$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa File: 17ce5f99-df3d-371e-8abd-913c7050a633.roa (raw, json) Hash identifier: +yDZWuIgn6NwyK58PPi4HAGvu5h7CNozsJM64evOBTU= Subject key identifier: 37:86:9A:25:F5:5C:D8:39:34:C9:3A:F5:43:B1:DB:43:16:02:E7:4F Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584EB9AC4BCCC6DA1C3A20B85280 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa Signing time: Tue 04 Aug 2026 13:00:12 +0000 ROA not before: Tue 04 Aug 2026 13:00:12 +0000 ROA not after: Mon 02 Nov 2026 14:00:12 +0000 asID: 397181 IP address blocks: 142.249.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:ac:4b:cc:c6:da:1c:3a:20:b8:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Aug 4 13:00:12 2026 GMT Not After : Nov 2 14:00:12 2026 GMT Subject: CN=ba588476-a9e0-48a2-b3ba-6fb8e55d1fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:b5:0c:23:80:a4:66:d4:aa:7a:84:a1:90: f4:b2:2d:21:2b:d8:2e:57:8d:37:d4:f9:0f:26:6a: 1c:b6:fe:03:19:0e:8e:6f:78:79:a8:2a:50:b7:7d: f0:50:6d:5d:8f:8b:b8:15:e6:9a:44:ac:14:c2:f0: 3b:64:50:6e:ab:d8:27:16:71:ce:12:4d:e3:8a:fe: 95:42:d5:73:43:23:48:2f:0b:3e:e2:72:2c:61:c5: f0:fb:2d:28:4f:32:7a:00:86:0c:d4:b1:21:e2:76: 16:3c:6a:13:df:83:7e:e7:30:5e:eb:a3:7e:ce:37: 60:7f:8c:0d:62:fe:a8:e0:c4:51:07:07:ab:3f:7f: 85:6b:2a:aa:f0:2a:37:95:d6:d7:08:4a:1f:31:a3: be:1e:2c:2a:d6:8a:d2:b3:cf:87:f3:b8:52:fe:b0: 09:01:2b:97:ee:e0:07:39:b8:76:2f:10:78:ce:ef: 58:39:20:28:f5:7a:00:6a:1c:b8:38:d8:cb:e6:1c: 96:b6:fc:75:af:dd:27:23:71:ae:05:09:e3:1f:69: 8e:3a:f9:f8:de:2e:39:7c:36:4d:4b:56:83:89:c7: 84:f6:22:d1:70:5c:ae:76:c7:26:57:0e:46:b9:48: e9:e7:10:51:5c:7c:7e:da:bd:2e:cb:27:e9:49:df: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:86:9A:25:F5:5C:D8:39:34:C9:3A:F5:43:B1:DB:43:16:02:E7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/17ce5f99-df3d-371e-8abd-913c7050a633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:89:f9:fd:76:b0:01:4c:ed:f2:03:26:1d:c6:8a:f9:17:1d: c5:4f:79:9c:85:00:49:c8:49:10:ec:99:71:a5:a8:04:fb:17: 93:bf:23:5a:a8:93:e5:78:4a:62:c1:11:35:9c:14:f9:0c:04: 6d:c8:78:20:74:bc:bd:29:e2:b0:da:3a:6e:ed:97:34:fb:2c: e9:a2:63:4f:20:85:7f:c2:4f:52:49:47:67:a7:d9:09:18:d9: 09:9b:e0:88:c4:0b:34:53:32:f9:d8:32:ab:34:e1:56:cb:7d: 5b:0d:1d:4a:fa:2b:69:b6:70:e1:1d:89:15:63:b7:b1:c1:42: 1d:78:84:a8:0b:62:3c:ca:b4:c3:6e:7a:37:33:8e:09:25:2d: e3:0b:c1:d7:e8:da:05:2e:56:20:6b:66:68:b3:32:20:44:ed: e6:52:39:eb:4f:76:20:2c:02:65:a3:8b:0f:4b:02:e6:f0:cf: 92:b5:0f:6f:8e:5b:34:25:a4:38:29:31:4a:cc:ed:c6:fd:09: df:27:e8:12:73:38:e8:f0:ab:65:93:1f:8a:4e:93:a6:7d:96: 32:8a:a5:b7:39:0b:56:1b:c2:07:28:a5:fd:3b:f1:53:cc:32: b2:f3:b7:26:d1:37:45:51:97:63:82:70:25:fc:e5:87:43:e1: 51:74:ce:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rEvMxtocOiC4UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk YmE1ODg0NzYtYTllMC00OGEyLWIzYmEtNmZiOGU1NWQxZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUa1DCOApGbUqnqEoZD0si0hK9guV4031PkP Jmoctv4DGQ6Ob3h5qCpQt33wUG1dj4u4FeaaRKwUwvA7ZFBuq9gnFnHOEk3jiv6V QtVzQyNILws+4nIsYcXw+y0oTzJ6AIYM1LEh4nYWPGoT34N+5zBe66N+zjdgf4wN Yv6o4MRRBwerP3+Fayqq8Co3ldbXCEofMaO+Hiwq1orSs8+H87hS/rAJASuX7uAH Obh2LxB4zu9YOSAo9XoAahy4ONjL5hyWtvx1r90nI3GuBQnjH2mOOvn43i45fDZN S1aDiceE9iLRcFyudscmVw5GuUjp5xBRXHx+2r0uyyfpSd/sMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeGmiX1XNg5NMk69UOx20MWAudPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvMTdjZTVmOTktZGYzZC0z NzFlLThhYmQtOTEzYzcwNTBhNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2J+f12sAFM7fIDJh3GivkXHcVPeZyFAEnISRDsmXGlqAT7F5O/I1qo k+V4SmLBETWcFPkMBG3IeCB0vL0p4rDaOm7tlzT7LOmiY08ghX/CT1JJR2en2QkY 2Qmb4IjECzRTMvnYMqs04VbLfVsNHUr6K2m2cOEdiRVjt7HBQh14hKgLYjzKtMNu ejczjgklLeMLwdfo2gUuViBrZmizMiBE7eZSOetPdiAsAmWjiw9LAubwz5K1D2+O WzQlpDgpMUrM7cb9Cd8n6BJzOOjwq2WTH4pOk6Z9ljKKpbc5C1Ybwgcopf078VPM MrLztybRN0VRl2OCcCX85YdD4VF0zj8= -----END CERTIFICATE-----Generated at Fri Sep 11 16:26:49 2026 by rpki-client