$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/a942c9a4-fd66-3745-9099-a5d4019587a3.roa File: a942c9a4-fd66-3745-9099-a5d4019587a3.roa (raw, json) Hash identifier: /sY/pgKRe844HKZ2ebBAQqeWdh9ZTmIA8Mh6ySEFs6c= Subject key identifier: C9:4E:AB:37:A0:18:BB:E0:2F:5A:6D:88:84:B4:28:F5:BF:1D:42:64 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584F85995496DCFF6DA452B19280 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/a942c9a4-fd66-3745-9099-a5d4019587a3.roa Signing time: Fri 16 Oct 2026 14:06:54 +0000 ROA not before: Fri 16 Oct 2026 14:06:54 +0000 ROA not after: Thu 14 Jan 2027 15:06:54 +0000 asID: 198566 IP address blocks: 142.249.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:99:54:96:dc:ff:6d:a4:52:b1:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Oct 16 14:06:54 2026 GMT Not After : Jan 14 15:06:54 2027 GMT Subject: CN=e8b4ab93-fb3c-4c92-81b1-e59212eb60d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:bf:ca:dd:cb:af:87:6a:67:4e:e9:4a:32: af:9f:76:ab:e8:8d:54:e5:e5:5a:c9:a6:23:10:30: 3c:5b:9d:5f:72:a2:a8:94:8d:72:2e:a0:a1:ec:d1: e5:f2:37:93:b5:37:98:18:5d:84:9d:19:1b:06:b4: 7f:e3:57:a6:95:d0:42:d0:8e:76:67:e1:0c:3d:6d: 50:17:bc:d4:bc:6e:b4:76:bf:c2:dd:64:51:4a:7e: 20:a2:32:e2:b5:99:e1:b0:5e:b7:b3:b2:b4:a7:4b: f3:db:df:50:ba:0c:64:f8:76:f5:ea:36:5c:ff:57: ce:9c:c1:80:fb:82:aa:3c:e0:da:a7:dd:71:1b:93: ba:1b:f6:0b:a4:c9:10:1e:40:af:45:8c:23:27:db: 29:a7:80:57:6c:c5:67:f1:c1:a7:8b:d7:d8:35:b4: a4:23:d2:cc:45:3e:45:dd:fc:63:ce:33:5e:b0:0c: 64:fd:c4:aa:67:ca:6a:48:40:f4:37:90:dd:48:b1: 43:e4:9a:43:10:5f:36:1c:5a:3b:e3:cf:45:c5:e1: 2e:16:0c:97:5c:13:6d:51:1b:14:e4:90:d6:73:6a: 3c:b1:25:ac:44:ee:4b:72:99:b8:00:d8:80:0f:1f: 4d:c4:9d:d6:29:aa:66:b8:57:7b:03:06:d5:e2:88: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:AB:37:A0:18:BB:E0:2F:5A:6D:88:84:B4:28:F5:BF:1D:42:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/a942c9a4-fd66-3745-9099-a5d4019587a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 142.249.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d3:e5:9c:8f:e0:2f:47:8f:80:ae:ed:e6:ee:67:09:c1:d4: 52:9e:b5:1a:2a:53:17:78:91:3e:1d:ed:9a:bd:62:5e:18:6f: b7:82:28:44:5c:2f:9a:26:68:66:e1:25:41:c9:90:83:44:52: 4f:31:d9:8e:b2:1e:47:45:76:c4:d3:3f:ac:ce:03:5f:c9:88: f9:a4:34:ba:7d:a5:72:5f:e9:cb:67:76:32:f6:70:b2:b2:6c: 98:cd:8b:75:3d:39:2b:9a:d1:82:9b:38:16:55:dc:20:29:08: af:e2:e4:e9:10:4a:aa:67:a0:0e:86:1c:29:72:44:3b:b5:d2: bf:4f:5a:8e:87:ad:ff:22:4f:5b:26:6b:47:f8:e0:b8:f5:6d: 50:ef:03:60:6f:2c:41:8e:10:fd:ee:da:b9:97:e5:e5:9b:4f: 25:31:84:85:37:54:49:26:75:ae:b7:d9:b2:d8:60:36:3e:d2: d3:48:a1:e7:63:06:c2:77:99:69:11:64:14:1f:45:e0:90:93: e5:41:98:91:56:e6:56:83:0f:13:c4:ff:5e:0e:65:07:bf:e8: 3b:f7:3b:fa:01:a7:08:bb:b2:df:d3:de:7a:a2:ed:89:cb:26: ba:c8:ee:38:3d:d6:20:ec:c4:b1:7b:f8:77:30:d9:0d:6a:7a: 24:d6:45:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FmVSW3P9tpFKxkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI2MTAxNjE0MDY1NFoXDTI3MDExNDE1MDY1NFowLzEtMCsGA1UEAxMk ZThiNGFiOTMtZmIzYy00YzkyLTgxYjEtZTU5MjEyZWI2MGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyO/yt3Lr4dqZ07pSjKvn3ar6I1U5eVayaYj EDA8W51fcqKolI1yLqCh7NHl8jeTtTeYGF2EnRkbBrR/41emldBC0I52Z+EMPW1Q F7zUvG60dr/C3WRRSn4gojLitZnhsF63s7K0p0vz299Qugxk+Hb16jZc/1fOnMGA +4KqPODap91xG5O6G/YLpMkQHkCvRYwjJ9spp4BXbMVn8cGni9fYNbSkI9LMRT5F 3fxjzjNesAxk/cSqZ8pqSED0N5DdSLFD5JpDEF82HFo7489FxeEuFgyXXBNtURsU 5JDWc2o8sSWsRO5Lcpm4ANiADx9NxJ3WKapmuFd7AwbV4oj6VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlOqzegGLvgL1ptiIS0KPW/HUJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvYTk0MmM5YTQtZmQ2Ni0z NzQ1LTkwOTktYTVkNDAxOTU4N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvT5ZyP4C9Hj4Cu7ebuZwnB1FKetRoqUxd4kT4d7Zq9Yl4Yb7eCKERc L5omaGbhJUHJkINEUk8x2Y6yHkdFdsTTP6zOA1/JiPmkNLp9pXJf6ctndjL2cLKy bJjNi3U9OSua0YKbOBZV3CApCK/i5OkQSqpnoA6GHClyRDu10r9PWo6Hrf8iT1sm a0f44Lj1bVDvA2BvLEGOEP3u2rmX5eWbTyUxhIU3VEkmda632bLYYDY+0tNIoedj BsJ3mWkRZBQfReCQk+VBmJFW5laDDxPE/14OZQe/6Dv3O/oBpwi7st/T3nqi7YnL JrrI7jg91iDsxLF7+Hcw2Q1qeiTWRc4= -----END CERTIFICATE-----Generated at Mon Oct 26 17:09:26 2026 by rpki-client