$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/eb563fb6-0cc4-3152-a6f8-c49a40142347.roa File: eb563fb6-0cc4-3152-a6f8-c49a40142347.roa (raw, json) Hash identifier: VmfCE2zDymlZRILTo1pQq3++Y7k8kGN6BoWmj9OqtFY= Subject key identifier: 0F:21:F8:3B:40:FF:DC:5F:FB:8A:C2:95:BF:B2:22:05:CB:03:D7:06 Certificate issuer: /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030 Certificate serial: 010D0C9F4328584F49735E829C39FF5105E9EA20 Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/eb563fb6-0cc4-3152-a6f8-c49a40142347.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30006 IP address blocks: 142.248.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5e:82:9c:39:ff:51:05:e9:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a80e8e61-8312-4dfc-9087-ba60fd4af5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:82:f8:6a:eb:eb:54:50:ab:a5:d2:35:af:23: a8:36:b6:51:18:f8:1a:21:c4:5f:b6:b4:ed:b6:31: 56:ce:b3:2c:ff:a4:a1:e8:4f:26:90:50:c4:c2:69: d8:44:91:de:c4:83:c7:db:46:d3:a6:2c:da:79:12: 6f:7a:aa:d3:c3:d3:b6:59:ae:20:0e:40:79:03:d2: fb:4f:52:89:14:91:11:72:7e:c2:af:24:f7:a8:c2: 49:a2:eb:32:ff:c3:1f:f6:e9:81:99:ca:28:5e:b3: 55:3e:21:55:36:be:7f:98:f0:3d:b3:e0:6e:dd:ea: 31:05:f9:1a:57:9d:8f:41:76:1b:cc:0c:b0:d1:29: ce:f9:43:3a:e9:d3:6f:f1:8a:a2:dc:fa:40:da:6e: 70:6f:23:ab:e2:77:5a:6d:b5:b0:7a:36:d1:8b:cf: 62:aa:35:f3:1a:be:9b:2a:57:d7:95:38:67:28:a8: 44:07:83:1b:f5:9f:ea:1d:13:07:6f:95:00:ba:56: 64:41:1d:b0:b6:7b:d4:85:27:22:94:93:cd:73:d2: 87:b0:25:fc:27:9d:f6:fd:7c:c3:33:5f:3c:97:4c: 02:ec:e0:65:04:06:e6:e7:1a:2e:e3:ca:93:c8:28: ac:94:33:3c:ca:58:e0:c2:41:9f:31:c6:de:83:55: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:F8:3B:40:FF:DC:5F:FB:8A:C2:95:BF:B2:22:05:CB:03:D7:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/eb563fb6-0cc4-3152-a6f8-c49a40142347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl X509v3 Authority Key Identifier: keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer sbgp-ipAddrBlock: critical IPv4: 142.248.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:af:48:db:7a:fe:8d:f9:ee:22:2e:75:d7:87:d1:99:a8:2d: 05:6c:ee:c8:93:07:d1:a0:9e:42:52:f0:f7:b3:c6:6a:ce:c7: 11:bd:7a:45:f2:af:d1:e5:78:81:f2:ac:65:7a:09:d4:ea:b1: f6:c1:a7:85:ab:96:65:ad:13:ad:30:4e:c3:3d:26:64:cd:bc: 65:03:f8:e4:5c:c5:37:f4:9a:d1:0a:9a:f2:51:61:14:d2:aa: 87:d9:78:07:90:b3:7c:ff:8e:f7:7a:44:bc:38:03:49:18:3f: 3b:71:7a:f5:8c:14:a2:93:38:66:ce:01:3a:19:e3:6c:51:0b: 13:e7:39:aa:f0:fb:3c:b6:7b:30:b9:86:31:fc:2f:e9:c2:7f: 3b:5a:31:e9:62:25:3b:b4:40:0b:43:73:a8:c4:e8:98:37:59: a9:22:74:88:e8:f3:c4:ea:06:09:a8:b1:58:3a:ff:af:df:08: c5:d6:9a:46:65:4c:8e:ac:86:9c:01:3f:3d:c2:4e:15:fb:7e: fd:e4:d5:44:a5:1f:a0:d8:dd:ba:f4:d2:77:cb:24:84:61:2c: f2:7c:e1:3f:89:f1:10:aa:8b:a8:db:b9:95:72:56:47:8d:f7: 56:75:17:ce:4f:d3:1a:66:3e:62:0c:05:aa:e4:e1:5a:98:0f: cc:07:8d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc16CnDn/UQXp6iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjljODdmZWYtZDhmOC00MTM0LWE0ZWMtZjJhMDczNTY3 MDMwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTgwZThlNjEtODMxMi00ZGZjLTkwODctYmE2MGZkNGFmNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4L4auvrVFCrpdI1ryOoNrZRGPgaIcRftrTt tjFWzrMs/6Sh6E8mkFDEwmnYRJHexIPH20bTpizaeRJveqrTw9O2Wa4gDkB5A9L7 T1KJFJERcn7CryT3qMJJousy/8Mf9umBmcooXrNVPiFVNr5/mPA9s+Bu3eoxBfka V52PQXYbzAyw0SnO+UM66dNv8Yqi3PpA2m5wbyOr4ndabbWwejbRi89iqjXzGr6b KlfXlThnKKhEB4Mb9Z/qHRMHb5UAulZkQR2wtnvUhScilJPNc9KHsCX8J532/XzD M188l0wC7OBlBAbm5xou48qTyCislDM8yljgwkGfMcbeg1X4YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8h+DtA/9xf+4rClb+yIgXLA9cGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOWM4 N2ZlZi1kOGY4LTQxMzQtYTRlYy1mMmEwNzM1NjcwMzAvZWI1NjNmYjYtMGNjNC0z MTUyLWE2ZjgtYzQ5YTQwMTQyMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjljODdmZWYtZDhmOC00MTM0LWE0 ZWMtZjJhMDczNTY3MDMwL2Y5Yzg3ZmVmLWQ4ZjgtNDEzNC1hNGVjLWYyYTA3MzU2 NzAzMC5jcmwwHwYDVR0jBBgwFoAUkrsDbxKpSG9IpQ1W/5ReLmI8HbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOWM4N2ZlZi1kOGY4LTQxMzQtYTRlYy1mMmEw NzM1NjcwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWvSNt6/o357iIuddeH0ZmoLQVs7siTB9GgnkJS8PezxmrOxxG9ekXy r9HleIHyrGV6CdTqsfbBp4WrlmWtE60wTsM9JmTNvGUD+ORcxTf0mtEKmvJRYRTS qofZeAeQs3z/jvd6RLw4A0kYPztxevWMFKKTOGbOAToZ42xRCxPnOarw+zy2ezC5 hjH8L+nCfztaMeliJTu0QAtDc6jE6Jg3WakidIjo88TqBgmosVg6/6/fCMXWmkZl TI6shpwBPz3CThX7fv3k1USlH6DY3br00nfLJIRhLPJ84T+J8RCqi6jbuZVyVkeN 91Z1F85P0xpmPmIMBark4VqYD8wHjf0= -----END CERTIFICATE-----Generated at Sun Sep 27 04:19:46 2026 by rpki-client