$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa File: e29fdbab-728b-37f3-b45b-55800fd076b4.roa (raw, json) Hash identifier: EMnsc4ENfIgxXcQQN73TCDJJgB7D2SOVUWOt4W3NWN8= Subject key identifier: 10:67:30:28:82:32:DC:12:48:A3:20:0E:60:CF:51:40:3D:13:E2:96 Certificate issuer: /CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Certificate serial: 010D0C9F4328584EABB6F177FEF06E4BC9655400 Authority key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa Signing time: Thu 30 Jul 2026 13:00:12 +0000 ROA not before: Thu 30 Jul 2026 13:00:12 +0000 ROA not after: Wed 28 Oct 2026 13:00:12 +0000 asID: 63050 IP address blocks: 192.245.140.0/24 maxlen: 32 198.147.156.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:b6:f1:77:fe:f0:6e:4b:c9:65:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Validity Not Before: Jul 30 13:00:12 2026 GMT Not After : Oct 28 13:00:12 2026 GMT Subject: CN=493e2944-e516-442a-a27b-07688415ebf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:db:f7:b3:6a:00:ab:8b:a2:12:b1:b9:dd:46: b7:e9:29:83:6f:06:bc:e9:a6:7a:6c:9a:1d:2c:5e: 6c:f1:0b:f8:d2:64:fc:44:9f:ed:b4:8b:e5:1d:e1: 2e:df:e0:02:a5:03:ad:65:ff:d9:1b:da:f1:59:98: 4d:c7:6a:f8:93:63:ff:55:a9:d6:a1:8c:8e:1e:98: 68:a8:6e:2b:68:b4:25:ab:e2:3a:e0:23:6c:a5:79: a9:95:e2:8d:93:d5:d1:a8:9e:5c:70:17:b6:d8:fe: fe:f2:b6:e3:b9:52:12:ff:ed:1a:ae:e5:7b:cd:8e: 9c:3d:69:66:e4:76:6d:ed:d6:f2:24:ab:25:6a:a4: a6:65:12:cb:17:c2:f8:bb:04:7b:11:f7:fd:de:af: c8:66:76:34:90:70:ea:d5:00:40:6b:32:05:be:cb: 62:bd:78:b9:35:a0:2b:32:8d:a5:9d:24:14:8e:92: 3b:aa:fa:67:82:84:0f:5f:14:47:bd:30:62:9a:8e: c2:de:db:84:79:3d:39:73:0c:74:8e:88:ce:ac:e0: ba:34:73:c6:7e:73:af:6d:e7:be:57:50:ed:49:a0: 9f:88:ba:14:fc:c5:85:ee:7d:2b:5a:c2:d8:44:0b: 5d:96:86:af:28:56:cd:d4:1d:14:46:cc:e2:dc:57: 5e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:67:30:28:82:32:DC:12:48:A3:20:0E:60:CF:51:40:3D:13:E2:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl X509v3 Authority Key Identifier: keyid:AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer sbgp-ipAddrBlock: critical IPv4: 192.245.140.0/24 198.147.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:40:6d:b8:4a:c0:bb:62:4f:8d:eb:49:84:e8:55:01:a4:22: ed:42:58:b0:d5:24:b5:79:0f:56:a4:3d:cf:7f:76:28:da:9f: 44:03:57:54:1d:7b:df:ac:15:20:74:70:fb:96:b5:37:1c:a0: 9a:55:6b:a7:fe:0c:f2:46:95:b3:b3:dc:eb:ab:e9:02:c1:8c: 33:ba:03:7f:43:d6:e0:7b:c8:bb:da:8a:7a:ec:82:cf:7c:ed: 74:16:e4:ab:ce:a6:34:83:15:b3:82:22:72:ad:b3:54:75:82: b2:68:46:be:2f:3d:24:38:ee:3b:bf:0f:df:b0:ed:3f:d6:45: 04:61:8d:7d:21:dd:16:e8:cb:fc:4e:e9:7c:f8:55:47:b4:08: ca:3f:a0:e5:5d:b5:21:9b:54:de:dc:88:c7:97:aa:dd:fe:75: ec:76:29:fd:9f:ec:fd:0f:54:ab:72:52:50:43:01:a1:7d:b8: e7:e7:96:ca:1b:c9:cb:bd:db:ad:fc:a4:f6:e7:2c:24:8e:80: 6b:c8:b2:14:b1:2c:bd:e5:22:f4:c8:34:f2:a9:e9:d7:83:7f: c7:e3:c2:c8:e0:ca:27:91:ed:69:1e:89:d2:03:41:97:70:91: 9b:4b:28:f6:be:72:80:b9:07:99:85:17:e2:db:c1:fe:8d:73: a5:4e:1f:88 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6rtvF3/vBuS8llVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E1YTJiMWMtOWFkMy00NDk2LWJjZmMtMzIyOTc0YWNj ZDMyMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk NDkzZTI5NDQtZTUxNi00NDJhLWEyN2ItMDc2ODg0MTVlYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9v3s2oAq4uiErG53Ua36SmDbwa86aZ6bJod LF5s8Qv40mT8RJ/ttIvlHeEu3+ACpQOtZf/ZG9rxWZhNx2r4k2P/VanWoYyOHpho qG4raLQlq+I64CNspXmpleKNk9XRqJ5ccBe22P7+8rbjuVIS/+0aruV7zY6cPWlm 5HZt7dbyJKslaqSmZRLLF8L4uwR7Eff93q/IZnY0kHDq1QBAazIFvstivXi5NaAr Mo2lnSQUjpI7qvpngoQPXxRHvTBimo7C3tuEeT05cwx0jojOrOC6NHPGfnOvbee+ V1DtSaCfiLoU/MWF7n0rWsLYRAtdloavKFbN1B0URszi3FdevQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBBnMCiCMtwSSKMgDmDPUUA9E+KWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVh MmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRhY2NkMzIvZTI5ZmRiYWItNzI4Yi0z N2YzLWI0NWItNTU4MDBmZDA3NmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E1YTJiMWMtOWFkMy00NDk2LWJj ZmMtMzIyOTc0YWNjZDMyLzNhNWEyYjFjLTlhZDMtNDQ5Ni1iY2ZjLTMyMjk3NGFj Y2QzMi5jcmwwHwYDVR0jBBgwFoAUq5H9SDN6a76xr6/S08y6t5sWNyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5 NzRhY2NkMzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwPWMAwQA xpOcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABpAbbhKwLtiT43rSYToVQGkIu1CWLDVJLV5D1akPc9/dija n0QDV1Qde9+sFSB0cPuWtTccoJpVa6f+DPJGlbOz3Our6QLBjDO6A39D1uB7yLva inrsgs987XQW5KvOpjSDFbOCInKts1R1grJoRr4vPSQ47ju/D9+w7T/WRQRhjX0h 3Rboy/xO6Xz4VUe0CMo/oOVdtSGbVN7ciMeXqt3+dex2Kf2f7P0PVKtyUlBDAaF9 uOfnlsobycu92638pPbnLCSOgGvIshSxLL3lIvTINPKp6deDf8fjwsjgyieR7Wke idIDQZdwkZtLKPa+coC5B5mFF+Lbwf6Nc6VOH4g= -----END CERTIFICATE-----Generated at Wed Aug 26 15:12:56 2026 by rpki-client