$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/1ec3418d-680a-34a8-ac14-d7e081bd03dd.roa File: 1ec3418d-680a-34a8-ac14-d7e081bd03dd.roa (raw, json) Hash identifier: 5HK2k3JnuGC71NZc4y0jXu+wAvormnIXgJUTOdC3t+4= Subject key identifier: 4E:6F:3D:2C:59:39:BA:03:62:D1:FE:DF:E7:7B:62:52:D1:D1:B8:05 Certificate issuer: /CN=7507a0f9-2e97-4b0c-902e-44f0f1c62a3c Certificate serial: 010D0C9F4328584F15CCDFAB263E8326500D4280 Authority key identifier: 6C:26:4B:8D:BD:F7:8F:03:2A:89:5B:B9:5E:15:EF:10:86:E9:78:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/1ec3418d-680a-34a8-ac14-d7e081bd03dd.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 401869 IP address blocks: 142.248.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:df:ab:26:3e:83:26:50:0d:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7507a0f9-2e97-4b0c-902e-44f0f1c62a3c Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=c50ea65e-7b8c-485c-9598-acb685a3f7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:87:21:cd:73:69:83:cf:8d:40:59:24:94:fb: 25:fc:4b:4d:b7:b0:c0:60:18:be:dc:46:7c:5d:8f: ac:a2:e1:b5:22:34:c4:eb:9b:7f:1b:1e:93:a6:11: 43:30:90:5f:b7:5f:1b:90:c1:f8:2a:57:a6:02:c3: d0:df:2f:2e:29:95:92:87:4c:20:fd:bd:c7:00:3c: 7b:df:c5:29:7c:af:3a:8f:90:11:a2:ab:0b:5b:7a: 9a:e0:7f:c7:18:2c:2f:b7:e3:af:67:24:94:f2:65: c7:28:e2:00:c5:6c:ca:f6:16:c0:52:97:f0:d8:63: 7c:06:aa:42:8d:06:66:70:c8:9e:45:0d:c5:87:0e: 44:87:6d:b2:28:7a:aa:49:d5:d0:61:71:7f:51:e5: 06:3b:31:94:79:07:ad:1c:cb:50:9f:25:ee:c5:67: d2:bb:a3:c2:d4:30:fd:2e:be:a2:44:09:c7:3a:d9: 8a:20:36:a2:06:aa:bd:fa:59:9a:e2:57:1d:7c:bb: 46:26:27:0d:09:a7:c3:7b:f8:c4:c0:47:ef:6c:d8: ab:fd:5e:4b:6c:e6:e3:0f:3f:b6:ba:3c:ea:03:01: 41:7e:fa:35:6f:60:a2:60:f0:13:b5:c8:35:28:2a: 68:13:12:00:02:f0:89:a6:46:cf:bf:40:7e:fa:ca: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6F:3D:2C:59:39:BA:03:62:D1:FE:DF:E7:7B:62:52:D1:D1:B8:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/1ec3418d-680a-34a8-ac14-d7e081bd03dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.crl X509v3 Authority Key Identifier: keyid:6C:26:4B:8D:BD:F7:8F:03:2A:89:5B:B9:5E:15:EF:10:86:E9:78:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.cer sbgp-ipAddrBlock: critical IPv4: 142.248.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:94:de:21:59:17:c1:29:e8:60:26:ae:97:d1:4a:3e:e3:71: 48:d0:56:eb:bf:36:f8:02:4f:a9:84:64:f7:ac:94:a8:a9:67: 76:d7:7e:8f:96:ea:c6:8e:54:6b:92:20:a3:5f:b0:4a:30:6c: b0:7f:84:41:3d:05:ff:e6:5d:2a:70:30:52:f8:11:6c:81:4a: bf:71:e9:30:74:16:d6:b3:f9:7f:96:1c:f1:74:70:0b:d8:a0: d3:65:ab:a8:32:88:0e:d3:65:5a:9b:74:df:9b:c5:12:83:f7: 40:43:5e:e8:7e:9c:35:e1:7c:a1:10:95:9c:fe:34:89:65:35: 6e:35:36:64:a1:7e:76:28:84:6c:98:a2:0e:43:1e:4c:a5:ed: fa:13:7a:02:ec:77:f8:5d:dd:23:9f:09:ea:fd:11:c2:11:32: a9:7a:61:54:b6:84:3b:17:63:e1:64:08:e4:92:6b:8e:ab:2c: 11:7f:5d:74:09:39:e3:7b:91:59:c8:b4:82:07:9a:fc:fb:2a: 0f:05:22:91:e1:08:be:7f:71:0f:47:88:b7:c1:d1:3e:74:8f: 47:dd:b8:09:27:59:f6:11:6f:b8:a0:35:29:33:79:00:41:f3: 09:1a:c8:65:55:e7:22:40:c7:53:16:cd:63:3e:00:c9:57:b0: 1d:99:8f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzN+rJj6DJlANQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzUwN2EwZjktMmU5Ny00YjBjLTkwMmUtNDRmMGYxYzYy YTNjMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YzUwZWE2NWUtN2I4Yy00ODVjLTk1OTgtYWNiNjg1YTNmN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YchzXNpg8+NQFkklPsl/EtNt7DAYBi+3EZ8 XY+souG1IjTE65t/Gx6TphFDMJBft18bkMH4KlemAsPQ3y8uKZWSh0wg/b3HADx7 38UpfK86j5ARoqsLW3qa4H/HGCwvt+OvZySU8mXHKOIAxWzK9hbAUpfw2GN8BqpC jQZmcMieRQ3Fhw5Eh22yKHqqSdXQYXF/UeUGOzGUeQetHMtQnyXuxWfSu6PC1DD9 Lr6iRAnHOtmKIDaiBqq9+lma4lcdfLtGJicNCafDe/jEwEfvbNir/V5LbObjDz+2 ujzqAwFBfvo1b2CiYPATtcg1KCpoExIAAvCJpkbPv0B++soUNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5vPSxZOboDYtH+3+d7YlLR0bgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NTA3 YTBmOS0yZTk3LTRiMGMtOTAyZS00NGYwZjFjNjJhM2MvMWVjMzQxOGQtNjgwYS0z NGE4LWFjMTQtZDdlMDgxYmQwM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzUwN2EwZjktMmU5Ny00YjBjLTkw MmUtNDRmMGYxYzYyYTNjLzc1MDdhMGY5LTJlOTctNGIwYy05MDJlLTQ0ZjBmMWM2 MmEzYy5jcmwwHwYDVR0jBBgwFoAUbCZLjb33jwMqiVu5XhXvEIbpeJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83NTA3YTBmOS0yZTk3LTRiMGMtOTAyZS00NGYw ZjFjNjJhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOU3iFZF8Ep6GAmrpfRSj7jcUjQVuu/NvgCT6mEZPeslKipZ3bXfo+W 6saOVGuSIKNfsEowbLB/hEE9Bf/mXSpwMFL4EWyBSr9x6TB0Ftaz+X+WHPF0cAvY oNNlq6gyiA7TZVqbdN+bxRKD90BDXuh+nDXhfKEQlZz+NIllNW41NmShfnYohGyY og5DHkyl7foTegLsd/hd3SOfCer9EcIRMql6YVS2hDsXY+FkCOSSa46rLBF/XXQJ OeN7kVnItIIHmvz7Kg8FIpHhCL5/cQ9HiLfB0T50j0fduAknWfYRb7igNSkzeQBB 8wkayGVV5yJAx1MWzWM+AMlXsB2Zj4k= -----END CERTIFICATE-----Generated at Sun Sep 27 11:19:49 2026 by rpki-client