$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4c3f8e0-813e-3d39-8556-5224dfadc63e.roa File: a4c3f8e0-813e-3d39-8556-5224dfadc63e.roa (raw, json) Hash identifier: PlhMvQfLTl0/+jYJewkyXaCcOStIl2JxiYHmhGHrAeY= Subject key identifier: 97:05:A2:67:C7:14:43:73:38:57:52:0A:5C:C9:3A:25:B8:2B:E9:05 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F4972DB5B9264833A739F7590 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4c3f8e0-813e-3d39-8556-5224dfadc63e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 55286 IP address blocks: 192.241.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:db:5b:92:64:83:3a:73:9f:75:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2279646a-c5f9-420a-b451-f258716cc3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:fb:f5:af:42:46:70:43:c6:9e:c8:ab:aa: 81:56:3f:cd:63:7a:b7:8f:55:48:61:4c:1c:53:8b: c7:9f:2c:a1:bd:6b:e4:4b:22:97:53:56:01:ce:3c: 30:89:f3:d5:08:38:d5:d6:1e:32:b0:ce:d4:6b:70: 25:43:49:bd:b3:04:cf:b5:ab:7f:a7:16:d4:a2:bb: e8:de:e4:54:8c:78:9d:78:8a:b4:45:c9:b6:68:7b: ef:00:64:9c:17:07:59:04:15:51:d1:d2:89:7c:74: 76:98:02:c1:95:27:6a:1b:c8:96:7a:ce:48:49:d6: bb:27:a2:ee:0e:82:d3:68:be:5f:ab:44:4d:e6:b2: 4f:a2:f7:64:de:9a:b7:61:ce:67:08:15:82:71:d4: 90:83:29:ea:ed:2d:4f:70:ce:fc:63:23:26:1e:a7: c8:21:79:47:ce:fb:c6:c5:8e:06:44:bf:6b:47:8a: c7:0d:56:ab:c1:61:6f:4f:ef:5b:45:a0:09:b0:3d: 58:46:5b:69:f8:98:8d:70:d3:1d:20:7f:5b:fa:5a: 80:e5:2f:45:ce:e6:61:42:f3:3d:2b:e4:ed:1f:38: 31:5f:a2:70:8b:8f:b9:2d:db:d0:ac:2a:65:f6:a7: f3:34:67:9f:7e:1f:76:45:c7:21:e1:78:db:9b:82: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:05:A2:67:C7:14:43:73:38:57:52:0A:5C:C9:3A:25:B8:2B:E9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4c3f8e0-813e-3d39-8556-5224dfadc63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 192.241.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ee:df:ca:41:99:e9:91:fd:5c:80:a4:52:06:4e:64:42:e2: af:00:f1:8f:fe:79:4d:6b:b8:e6:58:36:66:ed:95:ab:da:20: ae:33:87:2f:d7:8f:c3:7c:d2:09:1c:47:5e:92:18:f1:11:21: a2:aa:d8:e6:8d:f5:63:c7:d3:54:17:0f:a1:fd:98:32:b4:d2: 81:5a:59:2d:46:b2:bb:e5:fc:d9:92:94:a9:5c:28:03:85:2b: 59:e8:1e:73:2c:12:98:97:79:e6:93:f5:04:b5:4e:50:78:85: b6:47:f8:0e:69:ff:88:19:2e:a2:cb:24:c8:20:a1:ec:f2:5e: 7e:1b:a0:28:0b:d4:c8:82:7c:f3:59:7e:91:19:54:70:5e:9b: 77:74:76:42:1b:9a:54:02:4f:ee:70:e9:8f:96:af:e4:d6:b0: 6b:2e:5e:2a:8c:b5:5e:23:54:93:87:ad:32:b5:ca:f6:9d:7e: 45:68:c5:fe:e1:a2:4d:50:95:19:7d:e6:8c:68:b1:92:8d:92: 8e:65:3f:94:87:1d:1e:e1:4a:0e:b4:91:9e:58:95:df:9e:21: 7f:37:cf:9d:ee:2e:b9:31:63:df:bf:9a:7b:c9:a0:bf:62:7d: a7:85:fa:e1:02:dc:5a:e7:91:1c:43:99:f8:a6:01:7d:db:26: 4e:0f:b3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcttbkmSDOnOfdZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjI3OTY0NmEtYzVmOS00MjBhLWI0NTEtZjI1ODcxNmNjM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAref79a9CRnBDxp7Iq6qBVj/NY3q3j1VIYUwc U4vHnyyhvWvkSyKXU1YBzjwwifPVCDjV1h4ysM7Ua3AlQ0m9swTPtat/pxbUorvo 3uRUjHideIq0Rcm2aHvvAGScFwdZBBVR0dKJfHR2mALBlSdqG8iWes5ISda7J6Lu DoLTaL5fq0RN5rJPovdk3pq3Yc5nCBWCcdSQgynq7S1PcM78YyMmHqfIIXlHzvvG xY4GRL9rR4rHDVarwWFvT+9bRaAJsD1YRltp+JiNcNMdIH9b+lqA5S9FzuZhQvM9 K+TtHzgxX6Jwi4+5LdvQrCpl9qfzNGeffh92Rcch4Xjbm4Kh3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcFomfHFENzOFdSClzJOiW4K+kFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYTRjM2Y4ZTAtODEzZS0z ZDM5LTg1NTYtNTIyNGRmYWRjNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPu38pBmemR/VyApFIGTmRC4q8A8Y/+eU1ruOZYNmbtlavaIK4zhy/X j8N80gkcR16SGPERIaKq2OaN9WPH01QXD6H9mDK00oFaWS1Gsrvl/NmSlKlcKAOF K1noHnMsEpiXeeaT9QS1TlB4hbZH+A5p/4gZLqLLJMggoezyXn4boCgL1MiCfPNZ fpEZVHBem3d0dkIbmlQCT+5w6Y+Wr+TWsGsuXiqMtV4jVJOHrTK1yvadfkVoxf7h ok1QlRl95oxosZKNko5lP5SHHR7hSg60kZ5Yld+eIX83z53uLrkxY9+/mnvJoL9i faeF+uEC3FrnkRxDmfimAX3bJk4PsxE= -----END CERTIFICATE-----Generated at Fri Sep 25 09:39:36 2026 by rpki-client