$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa File: fa250e28-dae3-3d57-9324-4f178e12143d.roa (raw, json) Hash identifier: Q2WmpAnCtKneYB5MIPibPESAvoo/JUBYJxTJDP0JWBo= Subject key identifier: CF:3E:F1:60:E4:43:EE:87:66:13:B1:E1:85:C6:C7:E6:9A:DE:8F:69 Certificate issuer: /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Certificate serial: 010D0C9F4328584E3FC4760DC4E00E06157C3B00 Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 32668 IP address blocks: 142.248.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:76:0d:c4:e0:0e:06:15:7c:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=1a5e49ad-a339-4950-a625-f58d8b6859e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5e:9b:5a:ca:41:94:bd:dd:bb:12:8b:aa:74: bf:32:6f:4a:4d:c0:db:f5:f0:04:45:c9:e1:64:f4: 47:5f:92:09:7d:7c:52:96:52:dd:9f:25:4d:da:8e: b6:58:b8:43:95:cd:2c:79:f8:30:b4:38:ed:48:d7: 17:33:db:f8:e9:4f:fa:4f:f9:26:3d:2c:9c:2d:22: 5c:74:db:f0:1b:6a:b4:7a:cb:08:95:c7:2c:d5:44: 3c:14:33:34:11:7e:73:cc:38:1f:85:e4:0b:3e:68: d2:a3:44:2a:c4:66:1e:d5:40:4d:66:fe:e3:a6:36: 45:f1:69:fb:a4:52:a6:0a:df:c7:76:d3:91:0a:1a: f2:ee:50:54:e4:9b:ad:8c:b3:75:db:bf:c5:90:eb: 7d:89:3d:c7:cd:63:53:7e:fe:6d:0f:b6:08:99:dd: ca:e5:e7:bb:36:7a:00:dd:21:f7:51:d3:b1:44:9b: 24:1f:59:3f:00:d1:e6:7d:76:8e:dd:f6:f3:e3:bd: c7:3d:18:88:ef:cb:03:95:52:c0:eb:d5:db:12:82: d7:82:05:36:9f:cf:96:85:e3:7f:cc:da:63:e3:0d: 98:4f:f0:bf:ba:5d:3e:1e:42:bb:74:19:c3:75:3f: c4:db:f0:1a:1b:a6:c8:dc:b1:be:60:b4:f3:bd:bb: 96:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3E:F1:60:E4:43:EE:87:66:13:B1:E1:85:C6:C7:E6:9A:DE:8F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/fa250e28-dae3-3d57-9324-4f178e12143d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl X509v3 Authority Key Identifier: keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer sbgp-ipAddrBlock: critical IPv4: 142.248.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:36:6d:2f:17:ff:72:f7:1f:a3:82:5f:e8:d4:c1:79:0a:fb: fd:fe:f2:7b:4c:f5:6b:67:ba:20:09:45:c5:a8:84:73:c3:2a: bb:41:3c:52:e8:9b:18:ae:04:1c:a0:d4:70:66:07:a5:33:ad: d1:6d:d0:54:3e:9f:1e:23:21:9b:63:af:89:2e:da:03:16:9a: 0f:9a:ab:fd:32:9b:21:45:c5:1d:0b:0e:29:73:e9:f6:a3:60: 15:4d:7a:a7:6b:51:83:46:3b:15:53:aa:6a:77:23:96:c6:40: 3f:1f:f0:e9:38:cc:70:19:a1:4b:14:03:e3:28:1f:3f:70:71: 8b:43:de:c2:3b:3b:63:f5:c7:7c:ac:06:37:35:09:b9:5d:b1: c0:fd:a0:1c:76:fb:24:d5:cc:b4:c7:56:f4:09:e0:18:62:2c: af:ef:9e:54:d8:e3:ca:37:98:c0:a3:8f:0e:1e:39:4d:9a:bf: a0:e0:11:e0:b4:db:00:35:1c:51:25:4f:96:d7:e7:79:3a:0f: 42:36:6f:e4:6a:e1:3c:d7:31:77:cd:e8:af:6b:77:c9:fa:f9: b9:d0:0e:95:e6:ca:03:1c:74:73:c5:be:79:2e:30:80:d8:5f: dd:8e:a7:46:5a:90:d0:1c:31:29:e2:af:e2:31:9d:18:42:23: d3:eb:16:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xHYNxOAOBhV8OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMzNjdiYjAtYTZlMC00NzY5LTllOTMtZThlOWI2YTFh Y2I5MB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk MWE1ZTQ5YWQtYTMzOS00OTUwLWE2MjUtZjU4ZDhiNjg1OWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl16bWspBlL3duxKLqnS/Mm9KTcDb9fAERcnh ZPRHX5IJfXxSllLdnyVN2o62WLhDlc0sefgwtDjtSNcXM9v46U/6T/kmPSycLSJc dNvwG2q0essIlccs1UQ8FDM0EX5zzDgfheQLPmjSo0QqxGYe1UBNZv7jpjZF8Wn7 pFKmCt/HdtORChry7lBU5JutjLN127/FkOt9iT3HzWNTfv5tD7YImd3K5ee7NnoA 3SH3UdOxRJskH1k/ANHmfXaO3fbz473HPRiI78sDlVLA69XbEoLXggU2n8+WheN/ zNpj4w2YT/C/ul0+HkK7dBnDdT/E2/AaG6bI3LG+YLTzvbuWQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8+8WDkQ+6HZhOx4YXGx+aa3o9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2 N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZhMWFjYjkvZmEyNTBlMjgtZGFlMy0z ZDU3LTkzMjQtNGYxNzhlMTIxNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWMzNjdiYjAtYTZlMC00NzY5LTll OTMtZThlOWI2YTFhY2I5L2VjMzY3YmIwLWE2ZTAtNDc2OS05ZTkzLWU4ZTliNmEx YWNiOS5jcmwwHwYDVR0jBBgwFoAUiftXSzh80aZzcDZ9LeflpSu1aZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5 YjZhMWFjYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvgtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs2bS8X/3L3H6OCX+jUwXkK+/3+8ntM9WtnuiAJRcWohHPDKrtBPFLo mxiuBByg1HBmB6UzrdFt0FQ+nx4jIZtjr4ku2gMWmg+aq/0ymyFFxR0LDilz6faj YBVNeqdrUYNGOxVTqmp3I5bGQD8f8Ok4zHAZoUsUA+MoHz9wcYtD3sI7O2P1x3ys Bjc1CbldscD9oBx2+yTVzLTHVvQJ4BhiLK/vnlTY48o3mMCjjw4eOU2av6DgEeC0 2wA1HFElT5bX53k6D0I2b+Rq4TzXMXfN6K9rd8n6+bnQDpXmygMcdHPFvnkuMIDY X92Op0ZakNAcMSnir+IxnRhCI9PrFoI= -----END CERTIFICATE-----Generated at Mon Jun 29 10:38:36 2026 by rpki-client