$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa File: fa250e28-dae3-3d57-9324-4f178e12143d.roa (raw, json) Hash identifier: IKDfsJiSbCAQ8qj8XH1eswgQ+L9HJkId47i9y7poHEc= Subject key identifier: 27:58:90:28:11:67:3E:63:0F:48:63:69:41:D5:E7:32:8A:8C:BE:67 Certificate issuer: /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Certificate serial: 010D0C9F4328584D5F7FADD6FB2B38CAD854B200 Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 32668 IP address blocks: 142.248.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:ad:d6:fb:2b:38:ca:d8:54:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=e7c8bcb9-8629-4b7f-898c-acb4081d54fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:af:31:8f:44:f5:5d:0a:12:bf:24:7b:07: 4b:3d:ec:86:b2:df:00:a9:0c:d5:3e:71:11:50:ae: bf:38:4f:78:f7:bf:87:c9:80:c9:0f:ac:80:f2:b2: e4:cc:0e:53:95:f8:75:8e:e8:c2:35:30:f2:30:d6: 55:8b:6a:4f:47:bc:c4:6d:a2:3f:ec:d5:38:cd:59: 6c:33:6f:61:79:21:3c:ba:32:53:2d:46:4e:98:cd: 5d:b0:d5:c4:f0:32:fa:30:e6:71:4b:98:a5:a3:ec: 91:dc:15:87:e9:b4:ca:e8:a3:91:c6:c4:ba:81:0c: 6d:36:47:6c:ff:68:ec:9c:f5:d7:13:e2:08:db:5d: 0f:b0:02:f3:7e:54:dd:db:c5:07:b4:82:61:c8:45: 16:16:d9:9e:19:db:2e:d1:c7:27:e7:5b:b6:9a:0e: fe:6b:05:76:0c:51:36:cb:06:b4:6b:c7:02:66:d3: f3:7e:c0:0c:a9:8b:40:99:7b:84:c0:a1:1e:9a:92: 2b:2e:80:27:81:be:94:19:15:dd:81:a8:2e:c7:59: 7b:2d:ad:ad:e4:18:22:7b:28:cf:4d:5b:80:f8:cf: b9:bb:61:da:e7:d4:bf:de:98:22:4f:e0:8a:4a:9e: 4f:a6:65:2a:fd:74:b1:f5:00:41:f0:5c:c2:00:87: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:58:90:28:11:67:3E:63:0F:48:63:69:41:D5:E7:32:8A:8C:BE:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl X509v3 Authority Key Identifier: keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer sbgp-ipAddrBlock: critical IPv4: 142.248.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ff:24:01:25:22:45:c9:7e:f6:ab:ca:dc:bd:27:3f:e6:f6: 2c:c5:b3:43:6e:d6:a7:fd:c1:db:e9:3b:ac:db:fd:b9:5a:81: 44:b0:81:3d:ed:98:92:58:67:ec:df:c4:96:26:32:41:6a:95: 5d:5e:71:55:b1:07:a1:95:cb:cb:15:0a:59:62:8e:2b:97:43: 39:e4:48:c4:d5:69:65:bc:e4:ec:14:8c:ba:69:de:7c:50:c5: 09:b8:4b:44:4a:21:e6:6b:76:69:77:37:70:4e:d4:8c:91:2f: 5c:24:73:6a:77:8c:b7:9f:2d:c5:be:ac:66:a8:79:b7:e1:fc: 9a:d3:e6:14:11:51:99:a8:ca:a3:81:27:6c:f7:b8:7f:9b:2e: 50:47:e9:6e:af:77:cc:4c:d1:16:fb:89:d8:75:76:1b:e4:7c: ce:e9:77:77:37:5e:32:0f:8f:ee:68:0e:b0:ea:d1:bf:fb:9f: 3c:68:56:9e:f9:f6:09:a2:e8:f0:d4:4b:dd:b2:ef:20:fe:92: 3a:28:bb:b9:a4:55:00:ec:48:d7:61:33:95:f6:84:c6:3e:28: b2:7a:5e:a7:66:f8:08:ca:f5:d5:f1:16:44:c6:94:b7:dc:aa: b2:df:40:81:f4:c9:aa:c4:8a:0f:b7:ea:95:6c:a6:82:97:82: fa:23:84:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff63W+ys4ythUsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMzNjdiYjAtYTZlMC00NzY5LTllOTMtZThlOWI2YTFh Y2I5MB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk ZTdjOGJjYjktODYyOS00YjdmLTg5OGMtYWNiNDA4MWQ1NGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7uvMY9E9V0KEr8kewdLPeyGst8AqQzVPnER UK6/OE9497+HyYDJD6yA8rLkzA5Tlfh1jujCNTDyMNZVi2pPR7zEbaI/7NU4zVls M29heSE8ujJTLUZOmM1dsNXE8DL6MOZxS5ilo+yR3BWH6bTK6KORxsS6gQxtNkds /2jsnPXXE+II210PsALzflTd28UHtIJhyEUWFtmeGdsu0ccn51u2mg7+awV2DFE2 ywa0a8cCZtPzfsAMqYtAmXuEwKEempIrLoAngb6UGRXdgagux1l7La2t5BgieyjP TVuA+M+5u2Ha59S/3pgiT+CKSp5PpmUq/XSx9QBB8FzCAIfGTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdYkCgRZz5jD0hjaUHV5zKKjL5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2 N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZhMWFjYjkvZmEyNTBlMjgtZGFlMy0z ZDU3LTkzMjQtNGYxNzhlMTIxNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWMzNjdiYjAtYTZlMC00NzY5LTll OTMtZThlOWI2YTFhY2I5L2VjMzY3YmIwLWE2ZTAtNDc2OS05ZTkzLWU4ZTliNmEx YWNiOS5jcmwwHwYDVR0jBBgwFoAUiftXSzh80aZzcDZ9LeflpSu1aZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5 YjZhMWFjYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7/JAElIkXJfvaryty9Jz/m9izFs0Nu1qf9wdvpO6zb/blagUSwgT3t mJJYZ+zfxJYmMkFqlV1ecVWxB6GVy8sVCllijiuXQznkSMTVaWW85OwUjLpp3nxQ xQm4S0RKIeZrdml3N3BO1IyRL1wkc2p3jLefLcW+rGaoebfh/JrT5hQRUZmoyqOB J2z3uH+bLlBH6W6vd8xM0Rb7idh1dhvkfM7pd3c3XjIPj+5oDrDq0b/7nzxoVp75 9gmi6PDUS92y7yD+kjoou7mkVQDsSNdhM5X2hMY+KLJ6Xqdm+AjK9dXxFkTGlLfc qrLfQIH0yarEig+36pVspoKXgvojhM8= -----END CERTIFICATE-----Generated at Fri Apr 17 09:23:11 2026 by rpki-client