ9HtkpyY25jDbbg XYxsYyDwXp7gdXyD4O7s7BxyluLtrgo= -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:33 2026 by rpki-client