$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa File: 3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa (raw, json) Hash identifier: Nj3C2czLR9Jy3koBj7zGQvMV4u+MDE1aXDA1M71gi4c= Subject key identifier: 15:4D:E2:01:5B:C0:60:BB:7F:16:C3:5A:0B:A7:8D:F2:AA:CC:BE:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CFDE7A351A7DDC96375C45300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 63949 IP address blocks: 139.144.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:a3:51:a7:dd:c9:63:75:c4:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=e91e0482-779a-4fd9-a6dc-a5a1f791a78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:8c:9b:fd:8c:2b:28:73:71:e8:c3:de:74: 7f:83:2d:ed:82:2e:ff:e2:b1:33:ed:c3:02:66:a9: c9:c6:92:86:c5:ca:9a:d6:57:73:37:79:87:f8:9b: 84:c3:c5:6b:5e:9c:59:be:2e:8d:d4:11:b6:8b:b3: 26:cb:83:42:8a:41:39:90:7e:ed:94:b5:1d:fd:32: 74:ce:86:d6:9d:ce:5a:25:82:b3:29:8a:4c:bf:ce: 02:9d:0c:0d:71:15:83:65:e2:74:b1:81:11:ec:7f: b4:bc:fa:2a:9b:00:02:61:9b:91:1f:fd:0f:b8:75: a2:3c:8f:95:07:aa:ef:4e:df:09:50:35:fe:d9:e1: 67:53:92:ee:06:9d:f9:0c:b9:04:bf:aa:82:ce:dd: a0:b6:71:5b:9b:3f:d2:af:86:2a:de:94:7c:48:4b: 86:3b:e1:36:df:8f:73:41:c3:fc:7b:a7:b9:66:39: b7:95:9f:ab:19:ac:c6:65:50:b7:46:01:8a:e6:65: 43:3b:25:69:49:55:47:f8:13:16:34:32:f4:c5:8f: f4:41:0d:e1:78:bc:65:67:cb:c1:0b:97:b5:56:32: 3d:3d:c4:41:da:46:63:38:04:97:f1:e1:66:dd:1d: a8:03:d9:b0:69:7c:31:41:9e:8b:83:e4:5b:e9:61: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4D:E2:01:5B:C0:60:BB:7F:16:C3:5A:0B:A7:8D:F2:AA:CC:BE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bc133b7-157c-3e8c-8d01-b58abb3c6ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 139.144.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:42:84:58:b1:e4:b1:41:ca:a3:30:2f:a1:af:fa:83:84:8e: 27:88:33:82:9b:be:15:8a:12:bc:27:82:2f:81:78:a6:5b:0d: 1c:08:5c:ab:7a:12:23:cf:de:73:3a:f7:41:18:ff:29:9f:c7: 43:ee:50:dc:2b:9e:53:69:82:e8:a2:04:70:1d:7f:17:41:7b: 63:c5:c4:b0:c4:8c:a7:07:d9:14:ea:bb:70:ef:2e:bc:4c:a8: d0:00:bb:f7:bb:7d:22:87:82:94:13:f5:b9:93:74:0e:1d:30: 73:dd:fb:33:f3:6b:49:a7:76:9d:c9:c6:90:72:e7:f0:b1:12: a8:26:37:cb:2e:04:b2:91:90:aa:a3:da:cb:0f:ee:79:94:c0: 14:32:78:a4:1c:f3:29:32:30:46:d6:51:25:3a:66:37:c1:d7: 6c:ff:d4:19:f8:fe:c8:55:e3:6e:30:c1:78:fb:61:d2:b4:fd: e1:eb:b3:d6:9b:f3:eb:4f:a9:07:64:28:9d:81:e0:f8:a0:a4: a4:b2:67:d6:c0:dc:a2:7a:bc:dd:e1:10:76:d8:6b:2b:4e:a7: b8:80:82:a9:93:d4:6c:51:f1:3e:32:ed:79:2f:86:96:e6:66: cb:2d:73:e0:09:fa:f2:dd:9f:fa:27:cd:e2:91:7e:e7:1b:4c: 48:34:ec:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz956NRp93JY3XEUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ZTkxZTA0ODItNzc5YS00ZmQ5LWE2ZGMtYTVhMWY3OTFhNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6mMm/2MKyhzcejD3nR/gy3tgi7/4rEz7cMC ZqnJxpKGxcqa1ldzN3mH+JuEw8VrXpxZvi6N1BG2i7Mmy4NCikE5kH7tlLUd/TJ0 zobWnc5aJYKzKYpMv84CnQwNcRWDZeJ0sYER7H+0vPoqmwACYZuRH/0PuHWiPI+V B6rvTt8JUDX+2eFnU5LuBp35DLkEv6qCzt2gtnFbmz/Sr4Yq3pR8SEuGO+E2349z QcP8e6e5Zjm3lZ+rGazGZVC3RgGK5mVDOyVpSVVH+BMWNDL0xY/0QQ3heLxlZ8vB C5e1VjI9PcRB2kZjOASX8eFm3R2oA9mwaXwxQZ6Lg+Rb6WGUyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVN4gFbwGC7fxbDWgunjfKqzL4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JjMTMzYjctMTU3Yy0z ZThjLThkMDEtYjU4YWJiM2M2YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi5AQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpChFix5LFByqMwL6Gv+oOEjieIM4KbvhWKErwngi+BeKZbDRwIXKt6 EiPP3nM690EY/ymfx0PuUNwrnlNpguiiBHAdfxdBe2PFxLDEjKcH2RTqu3DvLrxM qNAAu/e7fSKHgpQT9bmTdA4dMHPd+zPza0mndp3JxpBy5/CxEqgmN8suBLKRkKqj 2ssP7nmUwBQyeKQc8ykyMEbWUSU6ZjfB12z/1Bn4/shV424wwXj7YdK0/eHrs9ab 8+tPqQdkKJ2B4PigpKSyZ9bA3KJ6vN3hEHbYaytOp7iAgqmT1GxR8T4y7Xkvhpbm Zsstc+AJ+vLdn/onzeKRfucbTEg07G8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:09:34 2026 by rpki-client