$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa File: 1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa (raw, json) Hash identifier: OeTbOQhoD86SEwS6K+B3j+G4ziEnygJ+6S01C2kGLlU= Subject key identifier: CB:AE:10:F1:6D:16:BA:5E:21:72:E6:EC:1C:13:3F:84:7F:79:C2:FC Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584F5E62E999073086E90CD7AE60 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 35860 IP address blocks: 142.248.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e9:99:07:30:86:e9:0c:d7:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=b3ffdfe5-5b0a-48f9-a38c-d09b6e5b6314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:ed:1f:a7:ac:92:7e:4e:df:74:7d:28:8b: a9:fd:a6:01:5a:6b:01:31:85:32:76:4a:87:5d:bc: 54:9b:6f:0c:4e:ac:43:ae:dc:e1:18:2f:eb:62:2f: 98:28:13:bb:06:75:a3:99:87:76:01:78:b5:ec:cd: ac:ba:d2:0e:38:1f:02:41:f1:bc:8c:a5:b2:45:1d: b4:a3:ab:1e:c8:d9:f0:b4:d3:29:60:34:cd:40:87: c2:f6:83:31:60:cc:87:15:94:bc:28:cf:ad:56:91: ce:34:3f:79:c8:fc:12:a3:1e:62:57:03:00:4a:11: d0:b9:eb:bf:90:7e:c1:5a:80:80:0f:c0:05:e2:c2: 03:3e:68:0d:c9:19:5c:9c:f9:32:bf:8b:61:cf:51: 01:be:63:cf:26:ed:11:0b:ce:8d:21:3d:35:f0:01: f8:bf:c3:49:70:69:37:6d:cd:3e:f2:c0:2c:4d:77: 0d:66:7c:be:86:24:8b:2a:d3:24:05:da:bd:ab:01: f5:e1:53:28:d5:34:87:fb:5f:7b:5d:ef:e2:5c:a7: ca:f9:bd:1e:91:95:0c:6d:cf:b9:0d:7b:78:0b:e1: 81:c0:13:dc:65:05:d0:61:e2:fa:13:cc:d6:89:26: 8a:69:27:15:28:59:4b:19:c9:54:42:99:18:ed:ae: 4c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AE:10:F1:6D:16:BA:5E:21:72:E6:EC:1C:13:3F:84:7F:79:C2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 142.248.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1e:21:78:ad:9e:f1:d8:7f:46:bb:78:5b:03:b1:f9:8c:8f: 80:0f:5a:be:d9:b6:3a:1d:98:04:84:c1:9b:52:93:eb:4b:d4: 24:7d:86:72:80:c4:76:1d:d9:39:fd:28:b6:a7:ed:36:d7:98: 46:ae:b1:e1:96:93:bf:e9:fb:b5:ea:e9:c4:f4:7c:45:27:fa: 30:e3:02:00:30:e4:cf:bf:86:ac:25:6a:3b:4f:c8:29:10:2e: dd:f0:dd:ae:c2:91:1a:a3:da:b5:f4:bb:17:2b:f7:b8:77:1e: 11:59:85:76:d3:1a:05:cd:3a:c6:41:33:3e:24:4c:f1:16:af: 26:66:75:9a:ef:73:3c:de:3f:95:c7:f7:8a:2c:88:8b:e7:e4: 9a:ca:a8:ab:7a:10:34:e1:79:23:76:33:f9:5e:89:20:03:77: 1c:2b:b7:b9:fb:5c:7a:96:ea:02:53:1e:ab:91:52:f6:f3:72: 94:a7:40:fb:8f:5d:80:8b:c7:e9:bf:20:ce:30:8a:d0:fe:9d: 9c:8f:22:5e:ae:5f:64:64:b6:79:ba:79:15:f8:bd:c2:8b:68: 3b:8a:f7:34:e8:01:8d:ab:54:3c:c2:89:3f:e0:bb:79:4a:89: 92:3b:aa:5a:c4:f3:2e:01:c8:85:05:3d:d1:35:82:54:fe:fc: 1f:00:9f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYumZBzCG6QzXrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YjNmZmRmZTUtNWIwYS00OGY5LWEzOGMtZDA5YjZlNWI2MzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps/tH6eskn5O33R9KIup/aYBWmsBMYUydkqH XbxUm28MTqxDrtzhGC/rYi+YKBO7BnWjmYd2AXi17M2sutIOOB8CQfG8jKWyRR20 o6seyNnwtNMpYDTNQIfC9oMxYMyHFZS8KM+tVpHOND95yPwSox5iVwMAShHQueu/ kH7BWoCAD8AF4sIDPmgNyRlcnPkyv4thz1EBvmPPJu0RC86NIT018AH4v8NJcGk3 bc0+8sAsTXcNZny+hiSLKtMkBdq9qwH14VMo1TSH+197Xe/iXKfK+b0ekZUMbc+5 DXt4C+GBwBPcZQXQYeL6E8zWiSaKaScVKFlLGclUQpkY7a5MrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuuEPFtFrpeIXLm7BwTP4R/ecL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvMWE0NTkxMGItNWY0NC0z MGNlLTlkZmEtOWZkYzFmZTg2Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkeIXitnvHYf0a7eFsDsfmMj4APWr7ZtjodmASEwZtSk+tL1CR9hnKA xHYd2Tn9KLan7TbXmEauseGWk7/p+7Xq6cT0fEUn+jDjAgAw5M+/hqwlajtPyCkQ Lt3w3a7CkRqj2rX0uxcr97h3HhFZhXbTGgXNOsZBMz4kTPEWryZmdZrvczzeP5XH 94osiIvn5JrKqKt6EDTheSN2M/leiSADdxwrt7n7XHqW6gJTHquRUvbzcpSnQPuP XYCLx+m/IM4witD+nZyPIl6uX2Rktnm6eRX4vcKLaDuK9zToAY2rVDzCiT/gu3lK iZI7qlrE8y4ByIUFPdE1glT+/B8Anzs= -----END CERTIFICATE-----Generated at Fri Oct 9 02:20:53 2026 by rpki-client