$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa File: 6ebeb817-6095-3446-9a11-b67c1f10a982.roa (raw, json) Hash identifier: JobQWcT+n3psYRZ+4O5Ak63ErDMAZCVa4gD3vgHk+Kg= Subject key identifier: 64:84:66:A1:17:18:AF:D2:3A:63:FF:DD:53:E2:3E:AC:95:26:01:31 Certificate issuer: /CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4 Certificate serial: 010D0C9F4328584EC4D714FD212256F6DF392600 Authority key identifier: 63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa Signing time: Sat 08 Aug 2026 13:00:11 +0000 ROA not before: Sat 08 Aug 2026 13:00:11 +0000 ROA not after: Fri 06 Nov 2026 14:00:11 +0000 asID: 401656 IP address blocks: 142.248.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c4:d7:14:fd:21:22:56:f6:df:39:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5895640f-fe62-4aa8-a59c-0cda4c49bda4 Validity Not Before: Aug 8 13:00:11 2026 GMT Not After : Nov 6 14:00:11 2026 GMT Subject: CN=8532dc4c-e1ce-451c-ae4a-99c53e3facb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:f2:b6:d1:11:9c:9d:0f:01:05:e7:0b:34: 2f:c7:55:ec:34:45:b7:5e:16:bc:bb:51:00:0d:c6: ee:41:e6:96:6c:e8:9b:1d:14:0e:bf:2c:0d:31:1f: a6:c5:f1:f8:a6:cb:e4:94:d4:02:c0:bd:80:c3:f5: 66:c2:a4:d2:e6:4a:1e:ef:2f:83:5d:75:60:b7:1b: d1:a2:df:3d:7c:39:74:96:50:ed:68:e2:85:b8:23: 51:0c:83:48:23:6c:ac:ae:7e:02:49:ef:30:79:ee: 7c:c4:f6:59:d6:96:e5:aa:96:51:b3:f9:55:c5:d7: 19:e6:8b:b3:b2:de:80:f1:e3:20:1e:a2:eb:47:ef: 74:dd:09:4b:91:08:59:c4:ab:9b:7e:03:68:9b:c3: e2:1b:50:a3:39:56:f6:6b:80:de:6e:b5:6d:cd:e0: 56:fe:13:ce:53:f7:db:49:a1:7e:50:0f:f4:78:7e: a9:36:95:cd:2c:60:7d:5d:29:53:95:5b:b4:5a:46: 54:ae:e3:c0:90:51:5d:4f:cb:9d:79:e3:2d:6d:2e: 02:31:cc:19:06:9a:b7:39:58:7e:17:af:18:4b:0c: 94:c3:26:2c:8f:bf:1b:e8:ed:f6:c9:35:c8:db:c7: 3d:eb:ec:f5:7d:10:a9:79:20:ec:b7:35:ea:08:59: 4e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:84:66:A1:17:18:AF:D2:3A:63:FF:DD:53:E2:3E:AC:95:26:01:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/6ebeb817-6095-3446-9a11-b67c1f10a982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4/5895640f-fe62-4aa8-a59c-0cda4c49bda4.crl X509v3 Authority Key Identifier: keyid:63:BF:62:78:29:F9:F6:03:78:70:BB:75:A2:DA:25:A2:87:9D:E2:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5895640f-fe62-4aa8-a59c-0cda4c49bda4.cer sbgp-ipAddrBlock: critical IPv4: 142.248.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:5c:e8:c1:5a:ca:fa:0e:1f:90:3a:eb:ee:75:9e:19:19:f0: 22:a6:ab:6d:d0:7e:d0:eb:82:5a:da:6d:5a:6c:63:03:60:f3: cb:f8:13:5b:5d:67:e4:7f:9e:78:9d:7d:b5:db:f8:73:fd:6b: 90:80:ca:9a:de:55:6f:02:e9:37:6d:66:1b:ee:11:5b:49:b0: d7:3d:d6:23:d3:6e:6b:0e:d9:8d:1e:4f:f8:ad:e4:c0:a4:2a: 37:b4:19:c8:a8:4d:55:52:43:c5:b0:2c:e8:6d:2a:ec:37:65: 3d:8c:cf:d5:9d:ea:43:5a:37:59:26:94:1c:b3:8a:82:a0:e5: c1:b7:57:07:79:c8:5f:9c:96:b6:4b:64:02:7e:58:75:7a:fe: 86:b4:66:50:fb:86:e0:dc:4b:95:14:8a:17:4f:df:47:ab:3e: 02:3a:9b:9e:02:27:08:16:80:90:28:94:13:e7:e9:fc:f1:ca: e9:0d:dd:84:2b:fc:3a:14:00:cb:55:bf:86:ac:3a:72:3e:8c: f2:ff:f7:7f:3f:cb:e4:87:39:56:98:53:84:27:27:08:91:a3: e6:47:69:f7:26:af:5d:78:e3:7f:f4:d5:34:d4:b9:11:d1:86: e4:8d:5b:74:7e:23:93:dd:5c:99:3d:30:bd:86:9e:4e:66:ba: fc:e3:0b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7E1xT9ISJW9t85JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5NTY0MGYtZmU2Mi00YWE4LWE1OWMtMGNkYTRjNDli ZGE0MB4XDTI2MDgwODEzMDAxMVoXDTI2MTEwNjE0MDAxMVowLzEtMCsGA1UEAxMk ODUzMmRjNGMtZTFjZS00NTFjLWFlNGEtOTljNTNlM2ZhY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+nyttERnJ0PAQXnCzQvx1XsNEW3Xha8u1EA DcbuQeaWbOibHRQOvywNMR+mxfH4psvklNQCwL2Aw/VmwqTS5koe7y+DXXVgtxvR ot89fDl0llDtaOKFuCNRDINII2ysrn4CSe8wee58xPZZ1pblqpZRs/lVxdcZ5ouz st6A8eMgHqLrR+903QlLkQhZxKubfgNom8PiG1CjOVb2a4DebrVtzeBW/hPOU/fb SaF+UA/0eH6pNpXNLGB9XSlTlVu0WkZUruPAkFFdT8udeeMtbS4CMcwZBpq3OVh+ F68YSwyUwyYsj78b6O32yTXI28c96+z1fRCpeSDstzXqCFlODwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSEZqEXGK/SOmP/3VPiPqyVJgExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODk1 NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2RhNGM0OWJkYTQvNmViZWI4MTctNjA5NS0z NDQ2LTlhMTEtYjY3YzFmMTBhOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTg5NTY0MGYtZmU2Mi00YWE4LWE1 OWMtMGNkYTRjNDliZGE0LzU4OTU2NDBmLWZlNjItNGFhOC1hNTljLTBjZGE0YzQ5 YmRhNC5jcmwwHwYDVR0jBBgwFoAUY79ieCn59gN4cLt1otolooed4vwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ODk1NjQwZi1mZTYyLTRhYTgtYTU5Yy0wY2Rh NGM0OWJkYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlc6MFayvoOH5A66+51nhkZ8CKmq23QftDrglrabVpsYwNg88v4E1td Z+R/nnidfbXb+HP9a5CAypreVW8C6TdtZhvuEVtJsNc91iPTbmsO2Y0eT/it5MCk Kje0GcioTVVSQ8WwLOhtKuw3ZT2Mz9Wd6kNaN1kmlByzioKg5cG3Vwd5yF+clrZL ZAJ+WHV6/oa0ZlD7huDcS5UUihdP30erPgI6m54CJwgWgJAolBPn6fzxyukN3YQr /DoUAMtVv4asOnI+jPL/938/y+SHOVaYU4QnJwiRo+ZHafcmr11443/01TTUuRHR huSNW3R+I5PdXJk9ML2Gnk5muvzjC64= -----END CERTIFICATE-----Generated at Tue Sep 22 16:29:35 2026 by rpki-client