$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa File: 9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa (raw, json) Hash identifier: 77edX+dm7IlNPA6XDGsNPaxTUPSCV7GJ87CJxqIg+ls= Subject key identifier: D4:F5:D3:51:E1:CD:2F:8B:DF:72:2C:28:AB:B8:E6:A0:03:08:2D:0B Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584B78469831DA0599F71435F900 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa Signing time: Fri 10 Oct 2025 00:26:56 +0000 ROA not before: Fri 10 Oct 2025 00:26:56 +0000 ROA not after: Thu 08 Jan 2026 01:26:56 +0000 asID: 397181 IP address blocks: 142.249.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:46:98:31:da:05:99:f7:14:35:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Oct 10 00:26:56 2025 GMT Not After : Jan 8 01:26:56 2026 GMT Subject: CN=6b201db9-9201-4af2-a794-4ef78d14278d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8f:dd:a5:17:80:00:cf:ff:be:6b:eb:49:62: 98:00:1c:2b:a5:1b:09:cd:d0:ed:8f:6e:68:36:76: f3:b3:0b:18:03:80:27:2f:c8:2e:66:15:ad:dd:71: c6:ab:41:6e:7e:6d:5b:16:9f:21:e3:89:08:49:8b: d6:2b:b8:37:05:35:cb:8c:ef:1f:9d:9d:39:25:6d: 2b:9d:7c:c3:fb:6b:54:16:b8:27:f9:66:83:76:73: 6c:1e:12:a9:4b:f2:0f:fc:7c:28:0a:4f:7d:4b:47: d0:03:fd:90:8d:5a:c8:df:4d:9c:22:a1:ae:22:a2: 06:a3:48:dc:c0:41:b9:b7:d6:ac:6b:b3:66:a6:1a: 9a:0e:12:b6:62:f8:03:74:7f:47:0f:f6:59:5f:bb: 09:48:5e:de:8a:bb:80:ea:f7:c8:cc:80:9e:7e:73: 5c:21:22:01:7a:ac:48:e2:c8:f5:29:e6:18:0e:28: e0:12:b9:55:21:0f:c8:90:14:66:01:b0:73:3d:d8: e9:e3:d1:92:94:ec:fd:06:a0:94:c3:98:2c:96:ce: 33:52:fd:3c:bf:3c:50:3e:93:01:85:0f:22:e7:00: c0:7e:37:85:76:ad:f5:3e:f6:4e:21:7b:f7:7b:0b: 0f:89:99:f3:a8:e0:0a:57:1e:b1:02:af:c1:87:ce: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F5:D3:51:E1:CD:2F:8B:DF:72:2C:28:AB:B8:E6:A0:03:08:2D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6b:01:7a:be:1d:45:62:c2:94:12:af:78:05:6e:e0:75:bc: 35:90:9d:bd:c7:bd:6a:ed:65:cd:86:db:8a:5c:92:c6:4f:3f: 2a:ec:4b:8a:b3:10:c2:7d:5b:47:b9:59:7a:e1:82:5c:a2:20: 25:9c:af:4e:59:88:c0:b3:ad:c9:df:b3:a6:40:f1:36:17:5a: 2d:ed:a8:2b:2c:73:78:fa:c7:b8:38:7b:4c:df:dd:55:9d:d2: 9e:21:f9:e2:e6:b5:b9:f7:51:eb:57:ad:2e:24:4e:ef:52:e0: d6:60:2e:6b:97:91:25:6c:2e:44:9c:a1:af:d4:37:d1:44:74: 3a:59:01:c4:db:26:dd:bd:68:ec:7f:07:a0:5f:44:17:86:c7: 8e:ac:b0:02:a5:90:83:e7:36:50:a7:b5:a3:7d:b8:62:69:cb: 4c:ce:dd:07:d9:9f:5f:30:43:9f:18:9f:a1:c2:fd:2a:5e:88: 57:c1:c3:85:df:dd:79:b7:10:be:71:7f:6b:c5:bb:e7:21:3b: 4d:19:f5:76:fe:f5:73:d1:84:06:35:fb:20:94:e1:c6:40:08: 2d:9a:ec:45:9e:74:d8:75:d0:02:b8:c3:32:1d:9f:b2:7d:23: d3:a3:53:24:24:67:3d:3b:6b:68:a7:35:79:c7:2e:58:96:4e: ca:5d:6e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4Rpgx2gWZ9xQ1+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MTAxMDAwMjY1NloXDTI2MDEwODAxMjY1NlowLzEtMCsGA1UEAxMk NmIyMDFkYjktOTIwMS00YWYyLWE3OTQtNGVmNzhkMTQyNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74/dpReAAM//vmvrSWKYABwrpRsJzdDtj25o NnbzswsYA4AnL8guZhWt3XHGq0Fufm1bFp8h44kISYvWK7g3BTXLjO8fnZ05JW0r nXzD+2tUFrgn+WaDdnNsHhKpS/IP/HwoCk99S0fQA/2QjVrI302cIqGuIqIGo0jc wEG5t9asa7NmphqaDhK2YvgDdH9HD/ZZX7sJSF7eiruA6vfIzICefnNcISIBeqxI 4sj1KeYYDijgErlVIQ/IkBRmAbBzPdjp49GSlOz9BqCUw5gsls4zUv08vzxQPpMB hQ8i5wDAfjeFdq31PvZOIXv3ewsPiZnzqOAKVx6xAq/Bh87ZmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT101HhzS+L33IsKKu45qADCC0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvOWRlOGNkNDYtMTg4YS0z ZDNiLTkyMWEtMGEyYTQxZDRlNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZrAXq+HUViwpQSr3gFbuB1vDWQnb3HvWrtZc2G24pcksZPPyrsS4qz EMJ9W0e5WXrhglyiICWcr05ZiMCzrcnfs6ZA8TYXWi3tqCssc3j6x7g4e0zf3VWd 0p4h+eLmtbn3UetXrS4kTu9S4NZgLmuXkSVsLkScoa/UN9FEdDpZAcTbJt29aOx/ B6BfRBeGx46ssAKlkIPnNlCntaN9uGJpy0zO3QfZn18wQ58Yn6HC/SpeiFfBw4Xf 3Xm3EL5xf2vFu+chO00Z9Xb+9XPRhAY1+yCU4cZACC2a7EWedNh10AK4wzIdn7J9 I9OjUyQkZz07a2inNXnHLliWTspdbvQ= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:27 2025 by rpki-client