$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa File: 25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa (raw, json) Hash identifier: a+KJslJIzS3q0YZRp4AyF8268qE7A3N8X4RFTB+iUqI= Subject key identifier: 8E:6C:26:FA:A2:FB:46:9A:9B:AD:BB:5B:0C:02:AB:12:DB:87:12:F2 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584EBDDC58783603F573899052C0 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 396952 IP address blocks: 142.248.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:58:78:36:03:f5:73:89:90:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=8af6f99b-ffdb-493a-a343-7fea488181cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:93:00:5b:53:aa:73:55:5d:98:81:b3:11: 73:0e:3d:bf:cb:7c:a7:22:b1:da:4a:09:1d:7d:9d: 61:8f:43:d8:60:fa:23:eb:7a:61:f6:39:77:08:78: 7a:c6:b0:67:a5:ac:8e:f0:08:83:97:fe:91:ad:58: 3e:44:33:a8:98:78:80:57:5f:e3:5a:de:1b:f2:ff: 9a:92:f3:b5:05:a8:17:e5:27:02:47:a6:e6:0b:16: 88:66:a6:9d:44:1d:b1:4c:de:3d:b5:0b:2f:5f:be: 1b:31:24:f0:4c:9d:c7:41:1d:ad:5b:70:0b:ad:94: 1a:56:36:2c:b5:af:a2:75:ae:4c:66:ba:1e:f9:1b: 04:f9:44:1f:c4:b1:9f:27:2f:87:f1:6d:cb:fc:c8: 27:b4:45:0c:e3:2c:ee:bb:22:cd:4e:1e:4f:6f:02: 1f:5c:74:5b:f6:ac:31:5a:75:28:58:dc:09:d5:8d: e1:a5:40:00:b7:38:21:c4:d1:f9:19:2f:30:c6:cc: 6e:48:b5:cc:56:cb:0c:ce:a3:e6:24:b2:9e:09:45: af:a8:8c:45:02:fd:22:33:72:96:59:9f:8d:a2:a4: f9:6f:fd:cf:55:3a:31:d7:74:00:d7:19:6e:60:d3: 72:c5:99:82:56:0f:a2:02:be:3b:aa:fc:57:a0:59: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6C:26:FA:A2:FB:46:9A:9B:AD:BB:5B:0C:02:AB:12:DB:87:12:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 142.248.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b3:53:d5:22:46:7f:8f:d7:49:0a:4d:3c:e9:94:55:df:92: 76:29:ef:77:2c:5e:a5:6b:d5:0b:14:01:c2:0e:24:c2:ff:24: 83:44:92:50:2e:9e:f8:6e:87:1d:6a:f5:82:58:39:9e:0c:d6: fc:c0:df:9e:47:92:0b:d5:b0:b3:1e:12:66:22:82:b5:dd:5b: c9:a7:f0:63:ed:f6:ec:d4:98:dc:bb:c7:b2:60:f5:c4:15:14: 73:ed:22:b2:91:3a:cb:24:eb:73:76:c3:39:bb:17:c8:c8:d3: f3:de:98:57:73:fe:a3:cf:b8:ae:80:2f:1b:ed:a3:17:41:ae: cb:3b:86:a6:78:17:11:ff:c2:03:ee:10:7b:5a:3d:d1:71:72: 9a:3a:16:1a:2a:6a:f9:e2:72:5c:1d:48:69:42:db:70:97:75: d3:03:82:5c:03:a9:9b:e3:50:ae:ac:cb:25:6b:00:d5:7e:93: 3d:ad:00:be:7b:8a:56:f8:76:20:5c:7e:c8:55:9a:da:e2:fc: 56:12:fe:06:d1:25:d5:25:68:9a:5a:ef:21:51:b3:2a:3e:d1: da:a8:0f:02:99:ef:0e:c3:51:b6:4b:6c:2b:b3:cf:f0:99:75: 11:d5:ee:66:92:bd:e5:52:76:2c:6b:7f:72:3f:b8:ae:b0:c2: cf:cb:a6:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE693Fh4NgP1c4mQUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk OGFmNmY5OWItZmZkYi00OTNhLWEzNDMtN2ZlYTQ4ODE4MWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TSTAFtTqnNVXZiBsxFzDj2/y3ynIrHaSgkd fZ1hj0PYYPoj63ph9jl3CHh6xrBnpayO8AiDl/6RrVg+RDOomHiAV1/jWt4b8v+a kvO1BagX5ScCR6bmCxaIZqadRB2xTN49tQsvX74bMSTwTJ3HQR2tW3ALrZQaVjYs ta+ida5MZroe+RsE+UQfxLGfJy+H8W3L/MgntEUM4yzuuyLNTh5PbwIfXHRb9qwx WnUoWNwJ1Y3hpUAAtzghxNH5GS8wxsxuSLXMVssMzqPmJLKeCUWvqIxFAv0iM3KW WZ+NoqT5b/3PVTox13QA1xluYNNyxZmCVg+iAr47qvxXoFkepQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5sJvqi+0aam627WwwCqxLbhxLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvMjUzMjFhN2QtMmZiZC0z M2M2LTgwOGItYzhjYjczZmMzM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyzU9UiRn+P10kKTTzplFXfknYp73csXqVr1QsUAcIOJML/JINEklAu nvhuhx1q9YJYOZ4M1vzA355HkgvVsLMeEmYigrXdW8mn8GPt9uzUmNy7x7Jg9cQV FHPtIrKROssk63N2wzm7F8jI0/PemFdz/qPPuK6ALxvtoxdBrss7hqZ4FxH/wgPu EHtaPdFxcpo6FhoqavniclwdSGlC23CXddMDglwDqZvjUK6syyVrANV+kz2tAL57 ilb4diBcfshVmtri/FYS/gbRJdUlaJpa7yFRsyo+0dqoDwKZ7w7DUbZLbCuzz/CZ dRHV7maSveVSdixrf3I/uK6wws/Lpmk= -----END CERTIFICATE-----Generated at Sat Aug 22 18:14:08 2026 by rpki-client