$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/fd9d5eb1-6831-3ce8-a74a-b36babf5534a.roa File: fd9d5eb1-6831-3ce8-a74a-b36babf5534a.roa (raw, json) Hash identifier: jV/t2aiAfRbsFcbBcnWQk+cPE+29HZqAsqL3HFaOz7A= Subject key identifier: 15:4A:27:98:8F:47:29:41:0D:D8:27:34:30:CE:E4:3A:52:FF:63:A0 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584B799ECCA0274C142E0A74C920 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/fd9d5eb1-6831-3ce8-a74a-b36babf5534a.roa Signing time: Fri 10 Oct 2025 12:00:28 +0000 ROA not before: Fri 10 Oct 2025 12:00:28 +0000 ROA not after: Thu 08 Jan 2026 13:00:28 +0000 asID: 400384 IP address blocks: 142.249.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:9e:cc:a0:27:4c:14:2e:0a:74:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Oct 10 12:00:28 2025 GMT Not After : Jan 8 13:00:28 2026 GMT Subject: CN=f326ea97-d605-4034-b4b9-86e17a1d1175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:97:63:38:66:73:4c:42:fc:40:0c:6a:0f:0b: af:f8:3b:71:aa:e0:ef:9c:14:97:4e:25:bd:0f:18: f2:fa:47:14:cb:a7:a0:7c:d7:4b:b1:07:20:f0:5c: 10:5e:85:7f:4f:ce:2b:04:96:b5:b2:d5:ac:7d:ac: 20:6c:b6:97:27:10:f5:8f:20:07:a5:5c:5e:30:ac: 65:07:2f:47:ed:b9:20:06:25:79:d4:8d:62:4f:1f: f2:b2:10:37:d7:37:d4:1e:7c:d6:77:53:ea:6e:a5: fa:7d:e3:8d:d4:fd:9b:d2:99:b9:e9:5d:fb:bb:73: d4:32:29:96:2d:27:d9:82:e5:ee:c4:3c:df:82:1e: 4f:93:04:18:2d:6d:1c:de:0f:df:88:9e:67:b4:74: 62:c8:e5:0c:f7:90:75:1f:7a:32:1b:26:ab:f3:11: fe:c5:57:fd:d2:f2:0e:76:98:51:90:23:86:07:2d: 44:10:1a:57:a8:e3:9c:fd:2b:71:ef:8e:f4:31:23: 3e:7c:18:94:d6:7b:56:a9:2c:ca:7b:26:94:1b:d0: 43:63:96:8b:a7:56:1a:64:61:ae:d9:33:83:c8:ef: a2:0b:b8:7a:d4:f5:5d:50:2d:4d:0c:45:ef:7c:75: f6:0f:61:21:24:41:be:36:31:3e:b0:10:2f:0c:20: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:27:98:8F:47:29:41:0D:D8:27:34:30:CE:E4:3A:52:FF:63:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/fd9d5eb1-6831-3ce8-a74a-b36babf5534a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 142.249.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:27:7f:c7:32:a7:2b:6f:c9:fc:60:3f:29:31:7f:c8:bf:89: 7d:30:f4:e0:0b:85:9f:33:80:c7:2a:8b:13:a6:6b:72:a0:98: ad:53:7a:08:71:68:3b:06:f5:ed:f3:fe:ad:d9:d9:a4:2f:9c: e6:ad:fd:74:d2:5d:47:1e:ea:1e:1f:eb:bd:81:8b:3d:ca:e0: 95:0b:65:cb:be:f5:0a:e5:d5:fb:06:a9:de:0c:5d:9b:db:49: 36:9e:2d:12:04:38:20:74:9b:8c:98:e4:24:90:df:7e:24:0a: f3:d1:c5:ad:cf:8e:1b:76:1c:3c:7b:07:ea:6d:8c:28:80:ea: be:19:29:48:f7:5d:b4:12:65:a2:90:a5:64:81:57:b2:f2:9d: a4:ab:3a:74:e3:67:b5:ac:8d:b2:a5:4f:0e:27:50:9d:e7:f6: 75:f8:47:a9:d9:bd:0b:5b:48:55:23:13:f9:e0:2d:0a:ad:09: bf:3f:fb:15:44:9f:48:55:af:a0:71:dc:09:bb:d0:fc:39:1c: de:62:ee:55:20:ea:7f:6e:29:ef:bc:b4:77:bf:64:33:39:e4: bb:57:d1:d3:bc:1d:4b:96:a7:d0:bc:85:39:14:0f:85:b0:e2: 0c:10:b5:f6:7c:07:5b:79:01:ed:e4:f4:06:c5:68:99:7b:e7: 76:4d:93:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5nsygJ0wULgp0ySAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI1MTAxMDEyMDAyOFoXDTI2MDEwODEzMDAyOFowLzEtMCsGA1UEAxMk ZjMyNmVhOTctZDYwNS00MDM0LWI0YjktODZlMTdhMWQxMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZdjOGZzTEL8QAxqDwuv+DtxquDvnBSXTiW9 Dxjy+kcUy6egfNdLsQcg8FwQXoV/T84rBJa1stWsfawgbLaXJxD1jyAHpVxeMKxl By9H7bkgBiV51I1iTx/yshA31zfUHnzWd1PqbqX6feON1P2b0pm56V37u3PUMimW LSfZguXuxDzfgh5PkwQYLW0c3g/fiJ5ntHRiyOUM95B1H3oyGyar8xH+xVf90vIO dphRkCOGBy1EEBpXqOOc/Stx7470MSM+fBiU1ntWqSzKeyaUG9BDY5aLp1YaZGGu 2TODyO+iC7h61PVdUC1NDEXvfHX2D2EhJEG+NjE+sBAvDCBtrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVKJ5iPRylBDdgnNDDO5DpS/2OgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvZmQ5ZDVlYjEtNjgzMS0z Y2U4LWE3NGEtYjM2YmFiZjU1MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEnf8cypytvyfxgPykxf8i/iX0w9OALhZ8zgMcqixOma3KgmK1Teghx aDsG9e3z/q3Z2aQvnOat/XTSXUce6h4f672Biz3K4JULZcu+9Qrl1fsGqd4MXZvb STaeLRIEOCB0m4yY5CSQ334kCvPRxa3Pjht2HDx7B+ptjCiA6r4ZKUj3XbQSZaKQ pWSBV7LynaSrOnTjZ7WsjbKlTw4nUJ3n9nX4R6nZvQtbSFUjE/ngLQqtCb8/+xVE n0hVr6Bx3Am70Pw5HN5i7lUg6n9uKe+8tHe/ZDM55LtX0dO8HUuWp9C8hTkUD4Ww 4gwQtfZ8B1t5Ae3k9AbFaJl753ZNk24= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:43 2025 by rpki-client