$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa File: 17ce5f99-df3d-371e-8abd-913c7050a633.roa (raw, json) Hash identifier: hgLCBFjiXIBVbYu6b2bv/B1nrHYtYATeH5U9SxapLwg= Subject key identifier: E4:70:E0:44:97:D6:D8:E1:38:28:F4:46:09:1B:B8:49:45:B0:C9:D8 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584F5B97FD19D4E6545EF83FA056 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 397181 IP address blocks: 142.249.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:97:fd:19:d4:e6:54:5e:f8:3f:a0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=07884084-6236-46be-bc13-ad34024e40ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:4f:86:bc:18:eb:8e:61:ab:09:ca:32:44: b5:fa:3b:e6:16:ef:c3:04:92:f9:2e:07:53:0c:be: 04:0f:84:99:4f:b4:2c:a0:ce:a3:79:3f:d5:43:54: 7e:41:bb:0d:5f:9c:d9:1f:5b:43:89:ff:bc:dd:cd: 9e:81:84:06:49:29:da:2e:13:a1:d2:41:f7:80:1b: f7:e0:c5:81:1b:a9:54:fa:0d:ba:e2:f3:8e:da:47: 66:22:8e:c9:a6:c9:e3:c7:97:9b:56:2b:d3:7c:ad: ad:48:f4:6d:c1:21:bc:88:55:d2:40:70:2b:d3:4d: 6f:a2:ed:b7:ec:51:05:6f:a6:40:aa:14:b7:df:e0: 27:03:f7:00:ff:10:b9:9f:ff:a2:a6:7e:51:32:80: e2:82:c8:7a:d6:3b:3b:21:ba:15:09:c0:1e:c1:a4: 40:ca:72:d3:b9:09:59:ae:64:39:0a:ad:36:06:75: 88:2e:d1:c3:84:27:65:1f:08:22:32:ad:9c:9b:97: 97:7b:5b:65:a4:18:81:a0:1b:bb:5c:e4:dd:ed:25: 7b:64:b9:70:67:5f:04:72:72:8f:16:0b:23:23:3f: c2:5a:45:b8:3b:0f:69:7a:00:e5:58:c1:25:05:b2: b6:64:33:a4:49:db:ee:44:81:2a:dc:41:fa:9b:f1: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:70:E0:44:97:D6:D8:E1:38:28:F4:46:09:1B:B8:49:45:B0:C9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5f:bb:bf:48:6c:e3:80:ce:8a:b4:44:62:6e:09:ee:a8:d9: 36:5a:70:ef:38:d1:20:d9:94:34:23:69:81:8e:f7:3e:b2:55: 65:1d:12:4a:38:f6:38:0f:6b:b2:cc:74:28:33:19:71:7c:1c: 6a:06:78:4c:16:e9:8a:0d:92:81:94:3b:cd:91:07:cb:44:c7: 0c:96:e7:2e:8c:ae:bb:95:73:7b:a2:c0:12:20:1b:e0:bb:26: b9:6c:b8:e7:40:c7:94:ae:9b:91:d0:ae:0a:de:8a:70:38:b7: bd:15:c0:22:34:94:02:ca:ad:81:06:44:1b:42:e2:38:2c:f1: 8c:22:02:ea:c1:95:df:70:39:32:cb:67:3a:de:fb:28:16:13: 54:d0:ef:e3:dc:f8:43:c8:cf:6e:be:25:82:8b:69:87:c9:8c: ba:9d:ca:4f:b6:b8:4b:fd:48:2e:50:eb:ee:cc:b5:3e:1b:8b: 04:5b:3f:82:e1:38:7f:e2:72:f8:8f:3f:d2:13:d7:58:04:e1: 25:42:40:a0:62:04:4f:54:1b:42:d3:67:c8:b5:e3:e9:fe:4b: 4e:ee:c8:61:a4:a4:5a:0b:2f:c4:ff:83:c8:b1:14:94:1b:6a: b8:cf:44:db:07:e6:11:09:7b:d5:36:0c:fc:dc:1c:ab:cc:87: 18:16:58:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bl/0Z1OZUXvg/oFYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MDc4ODQwODQtNjIzNi00NmJlLWJjMTMtYWQzNDAyNGU0MGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YhPhrwY645hqwnKMkS1+jvmFu/DBJL5LgdT DL4ED4SZT7QsoM6jeT/VQ1R+QbsNX5zZH1tDif+83c2egYQGSSnaLhOh0kH3gBv3 4MWBG6lU+g264vOO2kdmIo7Jpsnjx5ebVivTfK2tSPRtwSG8iFXSQHAr001vou23 7FEFb6ZAqhS33+AnA/cA/xC5n/+ipn5RMoDigsh61js7IboVCcAewaRAynLTuQlZ rmQ5Cq02BnWILtHDhCdlHwgiMq2cm5eXe1tlpBiBoBu7XOTd7SV7ZLlwZ18EcnKP FgsjIz/CWkW4Ow9pegDlWMElBbK2ZDOkSdvuRIEq3EH6m/H/3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORw4ESX1tjhOCj0RgkbuElFsMnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvMTdjZTVmOTktZGYzZC0z NzFlLThhYmQtOTEzYzcwNTBhNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJfu79IbOOAzoq0RGJuCe6o2TZacO840SDZlDQjaYGO9z6yVWUdEko4 9jgPa7LMdCgzGXF8HGoGeEwW6YoNkoGUO82RB8tExwyW5y6MrruVc3uiwBIgG+C7 JrlsuOdAx5Sum5HQrgreinA4t70VwCI0lALKrYEGRBtC4jgs8YwiAurBld9wOTLL Zzre+ygWE1TQ7+Pc+EPIz26+JYKLaYfJjLqdyk+2uEv9SC5Q6+7MtT4biwRbP4Lh OH/icviPP9IT11gE4SVCQKBiBE9UG0LTZ8i14+n+S07uyGGkpFoLL8T/g8ixFJQb arjPRNsH5hEJe9U2DPzcHKvMhxgWWBo= -----END CERTIFICATE-----Generated at Tue Oct 27 04:59:24 2026 by rpki-client