$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/b3418295-8f71-389d-81e6-f83ff4e201a7.roa File: b3418295-8f71-389d-81e6-f83ff4e201a7.roa (raw, json) Hash identifier: ij3U3+6see/YmTr8RlO4/6/i3TAgxxv5Nu2S+hIznyY= Subject key identifier: A9:0C:F1:60:25:20:CB:64:75:F0:BD:29:96:E5:F7:88:FC:24:DB:66 Certificate issuer: /CN=a2f16351-7ad6-41a4-92cd-1031003a6a0d Certificate serial: 010D0C9F4328584F4987DAA89171954E3027E140 Authority key identifier: EC:69:3A:E3:0B:EC:FA:1E:6B:86:19:A5:DE:40:F2:B0:F6:69:40:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/b3418295-8f71-389d-81e6-f83ff4e201a7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399138 IP address blocks: 142.248.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/a2f16351-7ad6-41a4-92cd-1031003a6a0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/a2f16351-7ad6-41a4-92cd-1031003a6a0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:da:a8:91:71:95:4e:30:27:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f16351-7ad6-41a4-92cd-1031003a6a0d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2d73fead-72f4-4c72-ae37-7871d0ff02af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:71:bb:66:8d:79:21:70:f3:f8:57:ce:6f: 7a:93:42:77:ea:4e:a3:81:bb:92:d5:55:b9:27:8c: a2:ad:ef:13:97:5d:6f:ba:fb:8d:b6:48:38:8e:2f: 5e:10:ae:68:1a:00:52:e5:ac:9a:14:4e:0a:19:d5: ab:36:69:db:30:21:9a:24:fc:58:e7:be:1a:6b:59: 18:98:50:ce:37:9f:33:3f:ac:b1:6a:35:d2:cc:54: dd:a1:c7:7a:20:81:58:21:45:79:19:98:a7:1d:de: d9:cb:d2:7b:22:5f:94:0e:aa:09:bc:2a:3c:08:f2: cb:2c:dc:8d:76:6c:19:84:6e:49:6b:81:0b:70:ff: 27:06:a8:e9:4d:e1:d1:3f:51:fc:86:07:02:1a:07: 1a:ea:23:c7:ad:7b:e8:09:f6:38:5e:8b:02:e1:54: 61:1e:7b:8e:4d:8b:d9:f7:a2:9c:ae:21:27:b0:26: 91:a6:22:47:63:63:80:2d:57:0b:33:2d:41:b8:bb: b8:87:ab:73:d5:1b:8e:75:26:5c:ce:23:68:6a:a4: 67:58:36:69:69:39:b8:51:13:99:b0:63:31:dd:15: 68:f2:6c:77:13:7f:8a:82:ba:35:22:77:61:5a:24: 11:9c:0d:76:56:47:cb:06:cb:04:07:5c:71:04:ed: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0C:F1:60:25:20:CB:64:75:F0:BD:29:96:E5:F7:88:FC:24:DB:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/b3418295-8f71-389d-81e6-f83ff4e201a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d/a2f16351-7ad6-41a4-92cd-1031003a6a0d.crl X509v3 Authority Key Identifier: keyid:EC:69:3A:E3:0B:EC:FA:1E:6B:86:19:A5:DE:40:F2:B0:F6:69:40:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2f16351-7ad6-41a4-92cd-1031003a6a0d.cer sbgp-ipAddrBlock: critical IPv4: 142.248.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d5:59:94:13:b6:9b:5c:25:91:e9:f3:18:a4:76:23:73:24: d9:3d:da:c1:a8:7e:4e:cc:1c:53:13:25:d8:81:18:c9:06:59: 2b:2f:43:3c:dd:41:bc:ac:34:91:84:fa:a7:8d:2c:19:e7:a3: e0:25:f6:a9:dc:af:3a:58:5c:dc:9f:79:d8:7e:0d:95:0e:24: 57:5a:94:fb:33:08:fc:a5:f9:74:1f:88:a4:06:94:17:be:c1: 35:68:73:6d:be:db:ae:c3:e3:6c:35:63:4e:6b:d1:bd:c7:e9: 1c:13:8b:12:7e:db:9e:84:f4:a9:38:27:2d:65:01:8f:6f:8b: ef:43:2b:6b:49:84:14:8d:b9:e7:2c:07:19:af:10:ae:f8:11: 26:8d:f7:1a:a7:0a:24:97:f5:6c:5a:5a:e0:a5:69:6b:6b:f0: 25:37:0b:6d:8f:89:c9:0f:e6:fd:b4:e8:b8:99:b8:54:17:2f: f7:5e:7f:25:2d:e1:0a:03:4c:29:99:b9:47:ff:6c:24:19:a6: 63:d8:05:9e:56:ff:52:55:28:cf:1f:bf:0a:b8:f9:a5:51:57: 60:e6:38:fa:22:14:02:77:a6:3b:b3:36:17:5c:37:0b:65:9f: 02:5a:0b:0d:05:9f:5a:b8:37:35:e4:c9:30:cc:f1:77:5a:fd: 5c:43:65:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh9qokXGVTjAn4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJmMTYzNTEtN2FkNi00MWE0LTkyY2QtMTAzMTAwM2E2 YTBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmQ3M2ZlYWQtNzJmNC00YzcyLWFlMzctNzg3MWQwZmYwMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzxxu2aNeSFw8/hXzm96k0J36k6jgbuS1VW5 J4yire8Tl11vuvuNtkg4ji9eEK5oGgBS5ayaFE4KGdWrNmnbMCGaJPxY574aa1kY mFDON58zP6yxajXSzFTdocd6IIFYIUV5GZinHd7Zy9J7Il+UDqoJvCo8CPLLLNyN dmwZhG5Ja4ELcP8nBqjpTeHRP1H8hgcCGgca6iPHrXvoCfY4XosC4VRhHnuOTYvZ 96KcriEnsCaRpiJHY2OALVcLMy1BuLu4h6tz1RuOdSZcziNoaqRnWDZpaTm4UROZ sGMx3RVo8mx3E3+Kgro1IndhWiQRnA12VkfLBssEB1xxBO1B3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkM8WAlIMtkdfC9KZbl94j8JNtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmYx NjM1MS03YWQ2LTQxYTQtOTJjZC0xMDMxMDAzYTZhMGQvYjM0MTgyOTUtOGY3MS0z ODlkLTgxZTYtZjgzZmY0ZTIwMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTJmMTYzNTEtN2FkNi00MWE0LTky Y2QtMTAzMTAwM2E2YTBkL2EyZjE2MzUxLTdhZDYtNDFhNC05MmNkLTEwMzEwMDNh NmEwZC5jcmwwHwYDVR0jBBgwFoAU7Gk64wvs+h5rhhml3kDysPZpQNgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmYxNjM1MS03YWQ2LTQxYTQtOTJjZC0xMDMx MDAzYTZhMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjviQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHVWZQTtptcJZHp8xikdiNzJNk92sGofk7MHFMTJdiBGMkGWSsvQzzd QbysNJGE+qeNLBnno+Al9qncrzpYXNyfedh+DZUOJFdalPszCPyl+XQfiKQGlBe+ wTVoc22+267D42w1Y05r0b3H6RwTixJ+256E9Kk4Jy1lAY9vi+9DK2tJhBSNuecs BxmvEK74ESaN9xqnCiSX9WxaWuClaWtr8CU3C22PickP5v206LiZuFQXL/defyUt 4QoDTCmZuUf/bCQZpmPYBZ5W/1JVKM8fvwq4+aVRV2DmOPoiFAJ3pjuzNhdcNwtl nwJaCw0Fn1q4NzXkyTDM8Xda/VxDZSY= -----END CERTIFICATE-----Generated at Mon Oct 26 02:20:44 2026 by rpki-client