$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa File: f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa (raw, json) Hash identifier: hC17d775DlsB3FDX1KHqzrnuygCJav+1YcyPBDE9QDY= Subject key identifier: 1D:12:A1:A7:AA:3E:C1:80:63:77:73:25:D9:34:31:A0:70:C0:B8:4F Certificate issuer: /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Certificate serial: 010D0C9F4328584DA54AC495B4EFF11AF1338F80 Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa Signing time: Mon 27 Apr 2026 13:00:30 +0000 ROA not before: Mon 27 Apr 2026 13:00:30 +0000 ROA not after: Sun 26 Jul 2026 13:00:30 +0000 asID: 401578 IP address blocks: 142.248.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:4a:c4:95:b4:ef:f1:1a:f1:33:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Validity Not Before: Apr 27 13:00:30 2026 GMT Not After : Jul 26 13:00:30 2026 GMT Subject: CN=1db16a6b-55e4-40c2-b786-8cbf00aadecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a2:d5:16:0f:b3:38:81:28:2e:3f:b7:e3:b4: cd:d6:42:95:d7:f0:42:cb:f2:75:26:a5:98:d5:ee: 56:2e:f9:19:ef:09:77:84:dc:f7:91:62:2d:1f:8e: 91:48:b0:3f:96:e9:ea:38:6c:16:6c:bc:30:2d:09: 94:fc:3e:94:99:48:74:5c:58:66:5e:f3:70:12:db: e3:12:38:c9:7e:47:94:ee:41:3b:c8:1a:08:9e:21: 59:79:1c:5c:79:5e:77:bd:6f:f8:03:c7:03:ec:ac: bd:70:00:c3:c1:f7:3c:de:f5:39:d8:4a:92:06:2c: de:b2:05:a4:99:a3:e0:72:40:76:ad:e8:3b:82:91: 55:71:6a:b9:89:d7:81:e4:42:bd:f5:91:29:da:b1: 11:00:42:2e:16:41:e4:a6:eb:12:46:73:da:50:06: 7b:5a:74:1b:f2:c2:a2:5e:c8:69:82:ab:d4:bc:0e: a4:d4:1d:53:fe:df:42:cd:60:25:ae:71:64:98:c2: e5:0b:71:60:8f:fe:e8:08:2a:06:d8:b4:c3:31:c0: ab:b8:05:9a:6e:a3:19:9c:42:2a:02:9b:5b:94:76: 77:40:9b:1f:e9:36:10:c2:50:41:6c:47:06:99:36: e3:8b:14:37:30:4f:9d:18:f7:d1:5f:ae:6b:94:61: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:12:A1:A7:AA:3E:C1:80:63:77:73:25:D9:34:31:A0:70:C0:B8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl X509v3 Authority Key Identifier: keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer sbgp-ipAddrBlock: critical IPv4: 142.248.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:58:67:15:18:1a:0a:7b:0c:a9:e4:1c:f0:96:30:36:c2:60: 4a:52:76:57:de:26:82:39:c0:f0:2d:c5:c1:36:58:81:a4:2f: 9c:8c:f0:59:62:f3:5b:7f:58:3a:9c:62:84:23:3a:85:67:9d: d7:a6:f4:91:5e:66:a5:aa:b1:43:14:13:ab:97:bf:49:70:29: 63:1d:ad:a9:9b:16:3c:0a:85:5b:83:c0:ad:a7:0f:dc:d2:c2: ca:85:d0:01:dd:28:ce:3c:a7:01:42:e6:15:1c:55:cf:04:59: 2d:22:8d:86:13:0b:2f:05:94:bb:43:ca:92:5d:86:9f:e8:d0: 14:1f:2a:b8:ad:59:99:91:ce:0f:1f:28:6b:e3:8a:a6:09:f8: f0:b7:38:08:8d:bc:9f:db:9b:c6:48:af:91:9a:46:36:84:cd: fa:93:fa:08:a1:31:d8:32:6d:7a:3f:62:16:04:83:b6:fd:87: df:e9:1f:e0:0e:47:89:c2:f1:d0:70:ed:0d:92:d2:60:a7:f5: 76:99:e9:16:f3:78:64:1f:58:83:e8:55:a5:7f:7b:a4:c5:07: 20:26:b3:1a:8f:5e:b7:04:76:e4:95:d3:0a:b3:09:d5:83:2b: dd:3c:ee:d5:d7:b0:08:e1:e1:d9:58:9b:a9:a9:65:41:d3:7f: 0c:9a:ca:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2lSsSVtO/xGvEzj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyM2E1ZjEtZTllNy00ZDUzLWI2MTUtZjhhZmIxN2Iy OWM1MB4XDTI2MDQyNzEzMDAzMFoXDTI2MDcyNjEzMDAzMFowLzEtMCsGA1UEAxMk MWRiMTZhNmItNTVlNC00MGMyLWI3ODYtOGNiZjAwYWFkZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qLVFg+zOIEoLj+347TN1kKV1/BCy/J1JqWY 1e5WLvkZ7wl3hNz3kWItH46RSLA/lunqOGwWbLwwLQmU/D6UmUh0XFhmXvNwEtvj EjjJfkeU7kE7yBoIniFZeRxceV53vW/4A8cD7Ky9cADDwfc83vU52EqSBizesgWk maPgckB2reg7gpFVcWq5ideB5EK99ZEp2rERAEIuFkHkpusSRnPaUAZ7WnQb8sKi XshpgqvUvA6k1B1T/t9CzWAlrnFkmMLlC3Fgj/7oCCoG2LTDMcCruAWabqMZnEIq AptblHZ3QJsf6TYQwlBBbEcGmTbjixQ3ME+dGPfRX65rlGGqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0SoaeqPsGAY3dzJdk0MaBwwLhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMTIz YTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFmYjE3YjI5YzUvZjBlYmY3MDItMzAzZi0z MGFiLThiZjEtNDhmNTUwMWI5YWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTEyM2E1ZjEtZTllNy00ZDUzLWI2 MTUtZjhhZmIxN2IyOWM1L2ExMjNhNWYxLWU5ZTctNGQ1My1iNjE1LWY4YWZiMTdi MjljNS5jcmwwHwYDVR0jBBgwFoAUyW18ReNNaaWN99LTwrp4KHA8TlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMTIzYTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFm YjE3YjI5YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxYZxUYGgp7DKnkHPCWMDbCYEpSdlfeJoI5wPAtxcE2WIGkL5yM8Fli 81t/WDqcYoQjOoVnndem9JFeZqWqsUMUE6uXv0lwKWMdrambFjwKhVuDwK2nD9zS wsqF0AHdKM48pwFC5hUcVc8EWS0ijYYTCy8FlLtDypJdhp/o0BQfKritWZmRzg8f KGvjiqYJ+PC3OAiNvJ/bm8ZIr5GaRjaEzfqT+gihMdgybXo/YhYEg7b9h9/pH+AO R4nC8dBw7Q2S0mCn9XaZ6RbzeGQfWIPoVaV/e6TFByAmsxqPXrcEduSV0wqzCdWD K9087tXXsAjh4dlYm6mpZUHTfwyaypg= -----END CERTIFICATE-----Generated at Wed May 13 07:33:17 2026 by rpki-client