$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/e9eb6c81-cc61-3ede-9a37-7e434177f2b6.roa File: e9eb6c81-cc61-3ede-9a37-7e434177f2b6.roa (raw, json) Hash identifier: DaF+JOvhGg/QHM346cPww0vTLMn+WII1kHhSD0sCTZM= Subject key identifier: 33:5D:6D:17:B8:F2:4A:AD:03:06:28:53:EB:61:E5:36:4E:3B:31:55 Certificate issuer: /CN=d552454d-e3f4-40f7-b63f-882285340cad Certificate serial: 010D0C9F4328584D7F9AA217DBCFDB7C115BDF00 Authority key identifier: 7A:22:46:E9:65:7B:CF:B4:8E:10:63:4D:37:79:76:E1:A4:5C:78:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/e9eb6c81-cc61-3ede-9a37-7e434177f2b6.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 398924 IP address blocks: 142.248.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/d552454d-e3f4-40f7-b63f-882285340cad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/d552454d-e3f4-40f7-b63f-882285340cad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a2:17:db:cf:db:7c:11:5b:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d552454d-e3f4-40f7-b63f-882285340cad Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=4439ebff-0d6e-4317-8b44-c86bebc0719f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:65:72:89:b7:35:fc:e6:0a:84:09:f0:73: ef:31:91:99:38:0c:be:68:43:d5:6b:b5:a0:e1:3d: 05:b3:b3:ae:33:a2:d3:ce:cf:30:ed:40:f7:3a:f1: b2:a3:90:da:45:82:68:68:ac:21:67:52:2e:eb:08: 65:0b:79:e0:0c:93:4b:b6:e9:d0:a7:ff:01:1c:67: 9d:83:ed:22:89:c5:6d:36:65:2f:96:9e:8b:d0:ee: 45:4d:f9:4e:a5:00:c2:23:e9:30:f3:8e:65:73:02: ce:bc:89:9d:a6:f1:df:40:15:c7:f4:bd:71:a4:a6: 65:db:05:de:90:f1:8e:75:bc:ab:5f:55:5c:ee:81: 43:1f:de:fa:54:88:41:a1:c8:89:3d:27:a4:10:7e: 4e:88:22:ed:43:3b:bc:b6:ca:fe:bc:de:4e:1e:d9: dd:a1:41:c9:78:2f:61:b6:85:02:0b:9e:e4:f0:59: 92:15:3e:04:1d:81:c7:b4:7b:12:82:78:0d:19:4c: 4e:6d:3d:e9:b5:b9:22:76:4d:68:46:a6:a4:2f:64: b0:6f:70:ec:e3:7a:31:90:5d:02:ca:3b:dd:ea:1e: 72:e7:fa:0d:d3:31:d9:7c:62:c5:f0:18:11:37:4c: 53:a9:99:83:59:62:0a:bb:a3:e8:7c:8a:f3:8f:c8: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5D:6D:17:B8:F2:4A:AD:03:06:28:53:EB:61:E5:36:4E:3B:31:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/e9eb6c81-cc61-3ede-9a37-7e434177f2b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad/d552454d-e3f4-40f7-b63f-882285340cad.crl X509v3 Authority Key Identifier: keyid:7A:22:46:E9:65:7B:CF:B4:8E:10:63:4D:37:79:76:E1:A4:5C:78:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d552454d-e3f4-40f7-b63f-882285340cad.cer sbgp-ipAddrBlock: critical IPv4: 142.248.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:69:ca:a0:a4:a7:9f:32:83:04:a0:20:0c:4f:36:6d:a3:2f: 3c:c1:98:4f:82:5e:cf:50:68:ca:67:4d:39:fe:52:0b:61:4a: 17:a0:93:3c:38:db:cc:af:c1:67:ed:6b:18:8b:9e:fc:01:b4: 87:48:d6:f5:0d:c8:7c:06:32:52:f0:46:f5:05:67:49:80:89: 38:18:f7:57:db:ff:40:27:50:f0:be:cb:e4:1b:fb:15:f2:ed: dc:99:1a:69:f7:59:02:f7:21:dd:14:d6:88:63:1a:a8:78:b5: b4:da:f8:e6:b5:ce:70:ae:81:56:73:65:10:d2:f7:5c:b1:4d: b6:97:90:71:17:eb:a7:9c:59:58:3f:c4:b3:ce:11:f0:19:7c: 88:53:b1:51:51:9c:b2:5e:c8:cd:cb:01:27:09:9f:d1:97:77: 6e:a8:e2:07:6a:85:bd:69:d8:6a:e0:f2:26:fc:04:d2:31:c5: 82:2a:a1:14:be:b8:fb:49:62:91:0b:67:c7:36:93:61:52:ab: 30:38:21:08:c4:4f:32:5b:d7:e1:fa:0c:f2:f0:da:03:04:ac: 73:c7:8c:5f:d5:26:24:7d:bb:60:12:f4:94:fc:47:c1:dc:a6: 6a:44:ac:1d:63:fb:48:e3:bb:c1:df:c9:8a:b2:dd:c4:d9:10: 3b:11:89:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqIX28/bfBFb3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU1MjQ1NGQtZTNmNC00MGY3LWI2M2YtODgyMjg1MzQw Y2FkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NDQzOWViZmYtMGQ2ZS00MzE3LThiNDQtYzg2YmViYzA3MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBZlcom3NfzmCoQJ8HPvMZGZOAy+aEPVa7Wg 4T0Fs7OuM6LTzs8w7UD3OvGyo5DaRYJoaKwhZ1Iu6whlC3ngDJNLtunQp/8BHGed g+0iicVtNmUvlp6L0O5FTflOpQDCI+kw845lcwLOvImdpvHfQBXH9L1xpKZl2wXe kPGOdbyrX1Vc7oFDH976VIhBociJPSekEH5OiCLtQzu8tsr+vN5OHtndoUHJeC9h toUCC57k8FmSFT4EHYHHtHsSgngNGUxObT3ptbkidk1oRqakL2Swb3Ds43oxkF0C yjvd6h5y5/oN0zHZfGLF8BgRN0xTqZmDWWIKu6PofIrzj8gc5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNdbRe48kqtAwYoU+th5TZOOzFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNTUy NDU0ZC1lM2Y0LTQwZjctYjYzZi04ODIyODUzNDBjYWQvZTllYjZjODEtY2M2MS0z ZWRlLTlhMzctN2U0MzQxNzdmMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDU1MjQ1NGQtZTNmNC00MGY3LWI2 M2YtODgyMjg1MzQwY2FkL2Q1NTI0NTRkLWUzZjQtNDBmNy1iNjNmLTg4MjI4NTM0 MGNhZC5jcmwwHwYDVR0jBBgwFoAUeiJG6WV7z7SOEGNNN3l24aRceNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNTUyNDU0ZC1lM2Y0LTQwZjctYjYzZi04ODIy ODUzNDBjYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvjeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1pyqCkp58ygwSgIAxPNm2jLzzBmE+CXs9QaMpnTTn+UgthShegkzw4 28yvwWftaxiLnvwBtIdI1vUNyHwGMlLwRvUFZ0mAiTgY91fb/0AnUPC+y+Qb+xXy 7dyZGmn3WQL3Id0U1ohjGqh4tbTa+Oa1znCugVZzZRDS91yxTbaXkHEX66ecWVg/ xLPOEfAZfIhTsVFRnLJeyM3LAScJn9GXd26o4gdqhb1p2Grg8ib8BNIxxYIqoRS+ uPtJYpELZ8c2k2FSqzA4IQjETzJb1+H6DPLw2gMErHPHjF/VJiR9u2AS9JT8R8Hc pmpErB1j+0jju8HfyYqy3cTZEDsRibA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:33:21 2026 by rpki-client