$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa File: 9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa (raw, json) Hash identifier: wLPVNeh/3wDF2EcS33hy5Wfr2hNfQrb1sBMaHp3MHWo= Subject key identifier: F2:9A:E7:68:C4:DD:25:B0:38:2A:01:38:CB:B3:4A:7E:6E:56:EF:32 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584F5B98036A622EDC1A15F28320 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 397181 IP address blocks: 142.249.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:03:6a:62:2e:dc:1a:15:f2:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=75ee0e6e-d8b4-4a3f-988f-f621185dfe4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:cc:ca:1a:50:bf:99:de:8d:a7:f4:42:b7: 0f:55:af:d0:ed:96:50:93:2e:00:45:a4:9b:e5:3b: 38:8e:13:d0:e4:7e:ba:bc:a8:35:99:8c:9a:1d:43: ec:cd:65:a5:b1:22:d8:58:48:3a:a8:90:37:65:89: de:44:05:e5:66:27:1f:10:f1:74:39:30:f8:a6:1c: da:f1:56:2d:bd:07:bd:35:c8:bf:11:9e:60:2e:1c: 51:8f:93:9d:71:e0:cf:de:fa:6d:0c:ee:2b:ad:33: 44:52:c4:8b:bc:0d:26:45:51:df:db:25:15:a5:95: ee:35:31:c8:ad:9c:84:3d:63:78:30:5b:43:26:48: eb:7e:1a:eb:99:7c:7e:79:e2:16:05:0b:13:c0:1d: 9b:0e:8e:5f:d4:63:e1:81:28:ae:84:59:c2:e3:e4: bf:9f:83:18:52:2b:cd:7f:d0:0c:65:57:ab:b6:1b: e0:96:de:13:a0:0d:6f:18:f5:1b:cf:32:03:51:65: 2e:63:02:4c:e1:28:e9:3b:78:2a:e0:99:61:7f:bc: 7a:33:e9:d4:7f:6c:76:8a:7b:12:91:a2:06:60:d6: 8f:0c:00:8d:f3:13:f7:72:d7:6c:31:c4:10:4e:01: af:7b:d5:fe:95:61:93:e5:3d:8d:87:3c:8e:62:a2: 89:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9A:E7:68:C4:DD:25:B0:38:2A:01:38:CB:B3:4A:7E:6E:56:EF:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f6:34:a5:d5:ec:77:7f:58:6e:cb:e7:ab:41:30:25:2b:54: ae:df:c3:c1:02:47:e2:c3:af:4d:c2:7f:06:f0:a0:f4:bc:ad: 47:f3:50:1c:df:cf:41:a1:32:85:eb:e6:1d:6b:5d:18:74:c1: 0b:d6:d5:7e:0c:20:66:36:6e:0b:72:86:e6:a9:78:36:9e:28: 83:e0:16:57:7d:90:6b:9a:7f:ef:02:38:fe:f1:d7:ae:5d:75: c3:29:52:e2:bd:c8:c3:e1:4c:ce:14:50:d5:ce:a9:e3:2c:1c: 4e:c4:6b:7e:20:9a:21:45:1b:b0:fd:25:30:29:b1:67:2b:72: 28:62:c0:8e:76:d6:4d:08:9b:ee:8c:58:ea:e2:e8:da:4c:df: fa:40:74:bc:61:2b:b8:f9:9a:e9:8d:b0:3a:b1:d9:a6:e3:01: bd:62:a0:ad:7f:6b:b6:e8:48:0f:3e:72:07:5e:c8:7d:6b:91: 88:2a:a1:b1:fe:9e:e5:8f:41:4a:6d:a5:ab:ac:c7:2f:32:33: 0f:ec:24:e9:ac:17:cd:bf:83:df:f8:b1:14:4e:8e:64:86:3b: 25:ca:3a:10:cb:4d:cc:34:0e:79:6f:08:42:6b:7a:49:ae:02: ed:c5:f2:ad:14:e7:7b:03:51:6c:2e:fd:f2:3c:70:10:f8:7b: b7:25:0b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmANqYi7cGhXygyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk NzVlZTBlNmUtZDhiNC00YTNmLTk4OGYtZjYyMTE4NWRmZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytDMyhpQv5nejaf0QrcPVa/Q7ZZQky4ARaSb 5Ts4jhPQ5H66vKg1mYyaHUPszWWlsSLYWEg6qJA3ZYneRAXlZicfEPF0OTD4phza 8VYtvQe9Nci/EZ5gLhxRj5OdceDP3vptDO4rrTNEUsSLvA0mRVHf2yUVpZXuNTHI rZyEPWN4MFtDJkjrfhrrmXx+eeIWBQsTwB2bDo5f1GPhgSiuhFnC4+S/n4MYUivN f9AMZVerthvglt4ToA1vGPUbzzIDUWUuYwJM4SjpO3gq4Jlhf7x6M+nUf2x2insS kaIGYNaPDACN8xP3ctdsMcQQTgGve9X+lWGT5T2NhzyOYqKJ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKa52jE3SWwOCoBOMuzSn5uVu8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvOWRlOGNkNDYtMTg4YS0z ZDNiLTkyMWEtMGEyYTQxZDRlNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP2NKXV7Hd/WG7L56tBMCUrVK7fw8ECR+LDr03CfwbwoPS8rUfzUBzf z0GhMoXr5h1rXRh0wQvW1X4MIGY2bgtyhuapeDaeKIPgFld9kGuaf+8COP7x165d dcMpUuK9yMPhTM4UUNXOqeMsHE7Ea34gmiFFG7D9JTApsWcrcihiwI521k0Im+6M WOri6NpM3/pAdLxhK7j5mumNsDqx2abjAb1ioK1/a7boSA8+cgdeyH1rkYgqobH+ nuWPQUptpausxy8yMw/sJOmsF82/g9/4sRROjmSGOyXKOhDLTcw0DnlvCEJrekmu Au3F8q0U53sDUWwu/fI8cBD4e7clCys= -----END CERTIFICATE-----Generated at Wed Oct 28 14:06:19 2026 by rpki-client