$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa File: 17ce5f99-df3d-371e-8abd-913c7050a633.roa (raw, json) Hash identifier: l0J2maV3GjIpmPtkT17AanTYoVXna3+2zWbRsG3ECzY= Subject key identifier: 03:29:68:17:B1:82:75:01:C4:83:36:0E:02:A9:A8:84:34:03:31:CB Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584B7846C56DB310C93C71A35D00 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa Signing time: Fri 10 Oct 2025 00:27:18 +0000 ROA not before: Fri 10 Oct 2025 00:27:18 +0000 ROA not after: Thu 08 Jan 2026 01:27:18 +0000 asID: 397181 IP address blocks: 142.249.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:46:c5:6d:b3:10:c9:3c:71:a3:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Oct 10 00:27:18 2025 GMT Not After : Jan 8 01:27:18 2026 GMT Subject: CN=f40a6f00-582d-4f0c-8916-2355ad45a622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:de:de:dd:44:25:00:74:8e:b2:0e:9a:47:c3: 93:5f:ab:84:70:3b:92:b7:98:ba:c6:a4:51:d9:be: 1f:38:81:da:b3:5a:86:d3:1b:cd:28:d0:2d:a4:0c: aa:72:12:84:c7:96:40:46:03:fc:54:6a:30:53:fd: 03:a4:b0:c0:04:d4:e2:39:1c:17:8e:51:65:72:dc: 15:20:54:73:fc:f9:07:51:5d:9a:dc:af:22:67:66: 16:58:8e:a2:2d:c6:57:b2:32:20:7d:d3:22:0b:57: d9:01:57:ed:26:25:93:ff:df:e1:3e:26:3f:2c:c3: 9d:a2:f1:59:09:c3:7b:e1:bd:c6:4c:a3:14:10:c4: 33:a8:9c:d5:12:fc:f5:32:89:6c:bc:c9:ed:a9:40: 68:08:38:a1:0a:0c:55:3a:3d:0d:1a:e1:f1:a7:d9: 8a:f2:b4:d2:39:29:11:ab:fe:46:ea:99:a3:d4:1d: 74:0e:51:6b:57:60:58:b3:8e:09:0a:17:fa:a3:64: 9b:72:e4:ed:bc:b5:8b:70:4c:ce:81:46:9b:33:57: 5b:fb:4e:23:37:8d:ad:ef:e9:44:8c:cb:d3:c9:b2: 09:25:cb:df:53:9a:c8:54:e3:09:2b:21:ef:09:5f: 2a:00:38:21:75:f9:6e:39:2a:20:7d:ac:c0:fa:64: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:29:68:17:B1:82:75:01:C4:83:36:0E:02:A9:A8:84:34:03:31:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6d:12:fc:13:22:eb:d3:8c:e6:c6:24:a0:e5:35:ca:b2:90: 94:3e:51:ec:58:45:12:6c:8f:3e:a0:e8:98:4b:60:19:61:39: df:73:94:f5:e8:b1:82:0a:ba:14:f2:fd:c5:78:1c:7e:61:88: a8:b7:8e:30:24:59:cf:01:55:0a:93:52:5e:01:24:af:7b:c4: 22:d6:ca:c8:fb:a6:96:d4:cb:34:de:c7:cc:3c:20:14:e3:11: 41:ad:5f:f7:fe:fe:92:c3:cd:52:bc:8c:36:4a:09:4c:66:7e: cf:d7:f8:99:ae:40:43:49:07:a7:93:36:b5:06:01:c7:d9:f1: eb:bb:ce:4c:cd:3a:e8:93:ba:e5:8d:a9:f0:11:80:e3:c8:ab: f3:af:0d:76:e4:f8:63:2e:c4:68:b1:2a:cb:c8:64:39:4b:83: 4d:51:55:89:36:16:04:cc:b1:09:9c:17:80:16:ed:85:45:33: d9:89:70:19:4a:44:c2:02:c5:22:86:33:3b:a4:dd:50:99:69: dd:7e:03:ce:ee:68:b3:3d:b2:45:35:b2:9d:ac:6a:f0:82:6f: 8d:b4:54:b8:1a:19:bf:35:e7:ce:d1:62:89:3a:7e:81:cb:fc: 3a:71:b8:28:e1:96:a7:af:69:27:ee:29:0f:26:18:19:15:d6: 0b:87:1b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4RsVtsxDJPHGjXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MTAxMDAwMjcxOFoXDTI2MDEwODAxMjcxOFowLzEtMCsGA1UEAxMk ZjQwYTZmMDAtNTgyZC00ZjBjLTg5MTYtMjM1NWFkNDVhNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t7e3UQlAHSOsg6aR8OTX6uEcDuSt5i6xqRR 2b4fOIHas1qG0xvNKNAtpAyqchKEx5ZARgP8VGowU/0DpLDABNTiORwXjlFlctwV IFRz/PkHUV2a3K8iZ2YWWI6iLcZXsjIgfdMiC1fZAVftJiWT/9/hPiY/LMOdovFZ CcN74b3GTKMUEMQzqJzVEvz1MolsvMntqUBoCDihCgxVOj0NGuHxp9mK8rTSOSkR q/5G6pmj1B10DlFrV2BYs44JChf6o2SbcuTtvLWLcEzOgUabM1db+04jN42t7+lE jMvTybIJJcvfU5rIVOMJKyHvCV8qADghdfluOSogfazA+mRABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMpaBexgnUBxIM2DgKpqIQ0AzHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvMTdjZTVmOTktZGYzZC0z NzFlLThhYmQtOTEzYzcwNTBhNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5tEvwTIuvTjObGJKDlNcqykJQ+UexYRRJsjz6g6JhLYBlhOd9zlPXo sYIKuhTy/cV4HH5hiKi3jjAkWc8BVQqTUl4BJK97xCLWysj7ppbUyzTex8w8IBTj EUGtX/f+/pLDzVK8jDZKCUxmfs/X+JmuQENJB6eTNrUGAcfZ8eu7zkzNOuiTuuWN qfARgOPIq/OvDXbk+GMuxGixKsvIZDlLg01RVYk2FgTMsQmcF4AW7YVFM9mJcBlK RMICxSKGMzuk3VCZad1+A87uaLM9skU1sp2savCCb420VLgaGb81587RYok6foHL /DpxuCjhlqevaSfuKQ8mGBkV1guHGws= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:41 2025 by rpki-client