$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa File: 9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa (raw, json) Hash identifier: B9tWnhpP4p4VKwUmRXFkzJDOmxSCSdjTb5DbmEwPvCk= Subject key identifier: 0F:7B:D0:24:D1:AC:2D:54:DF:12:CC:91:34:A1:41:EF:49:02:72:F4 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584EB9AC5226893129C696752300 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa Signing time: Tue 04 Aug 2026 13:00:12 +0000 ROA not before: Tue 04 Aug 2026 13:00:12 +0000 ROA not after: Mon 02 Nov 2026 14:00:12 +0000 asID: 397181 IP address blocks: 142.249.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b9:ac:52:26:89:31:29:c6:96:75:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Aug 4 13:00:12 2026 GMT Not After : Nov 2 14:00:12 2026 GMT Subject: CN=7d7426eb-5a53-47c8-b374-6a1041f2e951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:fd:ed:b9:98:80:c1:c8:ca:9b:4b:f7:8b: 10:de:35:80:f8:92:52:09:25:f1:6c:8c:36:3b:58: cb:d4:cd:aa:89:47:0e:54:15:8d:0a:8a:b2:db:11: 11:b5:3c:3c:7b:36:75:95:ae:b5:a3:0a:6b:68:25: ed:37:fe:e6:18:41:10:d3:1d:04:94:a5:58:22:c1: b2:1d:8f:7f:a2:5f:18:e5:b4:cc:2e:79:7b:ff:dc: b9:0e:0e:9b:11:7e:e6:da:dc:44:89:1e:71:9f:76: 83:79:ff:a2:b4:ec:61:2b:0c:f3:01:50:2c:e1:b1: 77:cf:9a:2b:61:1a:9a:08:34:03:9f:16:26:eb:f3: 02:9f:25:dc:2a:dc:df:9b:f7:9a:82:16:41:83:6f: f7:95:15:7d:03:18:d4:bf:cd:74:ee:6b:ca:42:26: 4e:09:d3:88:8d:72:89:8a:1f:5a:8f:22:61:bf:1f: 54:c6:ae:c7:cd:16:99:87:7a:8b:32:cf:c2:e6:9e: 16:05:cc:4b:37:70:53:3c:1a:5d:d2:3e:b3:45:76: 0f:10:e5:10:6a:14:53:a3:b4:03:5d:8c:58:2c:ea: b8:63:fc:69:6f:99:8d:89:73:db:59:31:86:25:b2: b6:80:6c:2b:9f:aa:b6:76:f6:5c:fd:9e:d2:6c:80: 98:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7B:D0:24:D1:AC:2D:54:DF:12:CC:91:34:A1:41:EF:49:02:72:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/9de8cd46-188a-3d3b-921a-0a2a41d4e689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 142.249.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c6:fd:33:76:01:18:b4:6f:45:2a:8c:ea:5d:d0:5b:8f:93: e0:f9:70:b3:f6:8f:c6:d1:cf:14:03:da:89:41:57:6b:fa:40: a5:70:0f:c1:49:21:c8:b7:7e:39:1b:ac:1b:97:60:37:6e:d1: 51:77:15:00:a3:b2:85:d1:f4:66:af:66:94:0f:76:37:2a:b2: 81:4e:b6:9e:4a:b0:3e:66:0d:5f:31:fe:ac:e7:ad:d7:97:06: 6e:98:9b:0d:9b:54:86:b7:bd:5c:21:15:ec:60:90:e8:a1:83: 30:52:dd:0c:43:66:bf:08:4d:b1:22:3b:b6:7f:81:bc:f7:f9: 7c:79:f2:7b:05:15:c1:03:16:04:af:44:d6:92:6f:8a:75:66: 99:f9:1d:d0:8b:b5:21:89:73:0b:57:f4:92:39:dc:9d:09:7d: 7e:76:b9:77:dc:48:78:cb:34:47:04:37:6a:dc:be:53:25:ac: 81:bf:d3:a4:37:1a:23:0a:7c:d0:f0:1b:ca:32:27:b6:19:47: 9b:b0:b3:b7:24:2d:d4:d6:36:0c:38:37:04:ad:f7:18:a6:1f: e8:6d:5a:14:39:08:61:5a:b4:8e:93:01:6d:fa:40:9f:3b:ce: 96:12:b0:62:02:41:f3:16:5e:ac:6d:56:d6:ce:ae:22:5d:9f: 75:5f:6f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rFImiTEpxpZ1IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk N2Q3NDI2ZWItNWE1My00N2M4LWIzNzQtNmExMDQxZjJlOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ797bmYgMHIyptL94sQ3jWA+JJSCSXxbIw2 O1jL1M2qiUcOVBWNCoqy2xERtTw8ezZ1la61owpraCXtN/7mGEEQ0x0ElKVYIsGy HY9/ol8Y5bTMLnl7/9y5Dg6bEX7m2txEiR5xn3aDef+itOxhKwzzAVAs4bF3z5or YRqaCDQDnxYm6/MCnyXcKtzfm/eaghZBg2/3lRV9AxjUv8107mvKQiZOCdOIjXKJ ih9ajyJhvx9Uxq7HzRaZh3qLMs/C5p4WBcxLN3BTPBpd0j6zRXYPEOUQahRTo7QD XYxYLOq4Y/xpb5mNiXPbWTGGJbK2gGwrn6q2dvZc/Z7SbICYMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA970CTRrC1U3xLMkTShQe9JAnL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvOWRlOGNkNDYtMTg4YS0z ZDNiLTkyMWEtMGEyYTQxZDRlNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzG/TN2ARi0b0UqjOpd0FuPk+D5cLP2j8bRzxQD2olBV2v6QKVwD8FJ Ici3fjkbrBuXYDdu0VF3FQCjsoXR9GavZpQPdjcqsoFOtp5KsD5mDV8x/qznrdeX Bm6Ymw2bVIa3vVwhFexgkOihgzBS3QxDZr8ITbEiO7Z/gbz3+Xx58nsFFcEDFgSv RNaSb4p1Zpn5HdCLtSGJcwtX9JI53J0JfX52uXfcSHjLNEcEN2rcvlMlrIG/06Q3 GiMKfNDwG8oyJ7YZR5uws7ckLdTWNgw4NwSt9ximH+htWhQ5CGFatI6TAW36QJ87 zpYSsGICQfMWXqxtVtbOriJdn3Vfb+U= -----END CERTIFICATE-----Generated at Fri Sep 11 16:26:41 2026 by rpki-client