$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa File: 4df80e12-1fe6-3764-926c-c35dada42f64.roa (raw, json) Hash identifier: B17AvF5EkAnEVwP58wrbRt97BlNxKQXC9pCPB/3pIjc= Subject key identifier: 4D:A3:17:7C:73:C6:DB:56:43:D6:E5:46:5A:43:F7:CC:BD:8C:87:40 Certificate issuer: /CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2 Certificate serial: 010D0C9F4328584D703FE7B5C947841ACE144AC0 Authority key identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 401441 IP address blocks: 142.249.28.0/23 maxlen: 24 2602:f7b2::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e7:b5:c9:47:84:1a:ce:14:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=8966078c-da61-45a8-88c8-a1da893dd871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:c7:59:90:0f:b3:fa:09:b6:5b:4d:fe:e7: 18:7e:9c:74:0b:3f:4a:9e:70:15:48:fd:82:b1:3e: 88:e7:d2:a6:a8:7a:37:98:43:2c:bf:90:a8:33:69: f6:30:47:c7:0f:e3:70:61:c1:ce:a0:09:b8:d7:39: cb:15:9f:ba:60:06:56:44:b2:ca:cf:43:23:fb:c6: 1d:9e:01:6c:ea:19:60:4e:98:58:c7:6c:15:13:a0: 0d:9d:63:bd:d3:2f:c0:bc:4f:11:fe:4c:37:3c:43: e3:b4:4c:5b:4b:0a:56:73:e1:a3:bb:d5:c5:3c:f5: 8b:eb:03:c6:ce:13:3a:7f:e2:2f:c3:2f:a4:e0:4d: e1:be:c6:fc:99:93:7c:69:05:da:3a:fd:42:d4:65: 4b:15:e4:7d:31:50:57:bc:d0:16:a5:6b:9e:38:f7: bf:5e:a5:da:53:e4:b4:00:0a:f6:0d:6e:5d:96:20: 52:08:34:5e:c2:22:74:4e:72:b2:d8:5c:d9:d7:1a: 08:13:db:71:6d:f3:a8:69:33:6b:65:2b:09:b4:d3: b6:b3:2d:02:ae:50:4c:7d:2d:d9:06:10:c1:46:77: 9b:3a:ad:45:66:b3:7f:b8:92:53:ad:15:52:54:b2: db:6f:c4:56:4a:55:b4:c9:67:ef:0e:c5:ad:08:20: 2c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A3:17:7C:73:C6:DB:56:43:D6:E5:46:5A:43:F7:CC:BD:8C:87:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.crl X509v3 Authority Key Identifier: keyid:44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer sbgp-ipAddrBlock: critical IPv4: 142.249.28.0/23 IPv6: 2602:f7b2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:15:51:39:33:85:af:c8:be:de:42:69:07:0c:70:57:d6:76: a5:4d:05:de:41:ee:db:d9:80:e5:57:7d:3c:c0:1a:c7:1b:f0: 40:74:e2:47:bf:ef:73:b8:69:85:a5:a9:7f:9c:64:41:31:c0: 62:bb:12:57:c8:f0:36:1e:9e:cc:14:17:35:64:42:fd:15:9c: 61:ec:de:10:d3:2a:c9:73:de:76:9e:cd:c5:df:40:2a:2a:5c: a8:eb:23:2f:e1:0d:36:99:3c:33:8d:25:8c:d5:c1:aa:34:3a: 18:78:f7:01:43:f3:02:24:3c:72:f9:a8:7b:34:be:04:63:52: fa:8b:1b:55:db:b6:95:95:f9:e5:21:3d:e5:aa:07:9f:b8:3c: 8c:fb:20:d3:ac:ca:c2:0e:0d:68:81:75:7f:76:b1:4a:4b:45: 40:8a:59:e4:e1:23:c9:ba:66:36:4c:10:00:31:f1:9f:58:1d: 8f:ad:13:f1:e5:44:ec:25:c5:4e:bc:6d:f2:4c:08:e5:fb:ee: 8c:da:a0:8f:33:f8:bd:98:2a:ae:49:ee:2d:b0:0b:f3:f3:af: 0c:b6:12:38:ad:27:2e:3f:82:83:e7:4c:8d:bb:52:bd:f3:30: bc:17:e7:fb:56:ea:ef:e9:aa:57:77:45:43:90:94:46:86:c1: fc:e0:b4:15 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1wP+e1yUeEGs4USsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEwNjBmYTMtZTJmMS00ODU3LWFjZjMtOWE5OGE5OGRm NmYyMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ODk2NjA3OGMtZGE2MS00NWE4LTg4YzgtYTFkYTg5M2RkODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYDHWZAPs/oJtltN/ucYfpx0Cz9KnnAVSP2C sT6I59KmqHo3mEMsv5CoM2n2MEfHD+NwYcHOoAm41znLFZ+6YAZWRLLKz0Mj+8Yd ngFs6hlgTphYx2wVE6ANnWO90y/AvE8R/kw3PEPjtExbSwpWc+Gju9XFPPWL6wPG zhM6f+Ivwy+k4E3hvsb8mZN8aQXaOv1C1GVLFeR9MVBXvNAWpWueOPe/XqXaU+S0 AAr2DW5dliBSCDRewiJ0TnKy2FzZ1xoIE9txbfOoaTNrZSsJtNO2sy0CrlBMfS3Z BhDBRnebOq1FZrN/uJJTrRVSVLLbb8RWSlW0yWfvDsWtCCAsiQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFE2jF3xzxttWQ9blRlpD98y9jIdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTA2 MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4YTk4ZGY2ZjIvNGRmODBlMTItMWZlNi0z NzY0LTkyNmMtYzM1ZGFkYTQyZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWEwNjBmYTMtZTJmMS00ODU3LWFj ZjMtOWE5OGE5OGRmNmYyLzVhMDYwZmEzLWUyZjEtNDg1Ny1hY2YzLTlhOThhOThk ZjZmMi5jcmwwHwYDVR0jBBgwFoAURLsOM9JSKHXcbJcZ9f5Vn8BusH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTA2MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4 YTk4ZGY2ZjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBjvkcMA4E AgACMAgDBgQmAveyADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHFVE5M4WvyL7eQmkHDHBX1nalTQXeQe7b 2YDlV308wBrHG/BAdOJHv+9zuGmFpal/nGRBMcBiuxJXyPA2Hp7MFBc1ZEL9FZxh 7N4Q0yrJc952ns3F30AqKlyo6yMv4Q02mTwzjSWM1cGqNDoYePcBQ/MCJDxy+ah7 NL4EY1L6ixtV27aVlfnlIT3lqgefuDyM+yDTrMrCDg1ogXV/drFKS0VAilnk4SPJ umY2TBAAMfGfWB2PrRPx5UTsJcVOvG3yTAjl++6M2qCPM/i9mCquSe4tsAvz868M thI4rScuP4KD50yNu1K98zC8F+f7Vurv6apXd0VDkJRGhsH84LQV -----END CERTIFICATE-----Generated at Sun Apr 19 09:29:47 2026 by rpki-client