$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/3e366157-b714-38c2-9160-1c37472720a7.roa File: 3e366157-b714-38c2-9160-1c37472720a7.roa (raw, json) Hash identifier: ftY9Wa4L6DQb4nyUtMsldhZlWimdh8QqH4kqh5xgdr4= Subject key identifier: 76:2A:2E:4C:A2:CA:F3:8E:FF:75:27:89:E6:27:5B:FF:7A:06:68:95 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584F331D2090E461BC400A1F6E80 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/3e366157-b714-38c2-9160-1c37472720a7.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 395222 IP address blocks: 142.249.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:20:90:e4:61:bc:40:0a:1f:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=904857df-6630-40a8-aca4-6187421f8d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:bc:e7:3f:dd:ab:dd:f8:bc:f0:86:19:34: c4:4b:6d:ad:03:31:20:19:1a:32:5f:e2:13:68:28: 68:28:49:55:a6:d2:7b:35:d1:91:de:aa:36:e1:3d: 0f:a8:4b:69:d0:7b:5c:a1:1f:15:84:15:2b:02:9a: 44:a2:b6:d9:a5:0d:54:bd:f1:8b:fc:c8:14:52:04: 9c:f1:03:d7:1f:0c:0a:4e:ce:47:d9:4d:40:72:98: 13:3c:89:51:d0:81:98:5a:ed:c1:55:cf:f2:3b:ff: 01:36:c7:9a:85:5f:af:06:76:c9:94:b2:a8:9b:3c: 6b:b1:05:9f:46:27:0c:51:98:dd:a0:85:b9:b1:45: c7:c1:5c:f2:64:3f:28:1e:d0:47:bd:7d:70:ca:22: d9:54:bb:d4:b5:d2:29:6e:82:6f:86:6f:98:0e:b8: 3c:7b:ca:91:f3:0b:e4:59:19:47:35:12:80:44:34: fc:73:eb:98:9f:c9:31:b1:54:1c:c5:53:f0:5c:e0: 7f:e4:93:16:ee:b9:bb:d6:69:4b:5e:99:87:42:d1: 19:42:01:a1:04:34:f0:ef:63:ac:b2:69:b7:8a:c0: 12:bb:b7:53:b3:2b:50:65:f6:10:bd:eb:cd:7c:09: 81:8c:c7:81:ed:7a:64:ce:8c:2b:b3:1d:37:c5:cc: ed:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2A:2E:4C:A2:CA:F3:8E:FF:75:27:89:E6:27:5B:FF:7A:06:68:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/3e366157-b714-38c2-9160-1c37472720a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 142.249.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ce:7f:f5:d4:46:25:1c:45:f8:4b:86:09:28:8b:9e:63:c7: 44:8e:91:7e:15:5f:51:37:dc:36:34:4a:92:82:c9:77:3e:bf: 7c:1b:8c:09:d1:40:a6:5f:2a:fa:6c:c4:f2:72:f3:5c:79:f1: 92:84:c6:b6:6c:e5:68:0f:e1:17:2c:60:a6:1b:4b:55:73:90: b0:59:c1:06:d4:e1:f2:cf:ba:d3:7b:c3:0a:b3:42:6c:56:ec: c0:9a:60:6c:8e:94:49:90:da:1d:eb:57:7d:a0:c1:85:f7:d3: a1:f5:c1:10:c8:c3:b8:2b:30:9d:98:44:8d:12:55:2f:f9:eb: f4:e9:77:d3:dd:29:f2:41:3e:09:c9:ba:15:6c:9e:57:3c:7e: 53:0b:10:31:45:db:d2:33:35:ce:d8:85:d0:3f:d1:f5:a4:d8: 34:33:ca:22:e3:b7:bb:b6:59:83:ab:01:5e:a0:94:40:eb:3d: 55:6d:51:10:ce:0a:4c:73:49:eb:06:9c:ff:d7:6e:50:7d:ba: 95:95:37:b9:ff:d7:35:06:2c:aa:12:12:90:e2:1d:aa:f4:10: 32:9c:32:b9:09:f8:b5:64:c7:28:d9:ae:a7:eb:be:78:18:a4: d5:d5:de:63:04:20:d7:8b:98:25:15:1a:1d:5b:96:ae:05:46: 01:22:ab:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSCQ5GG8QAofboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk OTA0ODU3ZGYtNjYzMC00MGE4LWFjYTQtNjE4NzQyMWY4ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVC85z/dq934vPCGGTTES22tAzEgGRoyX+IT aChoKElVptJ7NdGR3qo24T0PqEtp0HtcoR8VhBUrAppEorbZpQ1UvfGL/MgUUgSc 8QPXHwwKTs5H2U1AcpgTPIlR0IGYWu3BVc/yO/8BNseahV+vBnbJlLKomzxrsQWf RicMUZjdoIW5sUXHwVzyZD8oHtBHvX1wyiLZVLvUtdIpboJvhm+YDrg8e8qR8wvk WRlHNRKARDT8c+uYn8kxsVQcxVPwXOB/5JMW7rm71mlLXpmHQtEZQgGhBDTw72Os smm3isASu7dTsytQZfYQvevNfAmBjMeB7Xpkzowrsx03xcztvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYqLkyiyvOO/3UnieYnW/96BmiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvM2UzNjYxNTctYjcxNC0z OGMyLTkxNjAtMWMzNzQ3MjcyMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXOf/XURiUcRfhLhgkoi55jx0SOkX4VX1E33DY0SpKCyXc+v3wbjAnR QKZfKvpsxPJy81x58ZKExrZs5WgP4RcsYKYbS1VzkLBZwQbU4fLPutN7wwqzQmxW 7MCaYGyOlEmQ2h3rV32gwYX306H1wRDIw7grMJ2YRI0SVS/56/Tpd9PdKfJBPgnJ uhVsnlc8flMLEDFF29IzNc7YhdA/0fWk2DQzyiLjt7u2WYOrAV6glEDrPVVtURDO CkxzSesGnP/XblB9upWVN7n/1zUGLKoSEpDiHar0EDKcMrkJ+LVkxyjZrqfrvngY pNXV3mMEINeLmCUVGh1blq4FRgEiq9U= -----END CERTIFICATE-----Generated at Sun Sep 27 02:45:47 2026 by rpki-client