$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/ea10becb-3cb9-3be6-829d-5ef881b42c89.roa File: ea10becb-3cb9-3be6-829d-5ef881b42c89.roa (raw, json) Hash identifier: FxcA6fXsyPE/R1VAMoagdg9zKs5CjgV1fDMAaKO4598= Subject key identifier: F4:BD:16:47:E9:84:B4:08:1A:A8:29:C6:11:F4:0B:DD:08:64:F3:F3 Certificate issuer: /CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722 Certificate serial: 010D0C9F4328584F38B2752A04275EAD99A984A0 Authority key identifier: 96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/ea10becb-3cb9-3be6-829d-5ef881b42c89.roa Signing time: Sat 19 Sep 2026 01:00:12 +0000 ROA not before: Sat 19 Sep 2026 01:00:12 +0000 ROA not after: Fri 18 Dec 2026 02:00:12 +0000 asID: 46998 IP address blocks: 142.249.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:b2:75:2a:04:27:5e:ad:99:a9:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722 Validity Not Before: Sep 19 01:00:12 2026 GMT Not After : Dec 18 02:00:12 2026 GMT Subject: CN=238ef290-4875-4096-aca9-45f3b3c1e921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:85:0d:21:a7:50:3f:01:53:e2:e4:e2:37:c8: 67:a1:a5:fa:19:dd:17:4d:14:37:91:75:b9:44:ee: e7:eb:f1:79:e1:b8:9e:16:d7:52:92:0d:f4:60:11: 5c:72:b3:12:66:8b:88:8a:94:16:55:0c:28:d3:81: 2d:08:78:6d:fd:b3:15:92:80:b1:8a:39:ff:c0:72: 42:8b:87:6f:73:b8:a1:58:f1:fd:06:c3:6b:57:18: 4d:98:c7:4d:06:bc:c4:a8:9c:d4:af:e1:d5:da:28: a6:12:bb:ef:47:08:3f:e2:42:50:bb:b2:8c:4a:d1: 9f:c8:eb:13:cd:ce:7b:21:d6:e0:c2:4e:c0:09:ae: ac:5c:ee:68:4f:33:66:c0:fc:8e:c8:5b:10:26:05: 54:cd:b3:eb:c2:3f:99:61:0a:b4:a2:1d:e2:44:b0: 05:9c:7d:f2:83:19:9d:da:2a:c0:93:0c:cb:07:5e: 2c:ac:50:2a:1a:d3:98:b4:d9:25:6a:c9:0d:e3:ef: 0a:35:e8:4d:d7:fa:63:5e:83:21:ff:e3:f6:44:4d: 45:61:52:01:5c:de:7b:f3:2b:e7:f6:b0:6a:cf:ff: 38:c6:6c:de:de:bd:f2:b5:7e:a0:94:ca:46:c2:33: 07:87:a7:29:e2:b1:55:cd:d4:e0:0d:19:d5:ca:80: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BD:16:47:E9:84:B4:08:1A:A8:29:C6:11:F4:0B:DD:08:64:F3:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/ea10becb-3cb9-3be6-829d-5ef881b42c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl X509v3 Authority Key Identifier: keyid:96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer sbgp-ipAddrBlock: critical IPv4: 142.249.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:fc:eb:e4:ae:d2:dd:70:f8:c2:df:fa:82:2b:85:eb:40:66: 1a:d8:17:f2:e9:da:4d:3e:6d:67:e6:9c:30:e2:4e:e7:81:1e: 4d:8f:85:bd:17:96:1a:8c:b3:b6:5d:d7:d9:a7:da:14:a4:ba: 2e:1a:27:e4:b3:2c:38:a0:de:c7:91:09:2a:b2:eb:49:8e:5e: 46:11:8d:02:66:6f:01:24:f7:5e:76:d6:bb:8f:34:3a:e8:1d: 88:11:a5:ab:6a:86:7e:b4:38:5d:91:c1:88:a2:1c:75:ca:e2: 8d:48:ca:77:02:43:a4:6b:15:ba:ea:dd:84:0e:bf:9c:ce:35: ef:6a:63:93:ec:0f:9b:78:ec:9e:57:7a:a6:e9:80:d9:ce:b1: 9d:36:c7:51:69:43:43:34:b2:44:0b:67:58:94:9e:00:cc:70: ca:fe:22:4c:a4:77:04:bb:02:cf:10:31:c6:4a:b1:48:4e:62: e1:be:e7:80:65:5a:be:e1:1a:57:2e:65:bc:93:f5:e9:39:d2: 17:fa:47:df:61:e1:82:45:5b:ff:2a:37:a4:07:3b:b6:4e:20: fe:88:73:d3:95:39:e8:ae:ee:f9:9f:e0:ca:d1:2f:fa:84:e5: 52:01:e3:d9:fb:92:7c:66:0b:88:64:2c:ce:8b:6e:f5:64:76: 64:bf:58:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE84snUqBCderZmphKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2YxYjIzZDEtYjI2ZC00OWY3LWI5Y2UtYzM4OTZhZDQz NzIyMB4XDTI2MDkxOTAxMDAxMloXDTI2MTIxODAyMDAxMlowLzEtMCsGA1UEAxMk MjM4ZWYyOTAtNDg3NS00MDk2LWFjYTktNDVmM2IzYzFlOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYUNIadQPwFT4uTiN8hnoaX6Gd0XTRQ3kXW5 RO7n6/F54bieFtdSkg30YBFccrMSZouIipQWVQwo04EtCHht/bMVkoCxijn/wHJC i4dvc7ihWPH9BsNrVxhNmMdNBrzEqJzUr+HV2iimErvvRwg/4kJQu7KMStGfyOsT zc57Idbgwk7ACa6sXO5oTzNmwPyOyFsQJgVUzbPrwj+ZYQq0oh3iRLAFnH3ygxmd 2irAkwzLB14srFAqGtOYtNklaskN4+8KNehN1/pjXoMh/+P2RE1FYVIBXN578yvn 9rBqz/84xmze3r3ytX6glMpGwjMHh6cp4rFVzdTgDRnVyoD3xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS9FkfphLQIGqgpxhH0C90IZPPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83ZjFi MjNkMS1iMjZkLTQ5ZjctYjljZS1jMzg5NmFkNDM3MjIvZWExMGJlY2ItM2NiOS0z YmU2LTgyOWQtNWVmODgxYjQyYzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2YxYjIzZDEtYjI2ZC00OWY3LWI5 Y2UtYzM4OTZhZDQzNzIyLzdmMWIyM2QxLWIyNmQtNDlmNy1iOWNlLWMzODk2YWQ0 MzcyMi5jcmwwHwYDVR0jBBgwFoAUlg8mifJReSTwTAc1sJbJQ06nG4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83ZjFiMjNkMS1iMjZkLTQ5ZjctYjljZS1jMzg5 NmFkNDM3MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvnKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD86+Su0t1w+MLf+oIrhetAZhrYF/Lp2k0+bWfmnDDiTueBHk2Phb0X lhqMs7Zd19mn2hSkui4aJ+SzLDig3seRCSqy60mOXkYRjQJmbwEk91521ruPNDro HYgRpatqhn60OF2RwYiiHHXK4o1IyncCQ6RrFbrq3YQOv5zONe9qY5PsD5t47J5X eqbpgNnOsZ02x1FpQ0M0skQLZ1iUngDMcMr+IkykdwS7As8QMcZKsUhOYuG+54Bl Wr7hGlcuZbyT9ek50hf6R99h4YJFW/8qN6QHO7ZOIP6Ic9OVOeiu7vmf4MrRL/qE 5VIB49n7knxmC4hkLM6LbvVkdmS/WIs= -----END CERTIFICATE-----Generated at Sat Sep 26 16:06:49 2026 by rpki-client