$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/0a07a1be-98b7-3901-a240-905735030c0c.roa File: 0a07a1be-98b7-3901-a240-905735030c0c.roa (raw, json) Hash identifier: V8s9988luzo9GLuMih247GtaOFbxQSp86v1dbIArfjA= Subject key identifier: 6A:CA:0E:2E:A4:4F:F7:3B:43:4E:A3:56:AA:4A:EE:AE:C6:15:5F:D2 Certificate issuer: /CN=560f9b0f-2d95-4838-9074-cd56b1c21753 Certificate serial: 010D0C9F4328584F49733C28A3A85E7C19E477B0 Authority key identifier: AC:59:DA:A0:9C:05:E4:4D:00:21:33:E0:FD:3A:B7:CB:28:63:1D:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/0a07a1be-98b7-3901-a240-905735030c0c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 142.249.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3c:28:a3:a8:5e:7c:19:e4:77:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560f9b0f-2d95-4838-9074-cd56b1c21753 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=baf5688e-660b-4591-9c4d-56d7a340e10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:63:1f:6f:0b:08:05:a8:a3:d3:91:4a:fd: e4:c7:53:f4:b4:3a:42:af:50:0d:d7:fd:26:ee:6a: af:a1:43:1c:cb:85:9e:2b:36:25:a9:a9:69:3d:e6: b4:d0:c6:ba:69:f0:e1:f5:d9:eb:23:4e:b2:f5:7b: df:05:d9:10:e0:61:ab:6c:07:78:eb:3c:00:96:e8: 5e:61:f8:09:0f:49:cf:e2:0c:80:cb:f5:1b:16:f4: 26:39:da:b0:3b:99:49:78:a5:97:ca:8d:ad:27:06: a1:4c:0c:68:e6:1c:2a:01:54:09:b9:9c:a1:45:3d: 8b:6c:91:99:c4:4e:82:34:2a:5f:32:30:62:ca:bd: 72:c5:ef:f0:11:11:bc:bb:f8:f2:af:6f:77:ee:b6: ad:93:86:1c:77:df:e5:1a:0a:4b:a7:78:e9:0d:1d: 19:69:9e:45:2d:e4:e8:86:91:d5:6c:11:b0:66:8c: b1:a5:82:7a:20:c4:48:ee:5e:97:f7:a5:c8:4a:8a: 95:ed:ae:ac:c0:30:ab:9c:42:a4:2f:2f:66:e2:aa: eb:eb:22:c7:b4:7b:6b:22:91:a4:37:5a:59:68:a5: fe:e3:5b:2a:68:b6:ed:ad:e2:80:de:85:49:70:b5: 28:2b:1c:ed:42:51:07:fe:9d:43:76:a9:d5:1b:fb: 43:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:0E:2E:A4:4F:F7:3B:43:4E:A3:56:AA:4A:EE:AE:C6:15:5F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/0a07a1be-98b7-3901-a240-905735030c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.crl X509v3 Authority Key Identifier: keyid:AC:59:DA:A0:9C:05:E4:4D:00:21:33:E0:FD:3A:B7:CB:28:63:1D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer sbgp-ipAddrBlock: critical IPv4: 142.249.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:00:99:3d:58:e9:d1:76:a5:cd:a4:e8:bb:99:a5:7a:8e:8e: bb:d8:00:7a:b3:9f:ec:d4:d1:7a:a7:79:36:14:1c:13:11:13: 8c:6f:68:cb:95:64:47:e5:e4:04:33:12:4c:8e:55:b8:7c:2d: fd:4f:42:48:4b:96:2c:06:82:5b:0d:c5:9d:f9:6d:f8:e7:6a: 1c:ea:de:d3:0a:f6:35:b2:db:2d:f1:d8:57:81:ea:88:eb:ba: 42:4a:be:8d:64:0d:82:cc:00:e5:a0:ab:27:cc:33:80:52:49: c5:ad:25:e9:44:2e:02:70:84:5a:97:fa:21:a2:ae:e6:d2:ec: d8:5b:a2:9f:71:5a:9f:8e:9a:5d:ad:9d:f2:7c:58:c7:90:db: 8d:70:3b:a3:19:e7:b4:3e:90:80:da:35:18:c5:ae:ae:72:4f: 96:34:8a:9b:82:7d:a5:e6:7e:62:35:de:77:95:d7:06:f3:2f: bb:58:cf:9b:12:01:b0:32:00:dd:26:42:07:52:60:d8:03:c5: a8:01:e9:70:54:e9:48:f3:cf:ab:73:58:ec:5f:0b:c7:57:0c: f1:91:87:fa:7c:60:b9:e6:02:0f:2a:53:e2:26:82:93:0b:51: 48:14:24:6a:45:67:a3:e5:12:eb:92:9a:d5:e8:80:5f:24:c9: 8d:f1:56:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jczwoo6hefBnkd7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYwZjliMGYtMmQ5NS00ODM4LTkwNzQtY2Q1NmIxYzIx NzUzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmFmNTY4OGUtNjYwYi00NTkxLTljNGQtNTZkN2EzNDBlMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tdjH28LCAWoo9ORSv3kx1P0tDpCr1AN1/0m 7mqvoUMcy4WeKzYlqalpPea00Ma6afDh9dnrI06y9XvfBdkQ4GGrbAd46zwAluhe YfgJD0nP4gyAy/UbFvQmOdqwO5lJeKWXyo2tJwahTAxo5hwqAVQJuZyhRT2LbJGZ xE6CNCpfMjBiyr1yxe/wERG8u/jyr2937ratk4Ycd9/lGgpLp3jpDR0ZaZ5FLeTo hpHVbBGwZoyxpYJ6IMRI7l6X96XISoqV7a6swDCrnEKkLy9m4qrr6yLHtHtrIpGk N1pZaKX+41sqaLbtreKA3oVJcLUoKxztQlEH/p1DdqnVG/tDdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrKDi6kT/c7Q06jVqpK7q7GFV/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NjBm OWIwZi0yZDk1LTQ4MzgtOTA3NC1jZDU2YjFjMjE3NTMvMGEwN2ExYmUtOThiNy0z OTAxLWEyNDAtOTA1NzM1MDMwYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTYwZjliMGYtMmQ5NS00ODM4LTkw NzQtY2Q1NmIxYzIxNzUzLzU2MGY5YjBmLTJkOTUtNDgzOC05MDc0LWNkNTZiMWMy MTc1My5jcmwwHwYDVR0jBBgwFoAUrFnaoJwF5E0AITPg/Tq3yyhjHVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NjBmOWIwZi0yZDk1LTQ4MzgtOTA3NC1jZDU2 YjFjMjE3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvmfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8AmT1Y6dF2pc2k6LuZpXqOjrvYAHqzn+zU0XqneTYUHBMRE4xvaMuV ZEfl5AQzEkyOVbh8Lf1PQkhLliwGglsNxZ35bfjnahzq3tMK9jWy2y3x2FeB6ojr ukJKvo1kDYLMAOWgqyfMM4BSScWtJelELgJwhFqX+iGirubS7Nhbop9xWp+Oml2t nfJ8WMeQ241wO6MZ57Q+kIDaNRjFrq5yT5Y0ipuCfaXmfmI13neV1wbzL7tYz5sS AbAyAN0mQgdSYNgDxagB6XBU6Ujzz6tzWOxfC8dXDPGRh/p8YLnmAg8qU+ImgpML UUgUJGpFZ6PlEuuSmtXogF8kyY3xVrA= -----END CERTIFICATE-----Generated at Fri Oct 9 14:40:37 2026 by rpki-client