$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/240908bb-4515-34ef-8020-8de311ab1345.roa File: 240908bb-4515-34ef-8020-8de311ab1345.roa (raw, json) Hash identifier: kO1bbm7Pha6I+2hSDZ908Ue1PIWs2BuSkkQrlCh5Cn0= Subject key identifier: 25:AD:FD:C9:08:1F:24:04:5B:ED:69:27:CF:5A:E5:1A:B7:8F:F3:92 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F71EDBED3E9D0041485209A30 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/240908bb-4515-34ef-8020-8de311ab1345.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 62651 IP address blocks: 199.127.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:be:d3:e9:d0:04:14:85:20:9a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=41d177f1-8dfa-44f0-b911-918fd18b9d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:73:b0:4d:3f:ef:e5:8b:7d:67:57:df:06:d1: 23:2d:26:1b:70:51:a8:9c:bd:5f:61:ee:9a:e0:af: 04:3d:68:13:e5:90:7a:d2:6e:6a:ef:e9:bf:d3:69: 51:95:c1:1e:1e:62:8c:e2:9f:87:aa:ab:bc:13:c1: a6:07:9b:0d:f2:91:19:ff:45:88:11:db:e6:8c:05: a9:e8:f4:5a:67:37:5c:c7:5b:52:51:6f:ca:3d:58: bf:f3:c2:44:61:46:8d:c9:1b:fb:78:44:61:bb:de: 9f:38:57:4c:c8:13:a2:17:b6:cf:0d:7c:ae:1a:77: 0e:1e:5e:e5:e6:ba:36:89:d6:64:26:c0:c4:ea:e4: 4b:6c:62:af:7a:1b:30:26:9c:ae:96:76:62:6f:1d: 21:e0:3f:b5:fd:1a:eb:7c:f9:58:bf:db:a4:d8:ad: 7b:06:7f:98:7c:6f:4c:84:fa:ac:15:9d:e9:fd:c7: fc:02:39:c2:41:37:2f:c7:8e:ab:64:03:ca:be:14: 5d:40:5b:82:02:50:f7:7e:05:35:b0:88:e8:0c:c1: 8e:99:ea:e4:2b:bc:48:e4:29:8a:b9:57:b6:83:c1: 28:24:35:8e:14:81:6b:02:ca:81:f5:58:01:a5:4b: 7a:29:31:f4:5e:0d:de:c9:36:76:6f:42:17:e4:82: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:FD:C9:08:1F:24:04:5B:ED:69:27:CF:5A:E5:1A:B7:8F:F3:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/240908bb-4515-34ef-8020-8de311ab1345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 199.127.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1d:b1:e8:16:5a:b4:8b:2a:1d:b2:a2:05:49:ef:e0:21:a4: 4e:75:21:06:20:21:18:56:50:90:c1:cc:36:3b:67:08:0c:0a: 18:a6:30:f4:0f:9b:c7:eb:d1:4c:90:1d:44:de:f7:29:6e:b6: 72:53:3f:52:9c:53:16:8a:f5:b3:d7:49:2f:c7:ee:8b:8e:83: 45:39:0b:79:f0:5b:14:47:00:1b:c8:59:4e:49:f6:5a:3a:2f: 4a:3a:25:83:9c:f1:57:27:15:3d:23:32:ea:42:72:4c:bc:6a: 14:bf:65:e5:7c:ce:a5:85:a1:8c:a7:dc:7a:b7:2a:7d:ed:0d: 11:eb:68:45:de:e4:c6:22:1e:52:fa:6e:eb:73:3a:f0:cb:1a: e5:25:bb:c0:ca:03:06:ec:ef:12:38:6a:d5:dd:8e:2f:e2:c3: f0:b3:9e:6f:73:f8:8a:01:91:9b:82:7e:2f:db:51:3b:0b:f4: 4e:dd:13:f1:d4:35:b1:ea:85:f4:31:1c:91:53:b8:89:f3:87: 9a:fc:07:83:f7:e9:2f:41:b4:5a:00:e0:1d:a3:0d:6c:34:e5: 46:70:04:72:92:d5:6d:2e:ff:2e:f4:75:85:b4:49:f5:ae:84: 03:b7:61:4e:02:d7:48:c8:55:3f:33:8b:c1:2c:82:21:05:f1: f2:61:e3:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7b7T6dAEFIUgmjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NDFkMTc3ZjEtOGRmYS00NGYwLWI5MTEtOTE4ZmQxOGI5ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3OwTT/v5Yt9Z1ffBtEjLSYbcFGonL1fYe6a 4K8EPWgT5ZB60m5q7+m/02lRlcEeHmKM4p+Hqqu8E8GmB5sN8pEZ/0WIEdvmjAWp 6PRaZzdcx1tSUW/KPVi/88JEYUaNyRv7eERhu96fOFdMyBOiF7bPDXyuGncOHl7l 5ro2idZkJsDE6uRLbGKvehswJpyulnZibx0h4D+1/RrrfPlYv9uk2K17Bn+YfG9M hPqsFZ3p/cf8AjnCQTcvx46rZAPKvhRdQFuCAlD3fgU1sIjoDMGOmerkK7xI5CmK uVe2g8EoJDWOFIFrAsqB9VgBpUt6KTH0Xg3eyTZ2b0IX5IKp0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWt/ckIHyQEW+1pJ89a5Rq3j/OSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjQwOTA4YmItNDUxNS0z NGVmLTgwMjAtOGRlMzExYWIxMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx3/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIdsegWWrSLKh2yogVJ7+AhpE51IQYgIRhWUJDBzDY7ZwgMChimMPQP m8fr0UyQHUTe9ylutnJTP1KcUxaK9bPXSS/H7ouOg0U5C3nwWxRHABvIWU5J9lo6 L0o6JYOc8VcnFT0jMupCcky8ahS/ZeV8zqWFoYyn3Hq3Kn3tDRHraEXe5MYiHlL6 butzOvDLGuUlu8DKAwbs7xI4atXdji/iw/Cznm9z+IoBkZuCfi/bUTsL9E7dE/HU NbHqhfQxHJFTuInzh5r8B4P36S9BtFoA4B2jDWw05UZwBHKS1W0u/y70dYW0SfWu hAO3YU4C10jIVT8zi8EsgiEF8fJh400= -----END CERTIFICATE-----Generated at Sun Oct 11 08:45:23 2026 by rpki-client