$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/2c21bdf2-94dd-3ef5-af4f-079cd0b77e1a.roa File: 2c21bdf2-94dd-3ef5-af4f-079cd0b77e1a.roa (raw, json) Hash identifier: nzyUhPimpDgsclYqn/PjEcMZGPFSMSG0faxwbwEq3w8= Subject key identifier: ED:60:D5:55:CE:8C:32:4B:D6:0D:86:C0:03:7A:E1:F5:02:0F:1B:70 Certificate issuer: /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Certificate serial: 010D0C9F4328584FBED14549D9326A8E891CD6C0 Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/2c21bdf2-94dd-3ef5-af4f-079cd0b77e1a.roa Signing time: Fri 06 Nov 2026 02:00:14 +0000 ROA not before: Fri 06 Nov 2026 02:00:14 +0000 ROA not after: Thu 04 Feb 2027 02:00:14 +0000 asID: 153517 IP address blocks: 142.248.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:be:d1:45:49:d9:32:6a:8e:89:1c:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Validity Not Before: Nov 6 02:00:14 2026 GMT Not After : Feb 4 02:00:14 2027 GMT Subject: CN=59e6bf13-04c1-4306-bc56-bef25b7f960c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:52:a3:a5:e2:b4:23:a7:2b:fb:4e:f5:26:0f: 5e:08:d0:9a:d9:af:be:e8:a1:e3:28:20:b7:78:d7: 9f:29:5d:55:b5:7e:79:4e:aa:9c:cf:4c:b4:6b:d9: a3:2a:a4:8b:1c:be:fe:b3:e4:92:92:f3:92:70:df: b7:f5:f5:1b:6e:8e:58:a9:4a:fd:d0:6f:bb:7a:78: 07:8b:cb:c9:2b:eb:c0:d2:df:42:27:6b:6a:fa:a7: 31:1f:68:cc:44:92:1d:62:9c:e8:a4:ca:83:b9:41: d4:41:73:4d:6b:95:f8:89:1f:a6:bc:2d:bf:5a:02: d1:d3:77:4d:a4:32:ee:63:33:32:da:24:88:53:83: 56:17:c4:99:b5:8e:f7:ac:7b:9c:a8:49:31:af:86: 58:88:77:f8:60:ce:1b:35:91:50:8e:ba:33:9c:b6: dd:e6:b5:02:ad:ec:cb:ce:f0:6a:d3:3b:c4:7b:f2: 22:ec:c5:4d:9b:08:7e:98:13:45:e4:70:56:a8:90: e9:31:d5:69:7c:8b:d8:17:1f:37:c5:e3:60:49:d1: 0c:9d:14:df:1f:72:66:7e:34:16:71:ce:87:31:b5: ef:7c:35:52:14:0e:83:05:58:53:70:ca:dc:fe:4c: 0b:47:00:76:ea:97:2c:62:8f:65:23:2a:17:12:f1: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:60:D5:55:CE:8C:32:4B:D6:0D:86:C0:03:7A:E1:F5:02:0F:1B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/2c21bdf2-94dd-3ef5-af4f-079cd0b77e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl X509v3 Authority Key Identifier: keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:96:4e:d3:76:b0:ab:28:58:0c:8a:23:21:ba:d1:b5:98:08: 81:24:e2:5e:b0:dd:18:92:c0:24:f3:df:89:a0:50:4f:ce:ee: 1e:eb:83:4b:3a:52:db:cc:29:16:b4:34:3d:d5:4d:da:87:d4: 32:f7:d9:35:9b:ac:fb:a0:d8:ec:e5:86:ed:b8:e5:cd:b2:41: b7:bf:18:30:27:c1:c4:e8:2d:14:10:be:22:b6:08:0f:93:01: 43:73:55:4a:bd:96:89:0d:32:94:bf:09:3a:8e:c6:da:a9:b9: 9d:aa:16:59:ad:1a:5b:52:82:30:28:fb:e1:92:e7:c1:f8:d5: 2e:f0:7d:05:e1:26:ce:e0:34:e7:d7:70:aa:56:3f:b2:3a:08: c7:60:15:05:f2:08:5f:bd:94:63:95:2b:86:8e:87:71:11:9e: 23:22:1d:a6:e6:e7:51:30:1d:93:0e:e9:16:b0:c8:16:a4:54: 16:15:03:8e:3f:de:46:4a:3c:f3:f9:c4:f0:04:f0:7d:48:0b: e6:85:4d:52:58:59:c5:22:d0:1d:9e:aa:16:93:66:c6:da:67: a1:21:bb:25:76:77:48:f6:26:6c:0e:29:cd:37:14:b6:46:df: 43:52:28:95:40:ce:28:f8:d9:2f:4d:5a:76:38:7a:53:ae:e6: 89:c3:5d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE++0UVJ2TJqjokc1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4 NTBiMB4XDTI2MTEwNjAyMDAxNFoXDTI3MDIwNDAyMDAxNFowLzEtMCsGA1UEAxMk NTllNmJmMTMtMDRjMS00MzA2LWJjNTYtYmVmMjViN2Y5NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1KjpeK0I6cr+071Jg9eCNCa2a++6KHjKCC3 eNefKV1VtX55Tqqcz0y0a9mjKqSLHL7+s+SSkvOScN+39fUbbo5YqUr90G+7engH i8vJK+vA0t9CJ2tq+qcxH2jMRJIdYpzopMqDuUHUQXNNa5X4iR+mvC2/WgLR03dN pDLuYzMy2iSIU4NWF8SZtY73rHucqEkxr4ZYiHf4YM4bNZFQjroznLbd5rUCrezL zvBq0zvEe/Ii7MVNmwh+mBNF5HBWqJDpMdVpfIvYFx83xeNgSdEMnRTfH3JmfjQW cc6HMbXvfDVSFA6DBVhTcMrc/kwLRwB26pcsYo9lIyoXEvE7NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1g1VXOjDJL1g2GwAN64fUCDxtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NGY2 MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvMmMyMWJkZjItOTRkZC0z ZWY1LWFmNGYtMDc5Y2QwYjc3ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTRmNjIzZTctYzZiZS00YzNiLWI1 NTQtNmFkNmFjYjA4NTBiLzk0ZjYyM2U3LWM2YmUtNGMzYi1iNTU0LTZhZDZhY2Iw ODUwYi5jcmwwHwYDVR0jBBgwFoAUkcXbHtylYSuEC6CupI1kxQXIEEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2 YWNiMDg1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmWTtN2sKsoWAyKIyG60bWYCIEk4l6w3RiSwCTz34mgUE/O7h7rg0s6 UtvMKRa0ND3VTdqH1DL32TWbrPug2Ozlhu245c2yQbe/GDAnwcToLRQQviK2CA+T AUNzVUq9lokNMpS/CTqOxtqpuZ2qFlmtGltSgjAo++GS58H41S7wfQXhJs7gNOfX cKpWP7I6CMdgFQXyCF+9lGOVK4aOh3ERniMiHabm51EwHZMO6RawyBakVBYVA44/ 3kZKPPP5xPAE8H1IC+aFTVJYWcUi0B2eqhaTZsbaZ6EhuyV2d0j2JmwOKc03FLZG 30NSKJVAzij42S9NWnY4elOu5onDXQU= -----END CERTIFICATE-----Generated at Sun Nov 15 07:25:02 2026 by rpki-client