$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/3e8733c1-a2e2-3edd-b8f2-070a2d598f1f.roa File: 3e8733c1-a2e2-3edd-b8f2-070a2d598f1f.roa (raw, json) Hash identifier: vqDY6rMUdml7b6Kxp5X94ZQZXYMW5Kzx7/ArQX54Nzo= Subject key identifier: FD:33:91:40:6F:62:1C:BE:59:77:39:4C:21:8B:25:66:C6:5C:04:AE Certificate issuer: /CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Certificate serial: 010D0C9F4328584F480D647AFFD1E21E800F1400 Authority key identifier: 96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/3e8733c1-a2e2-3edd-b8f2-070a2d598f1f.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 36038 IP address blocks: 142.249.21.0/24 maxlen: 24 142.249.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:64:7a:ff:d1:e2:1e:80:0f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20b951e-7538-41fb-97d2-2dd9393d3541 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=af080111-2186-4245-918d-f2d49c8de234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:f2:d1:c8:2a:29:bf:dc:26:21:d0:b8:95: fa:6f:1e:9c:ae:b6:d6:04:75:9c:20:88:77:8c:cf: 0a:8d:67:f9:a1:2d:02:f9:35:cd:56:03:13:29:ae: 7f:6d:a2:54:64:96:16:4d:97:80:db:1e:dc:bf:17: c6:2e:dc:c3:91:d0:2d:c0:d3:cd:50:40:e5:49:f5: 73:e6:9d:05:d9:c9:f5:ad:f2:f8:8e:6a:19:56:be: 98:30:f6:35:f1:1b:45:64:e7:2e:f1:0b:4d:61:5b: af:aa:b7:0a:2b:d1:8b:13:53:ca:bd:f3:73:8c:64: c9:de:16:4a:2a:9c:d6:87:da:6f:97:61:b6:d5:15: 3d:25:c8:00:66:0f:db:25:f3:96:5c:05:85:a0:b5: 31:95:6b:d3:68:64:43:82:43:25:c9:93:11:fb:62: ac:66:50:05:b0:7e:62:9c:c3:bf:47:74:1e:12:aa: 66:41:8e:5f:a0:84:e9:89:24:ab:ab:3b:17:eb:af: be:76:44:64:8a:2a:73:33:a3:3f:a5:eb:21:fd:b0: 8a:ce:04:f9:c9:39:14:7f:87:ef:7a:78:ed:0e:01: ef:85:0f:c2:8e:4e:37:27:d1:16:7b:04:9f:f0:73: 8d:25:51:fc:42:93:e2:42:49:19:8e:37:a1:cb:7f: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:33:91:40:6F:62:1C:BE:59:77:39:4C:21:8B:25:66:C6:5C:04:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/3e8733c1-a2e2-3edd-b8f2-070a2d598f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541/a20b951e-7538-41fb-97d2-2dd9393d3541.crl X509v3 Authority Key Identifier: keyid:96:27:65:3E:C6:BD:84:56:0E:B6:57:26:94:51:C8:51:03:03:D8:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a20b951e-7538-41fb-97d2-2dd9393d3541.cer sbgp-ipAddrBlock: critical IPv4: 142.249.21.0-142.249.22.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:3e:d2:c0:8d:5a:2e:2c:ad:0e:e5:9b:e6:50:ea:b0:c0:c1: 71:f8:e5:b5:35:cc:5f:9b:8c:2e:6f:08:41:dd:9c:eb:47:96: f0:6e:0b:8d:02:97:e8:e2:fb:93:25:72:94:33:2c:79:38:3e: a3:6d:8a:b1:29:24:0f:55:43:77:bb:e2:77:75:05:f2:99:a9: 1e:f0:4c:2d:f9:2e:00:2e:84:b3:50:ef:5f:d3:e2:e1:7a:2a: 55:41:e8:8e:48:db:6e:3f:64:d2:ec:78:e3:43:5a:98:84:4e: b7:41:5e:a6:a3:98:52:c8:b4:19:8c:ef:7b:f7:27:f9:87:a2: fa:d6:06:0f:a9:29:a7:e0:c2:de:da:c3:bc:a0:a9:fe:ae:8c: 06:fe:ff:1f:d1:c2:bc:82:8e:b7:9b:ad:53:a8:2a:a3:5e:6c: 66:91:a6:3d:c5:ca:a9:f1:4d:29:8f:4a:10:d2:91:3e:f5:bb: 2f:1c:94:15:00:f4:c9:ed:73:ad:e9:1a:c9:65:03:da:25:d3: ec:b6:6d:fb:9f:67:e5:8d:36:9c:6d:87:98:62:e9:44:0e:85: bd:81:4e:9a:ca:96:c1:12:2e:cb:67:2a:c8:ba:ba:29:4b:79: 42:82:c8:69:9a:f4:c8:ac:31:ae:63:83:d4:c5:45:4a:00:65: c7:b6:a2:43 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9IDWR6/9HiHoAPFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwYjk1MWUtNzUzOC00MWZiLTk3ZDItMmRkOTM5M2Qz NTQxMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YWYwODAxMTEtMjE4Ni00MjQ1LTkxOGQtZjJkNDljOGRlMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxby0cgqKb/cJiHQuJX6bx6crrbWBHWcIIh3 jM8KjWf5oS0C+TXNVgMTKa5/baJUZJYWTZeA2x7cvxfGLtzDkdAtwNPNUEDlSfVz 5p0F2cn1rfL4jmoZVr6YMPY18RtFZOcu8QtNYVuvqrcKK9GLE1PKvfNzjGTJ3hZK KpzWh9pvl2G21RU9JcgAZg/bJfOWXAWFoLUxlWvTaGRDgkMlyZMR+2KsZlAFsH5i nMO/R3QeEqpmQY5foITpiSSrqzsX66++dkRkiipzM6M/pesh/bCKzgT5yTkUf4fv enjtDgHvhQ/Cjk43J9EWewSf8HONJVH8QpPiQkkZjjehy38swwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP0zkUBvYhy+WXc5TCGLJWbGXASuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBi OTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5MzkzZDM1NDEvM2U4NzMzYzEtYTJlMi0z ZWRkLWI4ZjItMDcwYTJkNTk4ZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTIwYjk1MWUtNzUzOC00MWZiLTk3 ZDItMmRkOTM5M2QzNTQxL2EyMGI5NTFlLTc1MzgtNDFmYi05N2QyLTJkZDkzOTNk MzU0MS5jcmwwHwYDVR0jBBgwFoAUlidlPsa9hFYOtlcmlFHIUQMD2IgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMjBiOTUxZS03NTM4LTQxZmItOTdkMi0yZGQ5 MzkzZDM1NDEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACO+RUD BACO+RYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAAz7SwI1aLiytDuWb5lDqsMDBcfjltTXMX5uMLm8IQd2c 60eW8G4LjQKX6OL7kyVylDMseTg+o22KsSkkD1VDd7vid3UF8pmpHvBMLfkuAC6E s1DvX9Pi4XoqVUHojkjbbj9k0ux440NamIROt0FepqOYUsi0GYzve/cn+Yei+tYG D6kpp+DC3trDvKCp/q6MBv7/H9HCvIKOt5utU6gqo15sZpGmPcXKqfFNKY9KENKR PvW7LxyUFQD0ye1zrekayWUD2iXT7LZt+59n5Y02nG2HmGLpRA6FvYFOmsqWwRIu y2cqyLq6KUt5QoLIaZr0yKwxrmOD1MVFSgBlx7aiQw== -----END CERTIFICATE-----Generated at Tue Sep 29 23:57:14 2026 by rpki-client