$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa File: 25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa (raw, json) Hash identifier: gS3lwc3cQU9VDKdsfRvsnhExYWhn0INNRwjWdr9Rlts= Subject key identifier: 50:5B:95:EB:8A:D5:AE:58:11:54:1A:48:88:27:84:A6:CF:22:3D:CE Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584D6417D6F060FA56AEC5EEE180 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa Signing time: Sat 04 Apr 2026 04:30:27 +0000 ROA not before: Sat 04 Apr 2026 04:30:27 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 396952 IP address blocks: 142.248.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:64:17:d6:f0:60:fa:56:ae:c5:ee:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Apr 4 04:30:27 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=1fe61d6c-728a-494b-9766-e65b125f00ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:d9:4d:f2:c6:65:99:5f:77:7f:6f:28:03: 58:83:e3:da:8e:ca:e0:d5:51:0d:09:44:86:7f:ef: 96:b9:c1:b7:31:91:ec:dd:4b:e9:35:c7:53:f1:8e: 55:45:34:e1:ca:c3:f6:b9:6c:07:15:b9:89:be:17: f6:0a:1d:a2:b3:c1:f9:dc:62:c8:bc:7d:50:79:b8: d8:5a:7d:4c:a3:14:a5:02:52:50:8d:4b:e1:76:63: 9d:43:db:41:da:bf:0a:42:5a:3b:60:d0:30:fc:28: b0:1c:07:63:3b:ef:3c:22:2b:00:51:2d:9b:0f:5e: 0b:07:e3:54:d6:d3:bc:ed:57:56:c8:7f:40:08:a5: 0c:09:08:70:65:68:c9:4f:94:df:6f:1a:9f:fe:f3: 73:9d:10:5b:47:e4:b3:67:74:0d:5f:fb:c6:55:5c: 4d:60:c3:8e:a3:9c:ec:a8:8f:55:94:0f:51:92:c4: 73:1c:8d:20:bc:ab:4c:81:ae:9c:e8:7c:68:8e:fa: 87:61:04:08:56:b7:f5:57:e8:d4:e3:9c:ed:90:69: 5f:b1:6a:ac:7a:e7:7a:aa:aa:e7:1c:a7:49:85:05: 0a:d5:06:df:a7:11:bf:e9:0b:e7:d5:87:6e:84:23: dd:13:c9:52:35:de:ba:9c:6d:0b:ff:09:f6:8c:87: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5B:95:EB:8A:D5:AE:58:11:54:1A:48:88:27:84:A6:CF:22:3D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 142.248.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:82:ca:99:3b:bc:a0:bc:6d:11:ec:7c:a5:40:50:aa:7b:40: f7:3e:bf:66:dc:de:20:fc:df:03:71:84:ae:b1:da:67:93:6e: 66:59:d0:93:04:24:44:3e:5a:ce:49:78:71:96:d3:93:40:46: 08:a5:a8:c2:e7:42:9a:87:47:c9:26:8c:3d:53:1f:66:9d:ee: c9:69:c4:7f:af:ad:27:c6:b6:e3:59:08:66:49:54:88:50:09: f2:bf:42:0e:ea:b1:a8:14:64:46:d7:a4:60:12:c0:81:52:95: 39:1d:40:ff:99:cb:50:40:ff:e6:18:bc:ae:11:63:3c:15:f8: 43:bf:ad:0f:d5:8f:cf:83:5a:1b:49:61:95:a0:f3:ec:25:0c: f8:5b:34:3f:3c:53:dd:a6:f4:28:bf:84:d9:9e:30:64:b3:70: 3b:db:28:9f:79:bc:13:a7:c8:eb:1d:89:d8:b9:4e:d8:33:85: 23:94:a6:9c:98:da:3b:0e:0b:03:6d:6e:e0:b5:3d:02:87:33: 3c:67:1e:2a:52:bc:2b:fa:c7:65:3a:3f:98:99:89:c1:9f:4d: b6:0b:2b:38:27:07:97:25:d2:ad:19:38:d9:b8:bd:91:da:7e: ab:7b:35:c4:cf:a2:df:65:05:7c:06:8d:67:e6:b8:c4:d3:74: d0:b8:f6:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1kF9bwYPpWrsXu4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MDQwNDA0MzAyN1oXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk MWZlNjFkNmMtNzI4YS00OTRiLTk3NjYtZTY1YjEyNWYwMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX/ZTfLGZZlfd39vKANYg+Pajsrg1VENCUSG f++WucG3MZHs3UvpNcdT8Y5VRTThysP2uWwHFbmJvhf2Ch2is8H53GLIvH1QebjY Wn1MoxSlAlJQjUvhdmOdQ9tB2r8KQlo7YNAw/CiwHAdjO+88IisAUS2bD14LB+NU 1tO87VdWyH9ACKUMCQhwZWjJT5Tfbxqf/vNznRBbR+SzZ3QNX/vGVVxNYMOOo5zs qI9VlA9RksRzHI0gvKtMga6c6HxojvqHYQQIVrf1V+jU45ztkGlfsWqseud6qqrn HKdJhQUK1QbfpxG/6Qvn1YduhCPdE8lSNd66nG0L/wn2jIc2VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBbleuK1a5YEVQaSIgnhKbPIj3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvMjUzMjFhN2QtMmZiZC0z M2M2LTgwOGItYzhjYjczZmMzM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOCypk7vKC8bRHsfKVAUKp7QPc+v2bc3iD83wNxhK6x2meTbmZZ0JME JEQ+Ws5JeHGW05NARgilqMLnQpqHR8kmjD1TH2ad7slpxH+vrSfGtuNZCGZJVIhQ CfK/Qg7qsagUZEbXpGASwIFSlTkdQP+Zy1BA/+YYvK4RYzwV+EO/rQ/Vj8+DWhtJ YZWg8+wlDPhbND88U92m9Ci/hNmeMGSzcDvbKJ95vBOnyOsdidi5TtgzhSOUppyY 2jsOCwNtbuC1PQKHMzxnHipSvCv6x2U6P5iZicGfTbYLKzgnB5cl0q0ZONm4vZHa fqt7NcTPot9lBXwGjWfmuMTTdNC49i0= -----END CERTIFICATE-----Generated at Sat Apr 18 08:06:41 2026 by rpki-client