$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32322d3232203d3e20323039313039.roa File: 3134322e3234392e3131322e302f32322d3232203d3e20323039313039.roa (raw, json) Hash identifier: M3q3hECbuweu5nz6j0YtcDEwO8trtUXlbXecEzNpJQ4= Subject key identifier: 27:E9:90:DA:B3:52:01:12:4E:BA:67:BC:7D:F9:75:72:F7:A0:75:DF Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Certificate serial: 46FF97BB256A3A7EAB280A735E3429FFED8006CD Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32322d3232203d3e20323039313039.roa Signing time: Fri 11 Sep 2026 08:35:17 +0000 ROA not before: Fri 11 Sep 2026 08:30:17 +0000 ROA not after: Fri 10 Sep 2027 08:35:17 +0000 asID: 209109 IP address blocks: 142.249.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ff:97:bb:25:6a:3a:7e:ab:28:0a:73:5e:34:29:ff:ed:80:06:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556 Validity Not Before: Sep 11 08:30:17 2026 GMT Not After : Sep 10 08:35:17 2027 GMT Subject: CN=27E990DAB35201124EBA67BC7DF97572F7A075DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:23:9e:e6:9f:44:f0:29:ba:91:d6:65:9a: 58:32:ba:e6:67:10:c7:25:f4:3a:84:5c:24:a4:20: a0:89:9a:fb:c3:60:6c:10:21:b2:f4:20:9a:8a:55: 52:0a:5b:6b:97:20:87:85:03:cc:3d:9b:aa:a9:1e: 3c:cf:ad:29:b2:7b:14:6d:ca:93:f8:c5:d9:30:54: 02:d0:19:2b:7a:6b:66:1e:3c:ed:ee:46:64:42:2c: bf:49:f7:5e:71:41:9d:47:cb:a1:d0:be:c4:18:80: c4:be:28:06:35:c9:cb:ac:d1:27:9e:c9:a3:c4:d6: 1d:b1:c0:02:81:2c:e3:23:58:bd:4f:f9:05:76:3a: e9:4f:4b:f7:11:a1:5f:17:ff:49:c0:9d:ec:f9:a5: 08:20:ce:7a:c3:f9:b3:19:8a:0a:c4:02:c6:2e:fe: 9a:b5:25:a5:11:c6:5c:f2:f0:c3:aa:1a:88:a8:e3: d6:e7:51:bd:7c:c3:d6:c8:d5:fe:4d:1e:77:39:30: d4:5f:81:7b:c1:2a:16:2d:de:bf:97:cb:df:ad:92: 7a:c8:b4:b3:9b:7d:21:79:99:42:b7:29:83:3b:d2: 18:cc:35:8a:2b:5c:20:33:a7:04:a2:41:41:01:18: 0a:6d:f5:58:80:58:28:71:72:c5:4b:90:c6:bd:25: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E9:90:DA:B3:52:01:12:4E:BA:67:BC:7D:F9:75:72:F7:A0:75:DF X509v3 Authority Key Identifier: keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32322d3232203d3e20323039313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.249.112.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:68:33:cf:40:93:ff:80:52:91:b0:24:73:71:fd:64:ae:d2: e9:cd:2a:ca:a2:a8:6a:52:e6:9f:e2:3e:27:49:25:66:5c:08: 2d:40:2e:b1:8f:2a:3f:4e:ec:56:5d:0a:32:b7:57:33:4a:07: 44:68:a9:63:36:19:1c:ac:42:6f:d2:31:28:b1:18:b8:f3:f3: 1f:7e:c1:73:ea:cb:09:c1:9c:0f:48:0a:84:c9:16:f7:90:18: 01:90:d0:89:22:68:9f:ca:8d:7f:f8:35:12:1a:29:f6:00:a2: c8:bd:e1:b0:98:59:c7:cc:b9:0a:93:06:c5:b4:58:0c:f7:28: 5d:71:4c:a8:d3:a0:3b:3f:73:6e:52:d5:6f:fa:7e:b5:5c:82: 59:60:7c:00:3d:c6:f1:a0:53:d7:a4:c0:cc:66:7c:77:bf:21: b8:d5:91:c0:0a:f0:86:ff:15:ec:a4:3e:3a:bf:a2:11:db:d8: d1:d9:84:89:4d:22:69:1d:16:71:55:5a:a3:1f:6e:9a:ee:1b: 09:b5:e4:e6:9e:49:5a:58:38:34:99:42:57:e6:aa:11:2e:4c: 2e:bd:a8:45:7c:64:af:44:3e:f5:06:67:6c:a1:4a:5a:11:fe: 13:3f:ba:55:a1:b6:74:c1:23:d6:44:7f:04:ad:65:fe:c8:0d: 51:de:88:40 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIURv+XuyVqOn6rKApzXjQp/+2ABs0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjYwOTExMDgzMDE3WhcNMjcwOTEwMDgzNTE3 WjAzMTEwLwYDVQQDEygyN0U5OTBEQUIzNTIwMTEyNEVCQTY3QkM3REY5NzU3MkY3 QTA3NURGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuasjnuafRPAp upHWZZpYMrrmZxDHJfQ6hFwkpCCgiZr7w2BsECGy9CCailVSCltrlyCHhQPMPZuq qR48z60psnsUbcqT+MXZMFQC0BkremtmHjzt7kZkQiy/SfdecUGdR8uh0L7EGIDE vigGNcnLrNEnnsmjxNYdscACgSzjI1i9T/kFdjrpT0v3EaFfF/9JwJ3s+aUIIM56 w/mzGYoKxALGLv6atSWlEcZc8vDDqhqIqOPW51G9fMPWyNX+TR53OTDUX4F7wSoW Ld6/l8vfrZJ6yLSzm30heZlCtymDO9IYzDWKK1wgM6cEokFBARgKbfVYgFgocXLF S5DGvSXxHQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFCfpkNqzUgESTrpnvH35dXL3 oHXfMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4 NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw OGIzZTI4NTE0YS8wLzMxMzQzMjJlMzIzNDM5MmUzMTMxMzIyZTMwMmYzMjMyMmQz MjMyMjAzZDNlMjAzMjMwMzkzMTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKO+XAwDQYJKoZIhvcN AQELBQADggEBAFxoM89Ak/+AUpGwJHNx/WSu0unNKsqiqGpS5p/iPidJJWZcCC1A LrGPKj9O7FZdCjK3VzNKB0RoqWM2GRysQm/SMSixGLjz8x9+wXPqywnBnA9ICoTJ FveQGAGQ0IkiaJ/KjX/4NRIaKfYAosi94bCYWcfMuQqTBsW0WAz3KF1xTKjToDs/ c25S1W/6frVcgllgfAA9xvGgU9ekwMxmfHe/IbjVkcAK8Ib/FeykPjq/ohHb2NHZ hIlNImkdFnFVWqMfbpruGwm15OaeSVpYODSZQlfmqhEuTC69qEV8ZK9EPvUGZ2yh SloR/hM/ulWhtnTBI9ZEfwStZf7IDVHeiEA= -----END CERTIFICATE-----Generated at Sat Sep 26 03:57:46 2026 by rpki-client