$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/936de171-93a5-33f1-a56b-cfea2e67b068.roa File: 936de171-93a5-33f1-a56b-cfea2e67b068.roa (raw, json) Hash identifier: GPSLTC1Am7Fpr6BfeSMWEMDyntxPQoWHvr1AkF2jiq8= Subject key identifier: BA:26:4C:4B:16:F1:E6:68:FA:35:EA:19:65:35:15:D7:9A:8E:3F:C1 Certificate issuer: /CN=058a49b1-635c-42be-b1a3-1465228f2130 Certificate serial: 010D0C9F4328584EC20C7B9FBCF7CEE8AB79E080 Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/936de171-93a5-33f1-a56b-cfea2e67b068.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 49304 IP address blocks: 142.248.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:7b:9f:bc:f7:ce:e8:ab:79:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=d2fa6634-cee9-4bde-8d2a-61e2906386e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c4:54:28:e3:f1:5d:2d:b2:28:a1:51:ab:f6: d4:1c:cd:de:53:a3:73:ce:62:e3:38:9c:08:a8:98: 32:12:77:06:b9:a8:a7:8e:ed:ec:3f:f3:49:cf:41: ba:4d:1a:58:6a:3d:d2:08:2d:d5:3e:d9:25:ad:a6: 32:42:9b:6c:96:f0:c0:e9:dc:76:c5:29:0b:22:96: 00:e1:ef:11:fc:3c:5a:47:55:d2:b4:58:42:b7:64: 4d:e4:80:ee:be:96:ec:b1:93:41:88:f4:1d:4c:30: c9:86:69:5d:4d:c6:0e:14:5b:1a:c4:d7:66:9d:de: f0:5f:52:69:52:29:84:23:e7:8f:48:a3:d2:d9:80: 99:39:f7:fa:9f:39:a8:a3:56:72:1c:74:ad:7f:15: f2:04:2a:b5:d2:4d:a0:05:14:81:87:09:df:33:c8: d8:54:23:ff:e6:d9:79:fc:1f:4d:b3:92:a0:98:2b: 17:6f:54:5f:f6:ed:8b:f7:7c:d3:4d:16:d7:bd:15: c8:3e:cc:b1:74:65:4b:07:5e:44:90:e2:4a:a1:0b: 7b:47:e3:27:4c:da:4b:4c:e2:73:f9:63:7d:18:f3: 1d:65:ef:bd:5d:4e:e5:99:e7:3d:a5:bb:cd:14:76: 8f:99:c2:53:88:90:56:d8:46:e6:5e:f3:b0:e0:fd: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:26:4C:4B:16:F1:E6:68:FA:35:EA:19:65:35:15:D7:9A:8E:3F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/936de171-93a5-33f1-a56b-cfea2e67b068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl X509v3 Authority Key Identifier: keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer sbgp-ipAddrBlock: critical IPv4: 142.248.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:80:73:1a:44:49:cd:e2:75:21:2d:25:ab:ce:39:6b:5a:db: 65:c4:d7:2d:5c:8d:c8:33:ad:4d:83:92:ac:73:53:40:94:5a: 76:da:70:b9:f8:f9:32:19:97:8a:18:be:79:28:60:7d:ca:6f: d1:9a:c0:b2:fd:7e:a5:94:56:75:f7:25:f1:d3:2f:e3:dc:94: 2e:5c:6a:9a:e9:aa:cc:03:10:72:b1:82:e1:c4:25:31:21:dd: 9c:ca:26:e0:2f:22:66:42:17:76:a8:e4:af:70:4d:f0:da:5d: 05:fe:69:8a:92:19:b0:35:c6:3b:dc:c4:41:24:61:49:b9:30: a0:ad:21:5f:08:b6:cf:9d:e2:2a:16:80:c7:1c:13:66:48:9f: 44:ff:48:3b:de:88:67:5d:94:73:43:24:9c:bf:be:36:16:df: 8e:00:4e:00:13:fd:11:dc:6e:e0:31:91:c8:c1:39:83:56:37: 3f:77:7d:fb:09:fd:d1:0b:36:91:13:9c:b0:8e:84:d9:ec:e2: 65:8d:13:d2:51:59:88:59:be:31:5c:b9:a4:67:c1:ec:f9:c8: 64:4b:ea:75:df:6c:d3:56:47:61:d1:38:56:cb:8a:0c:01:5b: 35:89:c0:f3:e7:28:53:98:fb:f4:7a:f2:49:48:24:84:3e:6e: 6c:e5:f4:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHufvPfO6Kt54IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy MTMwMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk ZDJmYTY2MzQtY2VlOS00YmRlLThkMmEtNjFlMjkwNjM4NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMRUKOPxXS2yKKFRq/bUHM3eU6NzzmLjOJwI qJgyEncGuainju3sP/NJz0G6TRpYaj3SCC3VPtklraYyQptslvDA6dx2xSkLIpYA 4e8R/DxaR1XStFhCt2RN5IDuvpbssZNBiPQdTDDJhmldTcYOFFsaxNdmnd7wX1Jp UimEI+ePSKPS2YCZOff6nzmoo1ZyHHStfxXyBCq10k2gBRSBhwnfM8jYVCP/5tl5 /B9Ns5KgmCsXb1Rf9u2L93zTTRbXvRXIPsyxdGVLB15EkOJKoQt7R+MnTNpLTOJz +WN9GPMdZe+9XU7lmec9pbvNFHaPmcJTiJBW2EbmXvOw4P1OkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLomTEsW8eZo+jXqGWU1Fdeajj/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvOTM2ZGUxNzEtOTNhNS0z M2YxLWE1NmItY2ZlYTJlNjdiMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1 MjI4ZjIxMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCAcxpESc3idSEtJavOOWta22XE1y1cjcgzrU2DkqxzU0CUWnbacLn4 +TIZl4oYvnkoYH3Kb9GawLL9fqWUVnX3JfHTL+PclC5caprpqswDEHKxguHEJTEh 3ZzKJuAvImZCF3ao5K9wTfDaXQX+aYqSGbA1xjvcxEEkYUm5MKCtIV8Its+d4ioW gMccE2ZIn0T/SDveiGddlHNDJJy/vjYW344ATgAT/RHcbuAxkcjBOYNWNz93ffsJ /dELNpETnLCOhNns4mWNE9JRWYhZvjFcuaRnwez5yGRL6nXfbNNWR2HROFbLigwB WzWJwPPnKFOY+/R68klIJIQ+bmzl9E8= -----END CERTIFICATE-----Generated at Thu Sep 10 19:53:34 2026 by rpki-client