$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa File: 25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa (raw, json) Hash identifier: lcZ1HJ6gkqZYIw5y9/FjKsd+9P4rFta5hhNPpmFcNG4= Subject key identifier: 09:2C:6B:E6:8C:D2:FB:5C:68:0C:53:92:DD:5D:BA:5A:7A:D8:E0:DD Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584F612D5CAC3109E26FC331B000 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 396952 IP address blocks: 142.248.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:5c:ac:31:09:e2:6f:c3:31:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=d8442153-f984-4dfb-8ff3-68320cd02d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:6f:20:b3:1e:57:3e:d9:7f:04:25:77:ce: b6:28:1f:13:68:7c:ac:c6:28:91:06:2b:76:9f:c4: e6:1e:61:17:70:9f:04:0d:49:71:33:55:35:45:0d: 59:d2:91:36:3c:6f:dc:59:45:06:27:1d:c2:5e:7f: 0c:bf:bd:af:12:9a:b2:f3:8d:b7:9d:41:f1:49:66: 37:97:a3:ef:9f:14:cf:a1:d9:75:d2:89:98:51:76: 67:7d:83:ca:27:33:0a:63:ee:95:76:24:22:44:ce: 0d:b7:ff:08:b4:b6:99:00:78:f7:0b:bf:c6:d3:e8: 6a:71:1c:47:95:22:3d:02:ea:ea:0e:d6:03:e9:16: b5:41:74:4a:03:61:51:94:12:5e:16:c4:d1:7e:bc: 40:10:11:5e:e2:06:a5:e7:35:a2:61:b8:a6:dd:22: cc:09:bc:fd:ad:80:10:af:58:3f:4d:74:de:01:16: 89:44:ab:d9:55:98:c0:43:7c:62:b9:0f:1f:fd:4a: 33:c0:e4:ef:2b:26:27:74:71:05:e1:bb:9e:c9:ce: 98:bf:35:b5:30:4c:fa:d4:1e:78:42:e8:7c:28:36: 36:80:5f:7d:6e:4b:bb:c1:c6:55:14:5a:37:59:c2: f3:69:9a:77:e5:bb:e5:b4:7e:4c:b2:a2:d2:be:bc: 77:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2C:6B:E6:8C:D2:FB:5C:68:0C:53:92:DD:5D:BA:5A:7A:D8:E0:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 142.248.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:28:be:2e:9b:17:69:7e:7c:e0:b1:58:3f:72:c6:47:7f:92: 3e:e5:15:34:b9:44:32:46:13:4e:e4:57:b7:29:c1:ae:4f:f6: 36:bd:64:b4:70:72:d3:d2:83:60:53:d6:04:c0:ba:b3:d5:0e: ac:47:52:0e:2e:d4:2c:44:7c:8c:fc:c1:78:b0:63:e1:1b:af: 78:8a:81:35:5c:8c:c0:33:05:9c:c5:17:93:4e:f6:b3:77:6c: d3:0a:81:f5:69:8f:91:16:19:a6:88:73:b7:6c:83:e3:5e:9c: c9:d1:96:27:62:7f:95:55:5d:ce:d0:78:39:c8:da:03:19:a6: e3:e6:e6:61:1f:75:81:cc:16:05:06:47:05:60:a2:93:f1:4c: e3:68:e0:ba:f6:c8:f4:fd:ec:05:13:e0:a5:d1:1d:fb:9b:b3: f7:e1:8a:a3:a6:a3:a6:29:56:ad:63:4c:ce:e3:76:13:dd:d4: 2b:54:9b:d1:6f:90:10:6a:90:ca:e8:2e:8d:25:76:19:9e:df: f9:b4:35:e7:35:f5:13:9d:85:33:c1:94:80:cf:a0:97:e6:37: 8a:f8:bd:1f:25:4a:99:3e:89:5a:11:6a:da:00:e1:c0:a0:99: d7:ca:13:10:20:88:26:3a:06:e4:42:93:d6:20:90:a6:ed:b0: f3:8c:fb:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLVysMQnib8MxsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDg0NDIxNTMtZjk4NC00ZGZiLThmZjMtNjgzMjBjZDAyZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0pvILMeVz7ZfwQld862KB8TaHysxiiRBit2 n8TmHmEXcJ8EDUlxM1U1RQ1Z0pE2PG/cWUUGJx3CXn8Mv72vEpqy8423nUHxSWY3 l6PvnxTPodl10omYUXZnfYPKJzMKY+6VdiQiRM4Nt/8ItLaZAHj3C7/G0+hqcRxH lSI9AurqDtYD6Ra1QXRKA2FRlBJeFsTRfrxAEBFe4gal5zWiYbim3SLMCbz9rYAQ r1g/TXTeARaJRKvZVZjAQ3xiuQ8f/UozwOTvKyYndHEF4bueyc6YvzW1MEz61B54 Quh8KDY2gF99bku7wcZVFFo3WcLzaZp35bvltH5MsqLSvrx3IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAksa+aM0vtcaAxTkt1dulp62ODdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvMjUzMjFhN2QtMmZiZC0z M2M2LTgwOGItYzhjYjczZmMzM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsovi6bF2l+fOCxWD9yxkd/kj7lFTS5RDJGE07kV7cpwa5P9ja9ZLRw ctPSg2BT1gTAurPVDqxHUg4u1CxEfIz8wXiwY+Ebr3iKgTVcjMAzBZzFF5NO9rN3 bNMKgfVpj5EWGaaIc7dsg+NenMnRlidif5VVXc7QeDnI2gMZpuPm5mEfdYHMFgUG RwVgopPxTONo4Lr2yPT97AUT4KXRHfubs/fhiqOmo6YpVq1jTM7jdhPd1CtUm9Fv kBBqkMroLo0ldhme3/m0Nec19ROdhTPBlIDPoJfmN4r4vR8lSpk+iVoRatoA4cCg mdfKExAgiCY6BuRCk9YgkKbtsPOM+4A= -----END CERTIFICATE-----Generated at Mon Oct 12 03:59:57 2026 by rpki-client