$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/a33a56b6-e265-34a5-bf48-48025a40dec3.roa File: a33a56b6-e265-34a5-bf48-48025a40dec3.roa (raw, json) Hash identifier: Ls7/C0HDWh6yN3u5qm0p/gMQwHiawftV1fh0MDsr9LY= Subject key identifier: F0:00:9C:1D:7D:29:BE:B5:C5:F5:DA:85:E2:73:C3:39:6F:3D:13:6E Certificate issuer: /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Certificate serial: 010D0C9F4328584D5884DB979332FCA7EDA956C0 Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/a33a56b6-e265-34a5-bf48-48025a40dec3.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 137535 IP address blocks: 142.248.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:db:97:93:32:fc:a7:ed:a9:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=c2ed4e03-d54b-4f88-8069-e676cbf464fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:62:27:d0:36:46:78:88:5b:cf:ff:cb:a5: fe:63:dd:9e:7b:b8:90:4e:f8:34:bd:48:33:c5:10: 31:01:d3:14:4c:8b:67:9c:a7:b9:a3:40:f8:84:7a: e4:7a:aa:cd:10:60:fd:94:de:df:94:d9:58:d2:45: 80:53:d6:5b:60:ee:6c:06:73:72:11:a5:7e:e9:3d: 57:31:a3:a5:8a:d2:39:32:af:ba:8a:a8:33:dd:96: d1:da:83:75:37:2c:e9:4f:ad:8b:75:be:51:98:c1: c4:c5:77:f0:69:90:95:95:22:d5:0e:34:7f:51:a9: 01:0c:e5:d1:5e:a8:b0:42:79:5d:e4:b3:ef:7d:f4: 85:be:80:67:04:55:4f:4c:14:87:c3:96:8a:45:11: e9:fd:03:19:a4:83:51:da:1f:ce:6c:d2:34:b9:c6: fe:75:0c:41:7e:f0:2d:49:87:d3:c5:1d:ce:5b:5f: 07:66:80:1d:52:6a:c3:e9:52:8a:e6:38:8c:17:19: fc:b4:0f:9e:ce:3f:a7:e5:25:90:d2:84:87:01:e8: 38:4d:de:18:0a:b8:04:22:3d:a4:0a:3a:08:21:bd: f2:82:49:0f:b7:1b:c9:91:bc:55:db:1a:48:26:41: 7f:19:d7:b6:4f:29:0e:4a:c4:e4:15:89:c8:87:c9: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:00:9C:1D:7D:29:BE:B5:C5:F5:DA:85:E2:73:C3:39:6F:3D:13:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/a33a56b6-e265-34a5-bf48-48025a40dec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl X509v3 Authority Key Identifier: keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:13:40:18:80:ce:d1:f1:1e:a3:ec:9f:f9:5a:53:01:b9:56: 05:ea:65:a4:14:20:49:87:d7:fe:e1:f7:bf:3d:20:83:92:c6: a7:3e:fb:ab:65:5c:9b:cf:3f:9e:d9:3f:a5:46:42:ad:17:61: 84:14:10:d0:b4:45:cd:e3:d7:6e:48:c5:0c:e2:dc:d5:a4:7f: de:12:f6:bd:b3:7c:1a:bf:db:40:c6:8a:ea:37:5c:4b:fa:1c: c5:1a:c5:ce:8f:a8:1b:ed:e7:0d:f4:a2:6a:d0:7f:dd:8f:fe: 86:7e:f1:50:26:2c:55:08:8f:bc:6a:85:30:21:80:21:0c:62: 06:dd:6f:4f:12:5a:0d:7e:bb:7a:2e:6e:65:de:d7:09:b1:4a: 15:a7:56:12:a6:88:c5:3b:0b:66:89:1d:9e:e0:0b:e7:fa:5b: a9:96:3e:32:5d:19:c9:a5:49:cc:39:ea:5a:3c:46:d8:9c:24: 0c:a8:22:86:4a:a6:aa:3e:b3:09:73:3e:04:c0:b2:e9:ec:c6: 24:ea:78:ce:7e:1b:f3:c2:2c:6a:46:60:5c:5d:f9:bc:69:2c: 2e:30:72:cf:26:a8:9e:80:5d:70:0e:94:97:2b:03:32:fc:8a: c9:90:41:2d:36:70:45:73:0e:73:87:c7:38:87:1a:37:66:4c: cb:00:fe:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhNuXkzL8p+2pVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTRmNjIzZTctYzZiZS00YzNiLWI1NTQtNmFkNmFjYjA4 NTBiMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk YzJlZDRlMDMtZDU0Yi00Zjg4LTgwNjktZTY3NmNiZjQ2NGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIJiJ9A2RniIW8//y6X+Y92ee7iQTvg0vUgz xRAxAdMUTItnnKe5o0D4hHrkeqrNEGD9lN7flNlY0kWAU9ZbYO5sBnNyEaV+6T1X MaOlitI5Mq+6iqgz3ZbR2oN1NyzpT62Ldb5RmMHExXfwaZCVlSLVDjR/UakBDOXR XqiwQnld5LPvffSFvoBnBFVPTBSHw5aKRRHp/QMZpINR2h/ObNI0ucb+dQxBfvAt SYfTxR3OW18HZoAdUmrD6VKK5jiMFxn8tA+ezj+n5SWQ0oSHAeg4Td4YCrgEIj2k CjoIIb3ygkkPtxvJkbxV2xpIJkF/Gde2TykOSsTkFYnIh8lCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAAnB19Kb61xfXaheJzwzlvPRNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NGY2 MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2YWNiMDg1MGIvYTMzYTU2YjYtZTI2NS0z NGE1LWJmNDgtNDgwMjVhNDBkZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTRmNjIzZTctYzZiZS00YzNiLWI1 NTQtNmFkNmFjYjA4NTBiLzk0ZjYyM2U3LWM2YmUtNGMzYi1iNTU0LTZhZDZhY2Iw ODUwYi5jcmwwHwYDVR0jBBgwFoAUkcXbHtylYSuEC6CupI1kxQXIEEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NGY2MjNlNy1jNmJlLTRjM2ItYjU1NC02YWQ2 YWNiMDg1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsTQBiAztHxHqPsn/laUwG5VgXqZaQUIEmH1/7h9789IIOSxqc++6tl XJvPP57ZP6VGQq0XYYQUENC0Rc3j125IxQzi3NWkf94S9r2zfBq/20DGiuo3XEv6 HMUaxc6PqBvt5w30omrQf92P/oZ+8VAmLFUIj7xqhTAhgCEMYgbdb08SWg1+u3ou bmXe1wmxShWnVhKmiMU7C2aJHZ7gC+f6W6mWPjJdGcmlScw56lo8RticJAyoIoZK pqo+swlzPgTAsunsxiTqeM5+G/PCLGpGYFxd+bxpLC4wcs8mqJ6AXXAOlJcrAzL8 ismQQS02cEVzDnOHxziHGjdmTMsA/hA= -----END CERTIFICATE-----Generated at Sun Apr 5 23:49:59 2026 by rpki-client