$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/1452c82d-e941-345d-9f84-660e91555ab0.roa File: 1452c82d-e941-345d-9f84-660e91555ab0.roa (raw, json) Hash identifier: ikxi5DpipIVwl/YidghQvMJq+JXinIU/rUa3BBPdbJQ= Subject key identifier: DB:02:50:14:FC:0C:96:8B:71:7E:7E:27:6B:82:35:B2:02:B1:C5:15 Certificate issuer: /CN=f2bc78ac-975c-4022-acd7-bd50268cee22 Certificate serial: 010D0C9F4328584EA788B5C9CEEFD07F93EF0580 Authority key identifier: 6A:96:A7:6C:28:14:A3:F1:0F:D8:F1:43:C2:1B:40:4C:30:49:70:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/1452c82d-e941-345d-9f84-660e91555ab0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 2914 IP address blocks: 142.249.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/f2bc78ac-975c-4022-acd7-bd50268cee22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/f2bc78ac-975c-4022-acd7-bd50268cee22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:b5:c9:ce:ef:d0:7f:93:ef:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bc78ac-975c-4022-acd7-bd50268cee22 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2a94e144-a961-4e5f-af93-6cd4290e118b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:f3:b9:c3:9c:26:27:e1:1f:66:bc:32:50: 4e:74:f1:50:95:82:a9:7c:0b:42:d0:d0:ab:ae:8d: 08:02:de:b7:c3:6c:7e:26:b9:38:85:aa:0f:3a:b0: f9:04:f4:c7:58:87:f7:de:8b:51:63:86:c1:4b:7b: 07:3c:3e:1d:ef:3b:64:1d:b0:4f:3c:bd:65:84:25: 4d:06:6a:2f:cc:40:b4:37:d8:6d:3e:cd:0e:48:1c: 6a:c4:aa:cb:c2:2a:bb:75:eb:46:51:fe:e2:c3:63: 10:71:7a:6c:32:6d:c7:0b:37:2d:a0:5f:e0:14:3e: 49:c5:eb:eb:e4:ee:37:c0:0a:80:c1:79:f3:93:41: 34:ce:5d:14:86:1e:28:21:d4:71:c0:f6:de:18:6d: eb:7e:9b:0d:f2:75:5b:54:be:29:8a:5a:75:f5:72: e1:54:45:8a:8f:9b:ba:52:05:68:c1:41:b3:11:44: ec:4c:70:ef:96:b8:12:60:ef:24:9f:38:bd:e6:49: 07:df:80:57:ac:37:a6:00:c9:47:24:92:a2:3c:48: 2e:9a:9c:3e:bf:0d:c3:48:42:2a:4b:6a:6b:52:64: 47:cb:77:6b:57:4c:93:20:da:56:0f:16:be:07:f0: e9:f5:f6:b3:77:f5:40:07:87:78:54:9a:3f:9e:7c: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:02:50:14:FC:0C:96:8B:71:7E:7E:27:6B:82:35:B2:02:B1:C5:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/1452c82d-e941-345d-9f84-660e91555ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22/f2bc78ac-975c-4022-acd7-bd50268cee22.crl X509v3 Authority Key Identifier: keyid:6A:96:A7:6C:28:14:A3:F1:0F:D8:F1:43:C2:1B:40:4C:30:49:70:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f2bc78ac-975c-4022-acd7-bd50268cee22.cer sbgp-ipAddrBlock: critical IPv4: 142.249.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:47:c7:93:5b:2d:39:98:58:c5:11:bd:2e:77:89:e9:4a:20: 29:ab:b4:ca:e5:77:16:c3:89:98:e7:ac:17:4e:a1:8b:f0:c2: 63:13:d1:49:9b:c1:07:a4:4b:68:7f:f3:79:5b:14:19:83:ca: 82:94:c1:3f:a7:a4:d3:69:05:0e:82:27:fd:71:96:18:aa:03: 2e:70:e2:c8:46:c1:f2:ee:fd:65:44:10:c6:f1:a0:10:57:a3: 9f:e7:52:6d:f7:26:e1:69:56:b1:bb:a1:df:ea:36:f8:66:82: d5:c3:53:d0:07:fa:a9:5b:16:90:a9:01:81:3b:0a:79:54:a9: 4b:ba:2c:10:35:53:4b:36:b2:4b:ae:4b:80:3e:7f:34:04:d9: 64:0b:74:2a:b4:a4:4a:38:23:9b:e6:e9:99:4a:56:00:8b:ff: df:99:bb:97:d9:48:a0:23:fe:5f:79:74:92:f0:c3:71:b4:b4: 1f:6d:a1:ec:b6:ce:c4:25:fa:5f:15:9b:2e:c1:ca:61:a0:25: 6c:0b:9d:c7:4e:56:ce:07:5a:6f:09:14:7a:84:98:2c:5b:0c: b7:df:03:55:f0:6a:fe:f3:f8:f3:ae:23:f7:7d:bf:dd:56:21: 01:22:9e:b7:bc:22:15:e4:72:df:f8:e6:b8:ac:b4:8c:0c:0b: b7:d2:91:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niLXJzu/Qf5PvBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJiYzc4YWMtOTc1Yy00MDIyLWFjZDctYmQ1MDI2OGNl ZTIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmE5NGUxNDQtYTk2MS00ZTVmLWFmOTMtNmNkNDI5MGUxMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn7zucOcJifhH2a8MlBOdPFQlYKpfAtC0NCr ro0IAt63w2x+Jrk4haoPOrD5BPTHWIf33otRY4bBS3sHPD4d7ztkHbBPPL1lhCVN BmovzEC0N9htPs0OSBxqxKrLwiq7detGUf7iw2MQcXpsMm3HCzctoF/gFD5Jxevr 5O43wAqAwXnzk0E0zl0Uhh4oIdRxwPbeGG3rfpsN8nVbVL4pilp19XLhVEWKj5u6 UgVowUGzEUTsTHDvlrgSYO8knzi95kkH34BXrDemAMlHJJKiPEgumpw+vw3DSEIq S2prUmRHy3drV0yTINpWDxa+B/Dp9fazd/VAB4d4VJo/nnzxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsCUBT8DJaLcX5+J2uCNbICscUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMmJj NzhhYy05NzVjLTQwMjItYWNkNy1iZDUwMjY4Y2VlMjIvMTQ1MmM4MmQtZTk0MS0z NDVkLTlmODQtNjYwZTkxNTU1YWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjJiYzc4YWMtOTc1Yy00MDIyLWFj ZDctYmQ1MDI2OGNlZTIyL2YyYmM3OGFjLTk3NWMtNDAyMi1hY2Q3LWJkNTAyNjhj ZWUyMi5jcmwwHwYDVR0jBBgwFoAUapanbCgUo/EP2PFDwhtATDBJcNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMmJjNzhhYy05NzVjLTQwMjItYWNkNy1iZDUw MjY4Y2VlMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtHx5NbLTmYWMURvS53ielKICmrtMrldxbDiZjnrBdOoYvwwmMT0Umb wQekS2h/83lbFBmDyoKUwT+npNNpBQ6CJ/1xlhiqAy5w4shGwfLu/WVEEMbxoBBX o5/nUm33JuFpVrG7od/qNvhmgtXDU9AH+qlbFpCpAYE7CnlUqUu6LBA1U0s2skuu S4A+fzQE2WQLdCq0pEo4I5vm6ZlKVgCL/9+Zu5fZSKAj/l95dJLww3G0tB9toey2 zsQl+l8Vmy7BymGgJWwLncdOVs4HWm8JFHqEmCxbDLffA1Xwav7z+POuI/d9v91W IQEinre8IhXkct/45ristIwMC7fSke0= -----END CERTIFICATE-----Generated at Mon Sep 21 09:12:55 2026 by rpki-client