$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/026ccb72-c117-308c-aa09-3af8c0e2afb8.roa File: 026ccb72-c117-308c-aa09-3af8c0e2afb8.roa (raw, json) Hash identifier: cvQG6g/a/GHz9mrQXOxFto2EHWSbzo7sbIt/op77Rc8= Subject key identifier: 75:D5:3C:3C:5A:0A:68:6E:FE:8E:5E:8C:96:2A:26:98:59:22:27:B6 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584DFBD5DB2D32EA72D5028D8480 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/026ccb72-c117-308c-aa09-3af8c0e2afb8.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 12119 IP address blocks: 142.204.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:db:2d:32:ea:72:d5:02:8d:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=9f888c9f-b40c-4dbe-8971-f420a9687e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cc:d9:e9:72:ad:aa:9d:f8:26:13:82:98:6d: 63:05:95:4b:bf:8e:c8:9b:b2:05:a9:06:90:81:c1: bb:d4:f1:70:ed:46:2c:16:2e:5e:e2:45:25:07:c1: 9c:96:f6:0f:b5:2c:dd:c1:83:0f:93:15:6b:ef:dc: ea:58:d6:59:8d:d1:bf:e2:7d:25:6d:87:53:8e:21: b4:5d:0b:b2:06:04:ae:24:88:94:b3:17:40:c8:a4: 91:8b:41:5b:32:7d:db:8d:48:7d:67:5c:c0:d7:e3: 86:d6:15:b7:05:aa:16:62:21:36:89:1d:4f:9e:b5: 15:d1:07:59:cb:d9:fb:51:bc:56:ad:61:f9:06:4c: a9:d1:1e:bd:a2:de:83:c0:99:84:c1:dd:cf:cc:a9: 55:6b:ae:66:2e:52:eb:d7:b6:54:ad:7c:87:8a:d3: dc:93:b2:40:08:98:5b:61:95:1d:65:4c:ec:5e:58: 13:a2:30:61:89:14:90:8b:e5:ba:02:82:0a:58:b7: d2:06:66:5f:e2:1b:9d:33:2e:56:ca:9f:a9:54:99: 58:85:fa:ec:44:c3:e7:9b:42:9b:74:3c:55:8c:ec: d1:f7:57:83:70:b3:83:7a:51:0c:eb:64:2f:a2:b9: 99:1e:85:6e:2f:f4:e6:2b:6b:89:5e:df:4d:b4:7b: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D5:3C:3C:5A:0A:68:6E:FE:8E:5E:8C:96:2A:26:98:59:22:27:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/026ccb72-c117-308c-aa09-3af8c0e2afb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 142.204.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:d0:db:b0:dc:c2:3c:39:18:71:4d:96:60:f6:64:6a:b2:4b: 8d:e6:cd:e8:2e:92:d4:d3:f2:e6:a1:01:23:73:0a:3b:b1:c4: 1c:e5:ac:58:42:8f:d8:93:9e:09:2e:f4:2a:71:99:9e:7f:c1: 2a:3a:14:4c:18:e5:7f:aa:38:e4:5c:e3:15:eb:61:40:46:9d: da:2f:14:30:6d:81:64:29:38:43:cf:34:58:73:b6:be:8c:43: 5f:8f:5d:9f:70:d0:56:14:d0:58:33:9b:72:20:f1:48:b5:ff: 6c:b8:2c:7e:4f:0b:90:e1:f1:99:19:39:63:7f:0e:b4:c0:c0: f9:f7:62:83:ce:93:c6:86:4a:fc:e4:88:2a:80:fb:18:12:3e: e6:64:ce:ee:fa:5e:3f:0f:de:1e:30:0e:cf:4c:f5:8c:5a:db: 5c:81:d0:81:7a:d5:62:cc:d3:15:05:25:f1:8b:9a:37:75:a0: a3:42:90:ce:88:22:dc:2e:f1:10:a7:27:51:90:8e:e2:f4:cd: fd:c0:73:dc:3a:4f:ac:24:87:c0:e2:58:f5:0b:fc:7e:f8:7d: 92:21:13:4a:fb:22:e8:b0:b9:c4:96:76:f7:6f:db:aa:5c:5a: 25:1c:a0:f7:b4:6f:f0:63:d7:f3:e2:ef:d6:84:da:17:9a:bc: e4:8d:c6:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371dstMupy1QKNhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk OWY4ODhjOWYtYjQwYy00ZGJlLTg5NzEtZjQyMGE5Njg3ZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMzZ6XKtqp34JhOCmG1jBZVLv47Im7IFqQaQ gcG71PFw7UYsFi5e4kUlB8GclvYPtSzdwYMPkxVr79zqWNZZjdG/4n0lbYdTjiG0 XQuyBgSuJIiUsxdAyKSRi0FbMn3bjUh9Z1zA1+OG1hW3BaoWYiE2iR1PnrUV0QdZ y9n7UbxWrWH5Bkyp0R69ot6DwJmEwd3PzKlVa65mLlLr17ZUrXyHitPck7JACJhb YZUdZUzsXlgTojBhiRSQi+W6AoIKWLfSBmZf4hudMy5Wyp+pVJlYhfrsRMPnm0Kb dDxVjOzR91eDcLODelEM62QvormZHoVuL/TmK2uJXt9NtHuTBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXVPDxaCmhu/o5ejJYqJphZIie2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvMDI2Y2NiNzItYzExNy0z MDhjLWFhMDktM2FmOGMwZTJhZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjsxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANvQ27Dcwjw5GHFNlmD2ZGqyS43mzeguktTT8uahASNzCjuxxBzlrFhC j9iTngku9CpxmZ5/wSo6FEwY5X+qOORc4xXrYUBGndovFDBtgWQpOEPPNFhztr6M Q1+PXZ9w0FYU0Fgzm3Ig8Ui1/2y4LH5PC5Dh8ZkZOWN/DrTAwPn3YoPOk8aGSvzk iCqA+xgSPuZkzu76Xj8P3h4wDs9M9Yxa21yB0IF61WLM0xUFJfGLmjd1oKNCkM6I Itwu8RCnJ1GQjuL0zf3Ac9w6T6wkh8DiWPUL/H74fZIhE0r7IuiwucSWdvdv26pc WiUcoPe0b/Bj1/Pi79aE2heavOSNxts= -----END CERTIFICATE-----Generated at Sat Jun 13 22:48:44 2026 by rpki-client