$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/b35b0921-1e78-3994-826e-db1aceee4813.roa File: b35b0921-1e78-3994-826e-db1aceee4813.roa (raw, json) Hash identifier: krGYA58UC2A3EFztNLVY6pDwUEWPzAP7XIgquhZpUvo= Subject key identifier: 5A:E6:19:57:85:2E:8F:62:6D:89:1A:46:5A:19:86:47:2F:0E:68:46 Certificate issuer: /CN=81d86d00-f6e5-47a7-932c-048a6cc0c427 Certificate serial: 010D0C9F4328584F5E62E71F5C6105A024470780 Authority key identifier: E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/b35b0921-1e78-3994-826e-db1aceee4813.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 400882 IP address blocks: 142.249.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e7:1f:5c:61:05:a0:24:47:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81d86d00-f6e5-47a7-932c-048a6cc0c427 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=f4f2e2a5-d62c-44e4-ab14-12b5b4610499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0c:68:ac:f7:d1:bc:98:30:24:43:7f:6a:a1: 68:ba:bd:a0:97:94:ae:00:f4:d2:db:58:ec:5c:17: 9d:d9:c0:c1:b8:89:1d:c8:8a:c4:93:4f:ab:ae:d6: 72:ca:3d:1c:ef:25:d9:c5:76:63:43:e5:87:23:15: 6a:f8:75:e9:7c:2e:0f:32:43:08:14:f1:4c:3d:a0: 7c:20:7a:b6:63:db:03:69:dc:60:52:51:e9:0b:2e: 20:6a:90:23:d3:5a:b9:98:25:01:33:c6:8e:80:c0: 61:cf:95:06:ab:70:79:96:3f:25:85:9a:a1:f6:79: 40:57:f8:5e:e9:70:05:93:21:3a:8c:f5:0c:a0:e7: 57:0f:85:77:8d:7d:64:bc:95:a4:6a:57:fe:c0:3d: b6:2c:a1:8d:6c:a9:58:27:e3:94:70:de:37:f3:fc: fc:42:8f:b8:0d:cf:02:b4:29:e4:4d:00:89:25:d2: e5:80:a6:b3:4a:48:1c:ab:ac:f8:24:b0:e2:8b:c5: 8e:75:e3:ac:db:a2:27:74:43:c7:40:03:1a:44:d6: 7f:f7:68:88:bd:bf:db:22:31:ed:b6:31:c2:89:c9: 0e:16:3d:a7:ed:69:d4:5c:2b:64:6c:74:50:ed:5a: d7:5b:d7:51:ca:db:3e:34:be:2b:b2:bf:d7:9d:5f: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E6:19:57:85:2E:8F:62:6D:89:1A:46:5A:19:86:47:2F:0E:68:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/b35b0921-1e78-3994-826e-db1aceee4813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl X509v3 Authority Key Identifier: keyid:E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer sbgp-ipAddrBlock: critical IPv4: 142.249.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:8d:10:f0:cd:39:6f:36:f1:a1:c5:c6:a5:5f:10:a8:b8:f0: e7:7b:fa:42:1f:9e:f7:10:63:d9:96:40:c2:96:9c:ab:92:3d: 80:9f:e6:11:59:21:e7:85:0b:2d:a0:10:b0:cf:1c:c1:37:58: 12:24:33:af:9f:86:25:de:b3:1d:a4:83:6c:28:5f:11:72:ee: 28:dd:a9:06:87:25:82:3e:be:24:e7:f0:ff:bb:9e:03:1c:30: da:71:1b:2f:31:c5:09:e1:87:d9:d5:e6:c6:ba:8c:21:0f:19: d0:4a:9b:89:76:61:b2:93:8b:1f:57:e1:46:8d:a3:f0:26:89: f5:5d:b3:b4:e7:78:9e:54:50:cf:e5:96:a9:05:e5:38:eb:f9: 16:bf:ca:ee:82:56:ed:3a:9b:51:e5:d0:98:c4:f0:d1:be:3c: ef:67:94:1f:52:f2:80:e0:66:f5:5e:ee:44:0b:1d:cb:43:d0: ed:9d:4b:e4:fc:b8:79:c7:5b:bb:34:83:8c:33:91:ff:2f:6a: 8e:16:ef:86:95:e0:9d:b8:58:2e:ca:d2:9b:1b:17:a0:03:b7: cb:88:8e:1e:55:56:1d:14:5e:0b:19:3e:06:2d:3c:91:19:e6: 77:3c:f7:59:67:26:e7:2c:7e:23:cb:31:fc:6c:52:c1:82:a8: 49:1d:2e:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYucfXGEFoCRHB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFkODZkMDAtZjZlNS00N2E3LTkzMmMtMDQ4YTZjYzBj NDI3MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjRmMmUyYTUtZDYyYy00NGU0LWFiMTQtMTJiNWI0NjEwNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAxorPfRvJgwJEN/aqFour2gl5SuAPTS21js XBed2cDBuIkdyIrEk0+rrtZyyj0c7yXZxXZjQ+WHIxVq+HXpfC4PMkMIFPFMPaB8 IHq2Y9sDadxgUlHpCy4gapAj01q5mCUBM8aOgMBhz5UGq3B5lj8lhZqh9nlAV/he 6XAFkyE6jPUMoOdXD4V3jX1kvJWkalf+wD22LKGNbKlYJ+OUcN438/z8Qo+4Dc8C tCnkTQCJJdLlgKazSkgcq6z4JLDii8WOdeOs26IndEPHQAMaRNZ/92iIvb/bIjHt tjHCickOFj2n7WnUXCtkbHRQ7VrXW9dRyts+NL4rsr/XnV9UDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrmGVeFLo9ibYkaRloZhkcvDmhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWQ4 NmQwMC1mNmU1LTQ3YTctOTMyYy0wNDhhNmNjMGM0MjcvYjM1YjA5MjEtMWU3OC0z OTk0LTgyNmUtZGIxYWNlZWU0ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFkODZkMDAtZjZlNS00N2E3LTkz MmMtMDQ4YTZjYzBjNDI3LzgxZDg2ZDAwLWY2ZTUtNDdhNy05MzJjLTA0OGE2Y2Mw YzQyNy5jcmwwHwYDVR0jBBgwFoAU6edUqU0xhxQtXcuRSykkoYq7bvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MWQ4NmQwMC1mNmU1LTQ3YTctOTMyYy0wNDhh NmNjMGM0MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSNEPDNOW828aHFxqVfEKi48Od7+kIfnvcQY9mWQMKWnKuSPYCf5hFZ IeeFCy2gELDPHME3WBIkM6+fhiXesx2kg2woXxFy7ijdqQaHJYI+viTn8P+7ngMc MNpxGy8xxQnhh9nV5sa6jCEPGdBKm4l2YbKTix9X4UaNo/AmifVds7TneJ5UUM/l lqkF5Tjr+Ra/yu6CVu06m1Hl0JjE8NG+PO9nlB9S8oDgZvVe7kQLHctD0O2dS+T8 uHnHW7s0g4wzkf8vao4W74aV4J24WC7K0psbF6ADt8uIjh5VVh0UXgsZPgYtPJEZ 5nc891lnJucsfiPLMfxsUsGCqEkdLn4= -----END CERTIFICATE-----Generated at Mon Oct 12 18:39:10 2026 by rpki-client