$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/0238aa93-fe9d-3d8e-a81e-7612e1121f26.roa File: 0238aa93-fe9d-3d8e-a81e-7612e1121f26.roa (raw, json) Hash identifier: lA9UKiMNNA47K+JnqPlvfKWGQJsK2+G4StqqtSTVl0Q= Subject key identifier: 59:55:A6:6B:FD:FC:06:C1:91:6C:78:9D:DD:25:7E:91:E8:9E:16:20 Certificate issuer: /CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3 Certificate serial: 010D0C9F4328584F3E4805B94DE6956406BD84C0 Authority key identifier: 27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/0238aa93-fe9d-3d8e-a81e-7612e1121f26.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 13437 IP address blocks: 142.248.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:05:b9:4d:e6:95:64:06:bd:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc7254b9-092b-4c9f-9b49-3f8a520532f3 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=c0220753-0770-4cd8-8b3b-3453a5ac63f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:7a:0c:54:27:26:7c:8c:b0:6f:18:e6:fe: 4a:da:de:88:40:95:65:1f:d6:88:1c:02:84:46:59: 74:1f:11:22:c5:04:60:bf:80:9e:02:53:dc:c5:bd: b9:c7:9c:21:14:d8:d6:e2:d8:53:42:ae:f9:bc:c0: db:04:b5:7a:3c:5d:25:79:4d:e9:99:24:e6:89:a6: 75:9a:6b:7b:03:45:79:c4:32:da:58:0e:96:3e:c7: ac:ad:84:7f:cf:0c:ed:f4:97:9f:0c:38:a8:c0:d9: 44:6d:f2:96:73:8e:11:a2:c2:14:5b:b6:79:30:2b: df:f7:53:3f:42:98:6f:70:e9:d5:48:4a:e8:b8:48: 52:0d:03:e4:69:0c:34:92:fd:d6:68:89:36:c8:eb: 42:54:90:c8:47:d2:f5:30:06:f6:cf:f7:9a:24:0d: 25:51:43:98:7e:c7:0b:c9:80:8a:c6:32:1b:39:51: b6:57:55:bf:4f:3b:eb:87:7d:4a:8e:86:ba:46:a8: 2a:7b:b2:ff:41:bf:31:50:88:63:69:99:d6:19:e6: 22:f2:ef:13:43:9f:cb:3b:21:25:a4:33:76:bc:43: 35:72:00:ff:57:63:21:74:b8:36:79:07:46:61:45: 06:86:02:68:f4:bb:24:14:73:f4:f1:0f:f8:3c:2e: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:55:A6:6B:FD:FC:06:C1:91:6C:78:9D:DD:25:7E:91:E8:9E:16:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/0238aa93-fe9d-3d8e-a81e-7612e1121f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3/fc7254b9-092b-4c9f-9b49-3f8a520532f3.crl X509v3 Authority Key Identifier: keyid:27:C6:0E:94:27:FF:97:0F:C0:E7:AD:24:01:05:B0:13:4A:A2:A6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc7254b9-092b-4c9f-9b49-3f8a520532f3.cer sbgp-ipAddrBlock: critical IPv4: 142.248.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b3:25:66:95:12:18:c3:b9:65:1d:ef:44:e4:2b:83:9c:35: 0e:a1:5c:31:21:0e:6a:69:22:eb:37:02:7a:a9:d9:73:f3:07: b0:dd:3e:b4:ac:0b:82:00:61:46:ff:a2:29:5b:88:de:bb:a9: 8a:9f:f2:27:59:89:9f:89:38:f6:ad:0f:ef:6a:bb:5c:58:fc: 44:75:97:7f:69:a3:c6:23:84:70:54:32:2a:53:3d:78:76:95: e6:58:13:eb:81:68:a8:d5:ad:9d:b3:94:82:ca:41:3a:ac:19: 63:23:94:1a:38:f9:5a:43:45:ec:04:3f:04:5d:94:60:15:6d: 89:74:34:05:46:79:c1:cd:0f:8c:22:9c:62:db:de:e5:8c:ef: a5:d7:9a:7e:23:c1:25:35:34:20:14:a1:77:e5:7d:9c:be:c3: e5:1b:4e:6d:b1:d7:46:ee:a6:00:6b:b8:2c:be:48:24:6a:0e: ec:0b:a7:73:f8:57:6b:98:a5:66:f7:41:db:53:ba:39:62:f4: 2b:62:5c:c5:cd:05:42:8d:c1:6c:30:56:68:67:f8:33:d3:71: 36:7a:a9:ab:c2:43:55:8a:e5:69:63:56:88:df:35:ca:9f:4e: ce:68:af:2b:0f:8a:8f:ba:9e:7c:ee:bd:8d:ae:02:6f:61:00: 34:82:dd:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+SAW5TeaVZAa9hMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM3MjU0YjktMDkyYi00YzlmLTliNDktM2Y4YTUyMDUz MmYzMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YzAyMjA3NTMtMDc3MC00Y2Q4LThiM2ItMzQ1M2E1YWM2M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifN6DFQnJnyMsG8Y5v5K2t6IQJVlH9aIHAKE Rll0HxEixQRgv4CeAlPcxb25x5whFNjW4thTQq75vMDbBLV6PF0leU3pmSTmiaZ1 mmt7A0V5xDLaWA6WPsesrYR/zwzt9JefDDiowNlEbfKWc44RosIUW7Z5MCvf91M/ QphvcOnVSErouEhSDQPkaQw0kv3WaIk2yOtCVJDIR9L1MAb2z/eaJA0lUUOYfscL yYCKxjIbOVG2V1W/Tzvrh31Kjoa6Rqgqe7L/Qb8xUIhjaZnWGeYi8u8TQ5/LOyEl pDN2vEM1cgD/V2MhdLg2eQdGYUUGhgJo9LskFHP08Q/4PC7pmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlVpmv9/AbBkWx4nd0lfpHonhYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYzcy NTRiOS0wOTJiLTRjOWYtOWI0OS0zZjhhNTIwNTMyZjMvMDIzOGFhOTMtZmU5ZC0z ZDhlLWE4MWUtNzYxMmUxMTIxZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmM3MjU0YjktMDkyYi00YzlmLTli NDktM2Y4YTUyMDUzMmYzL2ZjNzI1NGI5LTA5MmItNGM5Zi05YjQ5LTNmOGE1MjA1 MzJmMy5jcmwwHwYDVR0jBBgwFoAUJ8YOlCf/lw/A560kAQWwE0qipsQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYzcyNTRiOS0wOTJiLTRjOWYtOWI0OS0zZjhh NTIwNTMyZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvjhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2zJWaVEhjDuWUd70TkK4OcNQ6hXDEhDmppIus3Anqp2XPzB7DdPrSs C4IAYUb/oilbiN67qYqf8idZiZ+JOPatD+9qu1xY/ER1l39po8YjhHBUMipTPXh2 leZYE+uBaKjVrZ2zlILKQTqsGWMjlBo4+VpDRewEPwRdlGAVbYl0NAVGecHND4wi nGLb3uWM76XXmn4jwSU1NCAUoXflfZy+w+UbTm2x10bupgBruCy+SCRqDuwLp3P4 V2uYpWb3QdtTujli9CtiXMXNBUKNwWwwVmhn+DPTcTZ6qavCQ1WK5WljVojfNcqf Ts5orysPio+6nnzuvY2uAm9hADSC3Qs= -----END CERTIFICATE-----Generated at Fri Sep 25 22:21:45 2026 by rpki-client