$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/a3ed5522-ff9a-362c-b563-3d0e4f35d4f6.roa File: a3ed5522-ff9a-362c-b563-3d0e4f35d4f6.roa (raw, json) Hash identifier: LoNieVNvjNFsZwTNaJ/QCCNmX6FccyrEMtlSBTzfOx0= Subject key identifier: F6:2A:9C:FB:30:99:91:17:2B:E0:19:86:BC:26:BD:01:5D:4E:8D:D4 Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F4328584F06721E69F3370E2DFEF61938 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/a3ed5522-ff9a-362c-b563-3d0e4f35d4f6.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 22295 IP address blocks: 142.248.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:1e:69:f3:37:0e:2d:fe:f6:19:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=f0677f68-a9e9-4049-a910-251ebdfb1e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:62:91:a1:e7:73:e7:c0:0e:91:3e:1f:cb: 9d:9a:b7:e9:46:13:f4:1b:63:f2:27:1d:f5:e4:d8: 13:99:9a:13:fd:f1:3a:ec:fb:27:ef:a5:c3:4f:a3: 99:06:6b:60:cd:eb:d4:8a:3b:b9:2f:af:6f:45:cb: 3e:6b:9a:56:b6:c4:98:3e:e9:6f:94:8c:27:ff:ad: 4c:4c:3b:92:69:df:87:82:26:cf:b1:f0:4b:73:2f: e7:49:a6:f1:cb:6e:2e:4b:0f:4e:cc:a4:1a:a1:06: 20:1f:cb:56:ff:07:ee:97:f2:8b:04:6d:b1:8a:be: 8a:c5:3e:66:3a:3b:1a:81:05:d0:6c:24:25:81:3e: 73:ae:d0:27:36:71:4f:da:ed:8c:7a:ec:2c:cf:41: 2d:78:ec:63:dc:a5:58:31:c4:21:ef:9a:1e:1d:96: f4:a6:d7:0a:fc:f9:a7:e5:54:1b:c2:4b:09:98:18: 92:ec:c6:43:bb:02:79:3d:74:9f:c3:3a:4d:74:b6: eb:55:b1:74:4e:0d:61:70:bd:3c:ae:64:3c:b5:fe: b3:31:b9:cb:17:25:2a:29:a3:14:ab:08:66:1c:c5: 4f:b8:e7:2f:a9:0e:ad:2f:e9:65:e7:b3:f0:63:0a: c8:1a:5e:12:63:85:b9:73:20:e9:24:04:bc:c3:c9: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2A:9C:FB:30:99:91:17:2B:E0:19:86:BC:26:BD:01:5D:4E:8D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/a3ed5522-ff9a-362c-b563-3d0e4f35d4f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 142.248.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:86:1a:13:3e:87:4f:ac:c7:22:03:c8:ea:79:ba:97:69:7a: 16:7b:cb:92:73:23:37:52:e9:41:41:2b:e1:bb:d4:31:87:a7: 4b:5e:45:b0:56:ac:2e:17:cf:d0:1a:50:4d:0c:cd:ea:e1:44: dd:c5:b6:14:5b:34:99:74:d3:4f:36:c9:cd:26:77:1f:17:a7: 32:a1:82:f3:b5:05:6a:1e:5f:a0:e1:fb:97:18:5d:a9:db:f4: e7:da:4f:3e:04:3d:20:bb:c2:46:02:3d:fb:75:69:5e:66:33: 81:18:22:60:09:5a:83:a8:a1:40:cd:cb:ec:65:b1:47:8f:4f: 01:fe:4e:67:5c:00:55:0c:a2:37:e2:ed:0f:98:fe:74:a6:49: 59:d7:79:13:06:e4:f9:15:5e:a0:c7:d6:b9:10:8b:7d:87:c2: 3a:47:33:4a:e5:0d:fc:c4:0b:3f:81:ec:6b:9c:a9:68:43:c0: b9:a1:b0:53:fd:b2:31:22:f1:0b:72:11:a3:0b:66:69:74:a7: 1b:14:3e:80:93:13:a4:d2:95:94:07:30:10:2c:95:c6:e6:e5: e2:5b:2f:19:5f:be:3d:d2:dc:5d:43:65:46:3c:0d:d9:54:af: c4:88:f7:52:cd:c8:5d:52:f9:50:dc:1c:11:57:08:5f:71:4c: fb:8e:ac:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gch5p8zcOLf72GTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjA2NzdmNjgtYTllOS00MDQ5LWE5MTAtMjUxZWJkZmIxZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8xikaHnc+fADpE+H8udmrfpRhP0G2PyJx31 5NgTmZoT/fE67Psn76XDT6OZBmtgzevUiju5L69vRcs+a5pWtsSYPulvlIwn/61M TDuSad+HgibPsfBLcy/nSabxy24uSw9OzKQaoQYgH8tW/wful/KLBG2xir6KxT5m OjsagQXQbCQlgT5zrtAnNnFP2u2Meuwsz0EteOxj3KVYMcQh75oeHZb0ptcK/Pmn 5VQbwksJmBiS7MZDuwJ5PXSfwzpNdLbrVbF0Tg1hcL08rmQ8tf6zMbnLFyUqKaMU qwhmHMVPuOcvqQ6tL+ll57PwYwrIGl4SY4W5cyDpJAS8w8m/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYqnPswmZEXK+AZhrwmvQFdTo3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvYTNlZDU1MjItZmY5YS0z NjJjLWI1NjMtM2QwZTRmMzVkNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvhRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+GGhM+h0+sxyIDyOp5updpehZ7y5JzIzdS6UFBK+G71DGHp0teRbBW rC4Xz9AaUE0MzerhRN3FthRbNJl00082yc0mdx8XpzKhgvO1BWoeX6Dh+5cYXanb 9OfaTz4EPSC7wkYCPft1aV5mM4EYImAJWoOooUDNy+xlsUePTwH+TmdcAFUMojfi 7Q+Y/nSmSVnXeRMG5PkVXqDH1rkQi32HwjpHM0rlDfzECz+B7GucqWhDwLmhsFP9 sjEi8QtyEaMLZml0pxsUPoCTE6TSlZQHMBAslcbm5eJbLxlfvj3S3F1DZUY8DdlU r8SI91LNyF1S+VDcHBFXCF9xTPuOrDE= -----END CERTIFICATE-----Generated at Mon Sep 28 19:17:50 2026 by rpki-client