$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/f477f346-0e2c-32c3-9f1c-e454bb44593f.roa File: f477f346-0e2c-32c3-9f1c-e454bb44593f.roa (raw, json) Hash identifier: jLuzM4BcHQcp+0J6yPNc3WhONfH50+LqZVA4YcQo42E= Subject key identifier: 76:66:63:BE:5C:D9:62:53:4E:BF:20:D1:5C:AC:AD:CB:CE:20:BB:B4 Certificate issuer: /CN=cc0e351b-a6aa-47c5-8ac7-b5248ac2666b Certificate serial: 010D0C9F4328584F6C5818DEBBA2F5CF4FB85D00 Authority key identifier: 3D:1E:D6:70:B7:AC:D6:61:A8:3C:E5:AB:EB:A0:9F:FE:4B:4C:E7:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/f477f346-0e2c-32c3-9f1c-e454bb44593f.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 402622 IP address blocks: 142.248.159.0/24 maxlen: 24 2602:f504::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:18:de:bb:a2:f5:cf:4f:b8:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc0e351b-a6aa-47c5-8ac7-b5248ac2666b Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=a4a5acbd-ca69-4177-aa02-2a0709af2b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:e2:c3:73:00:a6:cd:12:1e:c9:36:2b:0c: c9:00:72:7f:ec:59:7e:07:e0:8e:0a:88:c2:72:ee: 05:45:e5:4c:d7:6e:d2:00:1f:a7:56:74:ff:89:51: 45:15:d6:c3:02:6e:ed:f6:a4:f0:be:f2:09:e7:d8: e7:55:d1:5b:eb:15:de:33:df:6c:56:fe:b2:7a:53: 6c:13:37:f3:97:11:47:d1:d9:68:39:30:e2:73:9a: 27:f1:35:c8:b0:47:18:cf:ae:fe:f3:05:80:61:b2: 9b:1b:96:b7:22:0f:60:3b:84:cd:53:42:bc:ad:c9: 8c:17:c0:29:49:0f:33:5d:b9:14:5b:a7:8b:98:9c: da:63:a2:93:e7:bf:7c:83:66:8d:0c:75:31:04:21: ec:07:72:bc:c2:00:1c:41:8c:84:86:7b:29:2f:cf: fa:08:ef:f1:59:91:9f:13:a0:5b:39:97:4e:6a:f8: 5e:9c:e5:72:8c:b7:63:a7:63:04:9c:e0:5f:82:fd: 10:6a:93:4b:2d:a3:6f:e4:21:95:74:cd:09:43:4d: 39:1d:d0:cb:8b:d4:4b:f6:f7:ab:9d:71:57:32:ea: b0:07:2e:16:20:fa:07:7e:11:36:45:85:f8:61:b4: d2:87:19:96:36:9e:3c:e0:68:27:b7:3c:03:70:ab: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:66:63:BE:5C:D9:62:53:4E:BF:20:D1:5C:AC:AD:CB:CE:20:BB:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/f477f346-0e2c-32c3-9f1c-e454bb44593f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.crl X509v3 Authority Key Identifier: keyid:3D:1E:D6:70:B7:AC:D6:61:A8:3C:E5:AB:EB:A0:9F:FE:4B:4C:E7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc0e351b-a6aa-47c5-8ac7-b5248ac2666b.cer sbgp-ipAddrBlock: critical IPv4: 142.248.159.0/24 IPv6: 2602:f504::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:57:d7:09:87:4d:1e:ae:b6:4e:22:72:16:cb:9b:ec:8d:a3: a1:42:6e:98:eb:59:ff:5d:7a:12:01:ae:15:ae:d1:47:8d:94: 5c:60:2f:21:38:8f:0e:c7:e2:4b:d5:2b:d8:53:02:52:c7:ea: 7c:65:05:64:0f:1a:c2:f5:4a:1c:bb:80:ec:60:d8:f2:24:33: e2:b3:89:9a:fe:74:c1:70:04:54:78:bb:97:07:7b:a5:23:e5: ce:e4:15:a8:03:46:3f:11:cf:05:ae:b0:e1:ab:de:28:b4:07: 06:48:43:ca:89:e2:cb:c0:ca:ea:bf:d8:5f:68:d2:60:df:d7: 10:5d:e7:b7:b6:45:a4:0e:80:ac:63:ef:89:ca:80:58:a6:d2: 11:b5:67:38:26:49:9f:9d:0e:8a:2b:02:ec:f2:76:74:85:9d: 28:bf:10:5f:48:41:a6:07:f4:0f:db:27:51:6f:3d:cc:14:6c: 00:c3:b3:9e:6f:fd:03:7d:eb:08:22:e0:8d:0f:40:08:ee:79: 60:1b:2e:b3:c4:6b:d2:d4:77:1c:26:41:74:a7:3d:bb:54:cf: 39:8a:34:0f:0d:f3:30:e9:b4:68:50:fc:bd:0c:df:07:6f:be: aa:e7:0d:89:cf:af:d7:12:b3:69:50:82:b4:e2:e9:e6:6f:12: 02:e0:94:bb -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9sWBjeu6L1z0+4XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MwZTM1MWItYTZhYS00N2M1LThhYzctYjUyNDhhYzI2 NjZiMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YTRhNWFjYmQtY2E2OS00MTc3LWFhMDItMmEwNzA5YWYyYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYTiw3MAps0SHsk2KwzJAHJ/7Fl+B+COCojC cu4FReVM127SAB+nVnT/iVFFFdbDAm7t9qTwvvIJ59jnVdFb6xXeM99sVv6yelNs EzfzlxFH0dloOTDic5on8TXIsEcYz67+8wWAYbKbG5a3Ig9gO4TNU0K8rcmMF8Ap SQ8zXbkUW6eLmJzaY6KT5798g2aNDHUxBCHsB3K8wgAcQYyEhnspL8/6CO/xWZGf E6BbOZdOavhenOVyjLdjp2MEnOBfgv0QapNLLaNv5CGVdM0JQ005HdDLi9RL9ver nXFXMuqwBy4WIPoHfhE2RYX4YbTShxmWNp484GgntzwDcKumzwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHZmY75c2WJTTr8g0VysrcvOILu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYzBl MzUxYi1hNmFhLTQ3YzUtOGFjNy1iNTI0OGFjMjY2NmIvZjQ3N2YzNDYtMGUyYy0z MmMzLTlmMWMtZTQ1NGJiNDQ1OTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2MwZTM1MWItYTZhYS00N2M1LThh YzctYjUyNDhhYzI2NjZiL2NjMGUzNTFiLWE2YWEtNDdjNS04YWM3LWI1MjQ4YWMy NjY2Yi5jcmwwHwYDVR0jBBgwFoAUPR7WcLes1mGoPOWr66Cf/ktM52gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYzBlMzUxYi1hNmFhLTQ3YzUtOGFjNy1iNTI0 OGFjMjY2NmIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAjvifMA4E AgACMAgDBgAmAvUEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABV9cJh00errZOInIWy5vsjaOhQm6Y61n/ XXoSAa4VrtFHjZRcYC8hOI8Ox+JL1SvYUwJSx+p8ZQVkDxrC9Uocu4DsYNjyJDPi s4ma/nTBcARUeLuXB3ulI+XO5BWoA0Y/Ec8FrrDhq94otAcGSEPKieLLwMrqv9hf aNJg39cQXee3tkWkDoCsY++JyoBYptIRtWc4JkmfnQ6KKwLs8nZ0hZ0ovxBfSEGm B/QP2ydRbz3MFGwAw7Oeb/0DfesIIuCND0AI7nlgGy6zxGvS1HccJkF0pz27VM85 ijQPDfMw6bRoUPy9DN8Hb76q5w2Jz6/XErNpUIK04unmbxIC4JS7 -----END CERTIFICATE-----Generated at Sun Oct 11 09:24:53 2026 by rpki-client