$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/26cd6c40-c589-3a1b-958f-76d7479b9629.roa File: 26cd6c40-c589-3a1b-958f-76d7479b9629.roa (raw, json) Hash identifier: MzkH12BsISA1malIVed/fl3Jz0oD4AKF0bTCSDsi1Yc= Subject key identifier: 90:4A:9A:BC:81:5D:09:C3:5C:B8:95:77:66:EA:2F:96:C7:63:75:73 Certificate issuer: /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Certificate serial: 010D0C9F4328584B981405403380FB36A2948F80 Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/26cd6c40-c589-3a1b-958f-76d7479b9629.roa Signing time: Tue 21 Oct 2025 09:50:54 +0000 ROA not before: Tue 21 Oct 2025 09:50:54 +0000 ROA not after: Mon 19 Jan 2026 10:50:54 +0000 asID: 8796 IP address blocks: 142.248.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:14:05:40:33:80:fb:36:a2:94:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Validity Not Before: Oct 21 09:50:54 2025 GMT Not After : Jan 19 10:50:54 2026 GMT Subject: CN=dd1240ec-2152-4e52-ab6e-deab02667ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bd:0e:28:85:d5:60:45:3b:ba:08:ff:67:5a: a2:0a:38:5e:6f:6c:e0:93:94:6f:da:22:23:7f:ff: 4d:d8:de:6e:93:5a:47:a8:f8:ae:b6:c2:7a:a8:f5: 93:b1:37:c7:03:5c:7d:b4:df:95:61:38:d3:80:f4: 5e:6d:d9:7f:ca:78:c1:1b:ca:8c:76:22:76:99:77: 7d:8a:98:db:5e:10:77:f7:6a:e9:09:68:2d:7e:f4: 59:f7:74:26:cc:1d:ff:9a:3f:02:33:ab:50:60:8b: 68:38:d7:75:4a:82:ac:d1:69:4b:47:39:3f:06:7a: 4c:25:db:2e:5f:ee:d3:72:c0:25:d6:d8:6f:ed:fa: 78:67:fa:9f:ac:74:f3:f3:9d:9d:40:f3:e8:54:da: 26:1c:23:b3:e0:12:db:f5:a1:4e:09:80:79:1d:96: fc:ac:1b:82:19:c4:08:34:a6:e4:b6:e9:01:28:22: d0:7b:58:72:36:83:fa:21:46:38:11:8f:b7:37:e5: 8e:59:5c:03:30:29:b9:a3:96:48:96:c2:0f:e6:4b: 69:ab:99:05:e6:97:a9:c6:b0:57:28:66:fc:01:5a: a6:d9:b5:ea:77:29:d9:e7:49:40:13:62:51:7f:8d: 76:c2:37:7d:9e:0e:1d:df:6f:fb:7f:3a:57:75:d2: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4A:9A:BC:81:5D:09:C3:5C:B8:95:77:66:EA:2F:96:C7:63:75:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/26cd6c40-c589-3a1b-958f-76d7479b9629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl X509v3 Authority Key Identifier: keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3d:90:1e:fe:41:67:3b:e1:08:a4:36:7b:25:f3:15:06:d1: 4c:f2:53:ff:a9:c5:b9:b7:07:da:ef:ca:6d:81:76:c8:27:92: a9:2e:5c:91:a6:7b:b0:1b:10:ab:83:6a:ef:4d:99:26:70:53: 92:e0:91:b9:1f:46:01:19:79:d2:ca:3d:9c:36:d2:92:cb:18: 43:90:db:f3:d6:1c:47:4e:7a:81:62:c2:da:d1:0a:d1:5e:37: e9:b6:f6:09:fc:31:69:21:e8:6d:10:ee:9f:6e:7e:3d:bf:fd: fe:14:6a:10:f1:68:e2:3f:94:eb:a1:bc:20:8a:bd:40:6c:b9: b5:e9:f1:05:5f:24:10:54:d6:15:37:23:ea:bc:8c:63:ba:af: 80:61:02:9c:4d:89:2a:77:c5:95:65:c3:b2:2b:32:93:ac:e0: 49:5a:59:0d:70:83:1e:67:66:af:de:18:86:fd:58:66:8c:80: 89:00:06:3e:f4:cb:64:0c:e8:08:e1:f5:3d:2a:6a:79:bd:0f: 94:ab:1c:31:5d:08:2a:ac:14:a7:5c:8b:2e:b2:1d:b0:6e:bc: b0:90:4a:69:b4:3b:a5:c4:b4:5b:2c:45:19:14:a0:52:8a:4a: 55:b5:d0:55:53:65:b5:8f:b4:73:3f:cc:52:40:5f:6f:bb:77: 5c:ac:66:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYFAVAM4D7NqKUj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4 NTBiMB4XDTI1MTAyMTA5NTA1NFoXDTI2MDExOTEwNTA1NFowLzEtMCsGA1UEAxMk ZGQxMjQwZWMtMjE1Mi00ZTUyLWFiNmUtZGVhYjAyNjY3YWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL0OKIXVYEU7ugj/Z1qiCjheb2zgk5Rv2iIj f/9N2N5uk1pHqPiutsJ6qPWTsTfHA1x9tN+VYTjTgPRebdl/ynjBG8qMdiJ2mXd9 ipjbXhB392rpCWgtfvRZ93QmzB3/mj8CM6tQYItoONd1SoKs0WlLRzk/BnpMJdsu X+7TcsAl1thv7fp4Z/qfrHTz852dQPPoVNomHCOz4BLb9aFOCYB5HZb8rBuCGcQI NKbktukBKCLQe1hyNoP6IUY4EY+3N+WOWVwDMCm5o5ZIlsIP5ktpq5kF5pepxrBX KGb8AVqm2bXqdynZ50lAE2JRf412wjd9ng4d32/7fzpXddKyowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBKmryBXQnDXLiVd2bqL5bHY3VzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NGY2 MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvMjZjZDZjNDAtYzU4OS0z YTFiLTk1OGYtNzZkNzQ3OWI5NjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTRmNjIzZTctYzZiZS00YzNiLWI1 NTQtNmFkNmFjYjA4NTBiLzk0ZjYyM2U3LWM2YmUtNGMzYi1iNTU0LTZhZDZhY2Iw ODUwYi5jcmwwHwYDVR0jBBgwFoAUkcXbHtylYSuEC6CupI1kxQXIEEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2 YWNiMDg1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo9kB7+QWc74QikNnsl8xUG0UzyU/+pxbm3B9rvym2BdsgnkqkuXJGm e7AbEKuDau9NmSZwU5LgkbkfRgEZedLKPZw20pLLGEOQ2/PWHEdOeoFiwtrRCtFe N+m29gn8MWkh6G0Q7p9ufj2//f4UahDxaOI/lOuhvCCKvUBsubXp8QVfJBBU1hU3 I+q8jGO6r4BhApxNiSp3xZVlw7IrMpOs4ElaWQ1wgx5nZq/eGIb9WGaMgIkABj70 y2QM6Ajh9T0qanm9D5SrHDFdCCqsFKdciy6yHbBuvLCQSmm0O6XEtFssRRkUoFKK SlW10FVTZbWPtHM/zFJAX2+7d1ysZjU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:22:45 2025 by rpki-client