$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa File: fa250e28-dae3-3d57-9324-4f178e12143d.roa (raw, json) Hash identifier: 8UT+eMIVhhWM6eaPVvq8FoWW+5D2feSk1485UH78MP4= Subject key identifier: 10:F0:E8:B3:84:49:9B:3D:B6:DB:C0:46:C0:19:FC:CA:49:EF:92:36 Certificate issuer: /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Certificate serial: 010D0C9F4328584F85784EF7B23AB8F959613580 Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 32668 IP address blocks: 142.248.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:4e:f7:b2:3a:b8:f9:59:61:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=2239766c-7cfb-48e6-be11-3ba186c759d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:72:8c:49:08:4a:2d:5e:83:6f:0c:75:88:7f: 98:b8:90:28:89:c3:d5:4a:2d:7f:f1:f3:e2:56:1e: 0f:8a:4d:d0:c5:6a:74:bf:f3:45:88:69:fd:c8:41: 5d:3e:1e:e0:bb:90:9a:55:1e:9a:ee:d5:a7:97:86: cc:d5:48:31:91:38:d6:61:b4:df:d3:8a:d8:8c:ba: 12:3e:bf:d4:73:58:d7:cd:6f:a0:19:8f:ff:81:da: d3:18:38:a8:5e:a3:96:b0:0d:eb:7c:0e:e1:e6:7d: 45:59:3a:3a:ff:f8:52:de:78:98:58:95:ce:66:e5: a8:79:09:17:c9:a3:d2:c7:68:60:99:3f:42:b0:91: 2d:e0:48:f9:38:3d:09:6a:b3:5c:f4:95:dd:6e:19: ee:ec:cd:a1:a1:b9:ea:94:89:13:98:13:1c:6b:77: f8:6d:1e:4d:e8:9e:f4:bc:44:43:c9:27:be:59:31: 4e:eb:c0:94:b6:1f:31:07:5c:42:81:15:2c:ba:9f: a4:5a:68:51:2a:e2:30:ad:6f:cd:af:13:d2:1e:d8: 30:35:5d:e0:e6:20:d9:81:89:d9:d6:75:f9:59:6d: fe:30:23:a7:ec:7a:dc:f5:21:6a:f1:9a:3b:1c:bf: a1:f9:89:56:95:ab:e9:7a:7c:ce:fa:45:47:03:59: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F0:E8:B3:84:49:9B:3D:B6:DB:C0:46:C0:19:FC:CA:49:EF:92:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl X509v3 Authority Key Identifier: keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer sbgp-ipAddrBlock: critical IPv4: 142.248.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1f:9d:34:83:a4:03:9e:c3:a6:00:19:d0:7e:08:55:e6:0a: 30:0c:f6:c8:80:a6:22:9a:6b:27:58:fd:65:27:02:5c:8e:74: 39:66:7a:12:d6:e3:1e:34:db:a3:64:b9:49:15:87:6a:32:83: 5a:79:65:9b:b6:41:0f:85:76:69:78:41:c4:1b:eb:27:26:75: 19:c9:72:cd:ac:fc:d6:bd:42:cd:24:42:cd:79:0d:76:3c:85: 70:55:66:5c:a2:b7:c5:b5:7b:31:ce:f6:1d:10:97:bb:ab:6b: c4:43:6a:56:4f:3b:97:89:53:6f:dc:59:50:d5:48:09:72:e7: 28:7f:e5:2d:b4:37:dd:44:f6:8d:51:ac:58:ac:bf:99:0a:15: ac:bb:de:85:aa:99:2b:ca:1c:cd:a6:ce:d2:01:e1:b6:37:93: 96:f4:b5:83:6d:44:f4:c1:45:f4:f7:dc:9b:f3:b4:0d:84:f1: 73:65:ef:cd:91:99:46:64:ab:37:49:06:1d:90:fb:fa:1a:ea: d2:d9:7a:07:6a:36:46:6b:46:1b:11:7f:dd:69:68:c6:c4:f3: 68:10:0a:fb:57:ad:9d:38:4d:3c:16:b7:98:35:84:5f:5e:72: 38:99:a8:1d:8b:c0:16:43:01:30:7c:b4:df:cd:27:3b:60:65: 2c:bf:de:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeE73sjq4+VlhNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMzNjdiYjAtYTZlMC00NzY5LTllOTMtZThlOWI2YTFh Y2I5MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk MjIzOTc2NmMtN2NmYi00OGU2LWJlMTEtM2JhMTg2Yzc1OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinKMSQhKLV6Dbwx1iH+YuJAoicPVSi1/8fPi Vh4Pik3QxWp0v/NFiGn9yEFdPh7gu5CaVR6a7tWnl4bM1UgxkTjWYbTf04rYjLoS Pr/Uc1jXzW+gGY//gdrTGDioXqOWsA3rfA7h5n1FWTo6//hS3niYWJXOZuWoeQkX yaPSx2hgmT9CsJEt4Ej5OD0JarNc9JXdbhnu7M2hobnqlIkTmBMca3f4bR5N6J70 vERDySe+WTFO68CUth8xB1xCgRUsup+kWmhRKuIwrW/NrxPSHtgwNV3g5iDZgYnZ 1nX5WW3+MCOn7Hrc9SFq8Zo7HL+h+YlWlavpenzO+kVHA1mjfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDw6LOESZs9ttvARsAZ/MpJ75I2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2 N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZhMWFjYjkvZmEyNTBlMjgtZGFlMy0z ZDU3LTkzMjQtNGYxNzhlMTIxNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWMzNjdiYjAtYTZlMC00NzY5LTll OTMtZThlOWI2YTFhY2I5L2VjMzY3YmIwLWE2ZTAtNDc2OS05ZTkzLWU4ZTliNmEx YWNiOS5jcmwwHwYDVR0jBBgwFoAUiftXSzh80aZzcDZ9LeflpSu1aZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5 YjZhMWFjYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkfnTSDpAOew6YAGdB+CFXmCjAM9siApiKaaydY/WUnAlyOdDlmehLW 4x4026NkuUkVh2oyg1p5ZZu2QQ+Fdml4QcQb6ycmdRnJcs2s/Na9Qs0kQs15DXY8 hXBVZlyit8W1ezHO9h0Ql7ura8RDalZPO5eJU2/cWVDVSAly5yh/5S20N91E9o1R rFisv5kKFay73oWqmSvKHM2mztIB4bY3k5b0tYNtRPTBRfT33JvztA2E8XNl782R mUZkqzdJBh2Q+/oa6tLZegdqNkZrRhsRf91paMbE82gQCvtXrZ04TTwWt5g1hF9e cjiZqB2LwBZDATB8tN/NJztgZSy/3kI= -----END CERTIFICATE-----Generated at Thu Nov 5 17:35:57 2026 by rpki-client