$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/4dc077a2-b9da-352a-8495-87cb9e84d44c.roa File: 4dc077a2-b9da-352a-8495-87cb9e84d44c.roa (raw, json) Hash identifier: hfCU7YhkXx41k2mSmXAcsA3V2H4PNoPFkkXffh83sMo= Subject key identifier: 90:01:7E:DC:7C:42:9B:6F:62:AB:4B:D2:AE:01:F7:2F:07:7B:FC:99 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584F5B9802F18A18A0E964728A80 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/4dc077a2-b9da-352a-8495-87cb9e84d44c.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 397181 IP address blocks: 142.249.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:02:f1:8a:18:a0:e9:64:72:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=562a815a-46a3-47a0-9857-e903bc80ccd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:6b:82:36:ff:c5:62:6c:fc:d0:9b:53:c1: ac:0f:20:fb:12:40:f1:bb:5c:c5:e5:d2:6d:1d:58: c9:68:17:00:f5:5e:48:ba:ce:c7:86:01:40:3e:55: b9:7b:9f:ef:2f:79:05:d7:e9:91:90:42:cc:d9:8b: bd:2b:e7:ee:5b:7b:d5:f8:40:1e:83:95:46:ae:1a: c2:e4:1f:c3:41:3d:a0:9f:84:d4:02:1f:24:dd:01: b7:2b:80:17:cf:62:99:18:48:2f:d7:09:c1:20:f6: 77:7a:11:1b:65:49:11:58:b1:f6:2a:5e:8c:89:ab: 25:f5:3e:48:c3:49:fb:a0:cc:36:97:5d:1b:cb:df: cb:73:74:a8:69:1f:a7:3b:ff:f3:29:bb:e4:72:ca: 95:5d:db:9c:1d:a1:74:eb:48:52:35:36:6e:2d:78: 23:d8:9e:0c:e3:10:1f:47:2f:73:08:7a:7b:94:4d: 1c:9d:98:d8:d2:f4:38:da:b2:de:4d:e3:24:f0:56: be:5c:11:29:a8:dc:bd:ce:f1:cf:3c:e9:34:00:1f: 86:c0:35:e9:36:15:0c:d1:8d:02:7c:d2:81:5d:1c: 0e:8a:6d:d7:9c:df:76:c6:30:ca:43:bf:f5:28:f1: 50:1b:1c:e8:31:fc:d7:45:36:6b:4a:9b:61:4a:80: 1e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:01:7E:DC:7C:42:9B:6F:62:AB:4B:D2:AE:01:F7:2F:07:7B:FC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/4dc077a2-b9da-352a-8495-87cb9e84d44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c5:08:f4:22:b8:56:11:b9:cc:d3:5a:8d:d7:de:84:05:b3: a7:16:3e:4d:d1:90:9b:4b:a2:a2:32:7a:14:e6:0d:0d:94:30: 2c:5a:32:51:a2:68:f0:b7:aa:c9:b1:5a:f5:3a:e5:7f:53:2f: 77:4b:41:35:df:bb:ba:cf:ed:b3:de:56:f2:6f:88:3a:c5:b9: 56:77:69:e0:03:95:ef:85:f0:13:ee:39:ba:1c:db:49:22:46: 3b:e2:9a:c6:c9:9d:d2:85:9a:30:a5:83:1e:6c:8e:56:6b:30: 54:05:64:e0:ec:01:d2:13:4f:2a:3e:52:1f:e8:94:ed:b2:92: 74:8a:12:ce:58:37:94:2f:b7:40:5a:95:1c:f4:4d:63:ba:fe: 82:14:83:98:c5:db:92:00:81:9a:3a:71:33:79:1c:c9:52:c2: 25:d9:cf:58:56:7d:13:86:4a:41:dc:6a:44:01:0c:c6:ef:52: c9:91:36:f6:f8:24:55:e5:7f:0b:4c:01:18:c1:e6:c0:2a:be: e0:1e:42:20:3c:ff:c2:98:e4:c5:ed:fa:f9:b7:a8:27:2c:c8: 5d:bf:e4:57:0e:fe:ac:e0:52:56:0d:6f:e4:23:f0:17:dd:18: 0e:9e:61:e7:68:37:78:c3:9b:00:10:1d:b4:61:60:c4:91:ea: 21:1d:97:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmALxihig6WRyioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk NTYyYTgxNWEtNDZhMy00N2EwLTk4NTctZTkwM2JjODBjY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnxrgjb/xWJs/NCbU8GsDyD7EkDxu1zF5dJt HVjJaBcA9V5Ius7HhgFAPlW5e5/vL3kF1+mRkELM2Yu9K+fuW3vV+EAeg5VGrhrC 5B/DQT2gn4TUAh8k3QG3K4AXz2KZGEgv1wnBIPZ3ehEbZUkRWLH2Kl6Miasl9T5I w0n7oMw2l10by9/Lc3SoaR+nO//zKbvkcsqVXducHaF060hSNTZuLXgj2J4M4xAf Ry9zCHp7lE0cnZjY0vQ42rLeTeMk8Fa+XBEpqNy9zvHPPOk0AB+GwDXpNhUM0Y0C fNKBXRwOim3XnN92xjDKQ7/1KPFQGxzoMfzXRTZrSpthSoAemwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJABftx8QptvYqtL0q4B9y8He/yZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvNGRjMDc3YTItYjlkYS0z NTJhLTg0OTUtODdjYjllODRkNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbFCPQiuFYRuczTWo3X3oQFs6cWPk3RkJtLoqIyehTmDQ2UMCxaMlGi aPC3qsmxWvU65X9TL3dLQTXfu7rP7bPeVvJviDrFuVZ3aeADle+F8BPuOboc20ki RjvimsbJndKFmjClgx5sjlZrMFQFZODsAdITTyo+Uh/olO2yknSKEs5YN5Qvt0Ba lRz0TWO6/oIUg5jF25IAgZo6cTN5HMlSwiXZz1hWfROGSkHcakQBDMbvUsmRNvb4 JFXlfwtMARjB5sAqvuAeQiA8/8KY5MXt+vm3qCcsyF2/5FcO/qzgUlYNb+Qj8Bfd GA6eYedoN3jDmwAQHbRhYMSR6iEdlws= -----END CERTIFICATE-----Generated at Wed Oct 28 16:32:56 2026 by rpki-client