$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/9e230ce3-f135-30bd-afae-e5573bdd8ce6.roa File: 9e230ce3-f135-30bd-afae-e5573bdd8ce6.roa (raw, json) Hash identifier: KbWjMdCF9UBK4ZhdXSnk4vzsKnlvq3n4nMkXVJ3PIKI= Subject key identifier: 0A:C7:85:FB:62:E8:CF:80:7F:8D:7D:36:C1:D0:A3:E0:17:27:CC:3D Certificate issuer: /CN=04c04f07-088c-4aa8-8ea2-3e691397960e Certificate serial: 010D0C9F4328584F0C078429962C4F5D18471080 Authority key identifier: 6F:73:AE:AB:86:C7:4D:95:5A:75:3E:33:A2:07:3F:AA:0C:CB:82:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/9e230ce3-f135-30bd-afae-e5573bdd8ce6.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 22742 IP address blocks: 142.249.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:84:29:96:2c:4f:5d:18:47:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c04f07-088c-4aa8-8ea2-3e691397960e Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=1c812b3c-e7cb-42b6-bf53-20f3908071b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:df:8a:e4:0b:df:08:25:32:33:63:10:41: c2:73:1b:dd:02:2b:45:cc:bf:00:5d:2d:1d:95:a2: 55:8a:65:36:cb:b6:e1:6a:d0:59:b6:47:64:cc:3e: 28:25:ba:b6:8e:4a:24:77:0f:8b:00:4e:05:a2:de: 06:41:33:23:e7:05:b2:d0:a4:8c:1e:61:c9:ad:f5: f2:79:df:7a:1c:28:47:9f:ea:e5:b6:96:3f:42:22: 0b:20:ae:bb:9e:5d:18:fb:01:ad:41:b2:a6:58:7d: cb:db:ee:71:74:8c:0e:5c:fa:47:b8:44:8d:d8:ea: 16:a6:e7:05:c6:ed:54:77:44:40:c9:c4:9d:f2:29: 3f:c8:8d:03:78:9d:fe:ae:f0:de:f1:7b:08:ac:46: 62:1d:b1:e4:cf:45:41:05:2d:e8:3f:27:53:cc:69: e0:6d:55:25:9b:5f:57:d2:82:6a:9f:16:b5:d1:0c: 6a:a9:b7:8c:48:2b:14:35:b4:be:0e:13:51:63:8f: 4d:e4:98:71:60:3c:79:4e:8a:fa:ed:a5:5b:c4:17: ba:75:a1:95:aa:90:68:1e:d2:85:36:14:19:65:81: 74:a4:24:a0:94:42:d9:d7:92:95:90:44:a5:42:69: 18:c4:e8:3a:c7:d7:13:c0:5d:93:d7:b1:78:cb:bc: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C7:85:FB:62:E8:CF:80:7F:8D:7D:36:C1:D0:A3:E0:17:27:CC:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/9e230ce3-f135-30bd-afae-e5573bdd8ce6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.crl X509v3 Authority Key Identifier: keyid:6F:73:AE:AB:86:C7:4D:95:5A:75:3E:33:A2:07:3F:AA:0C:CB:82:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e.cer sbgp-ipAddrBlock: critical IPv4: 142.249.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:41:70:61:85:bf:36:ad:02:3f:71:5f:5b:ea:ce:8f:6e:9d: b9:1b:b3:c0:38:df:b5:46:df:0a:1c:65:ca:7d:15:2d:b7:94: 3b:54:91:44:1e:50:f9:a8:d8:8b:59:2b:81:7c:5f:8a:6e:77: b3:14:6a:59:91:90:f4:e7:8f:68:92:a5:6c:22:8d:97:b1:73: 65:eb:3e:3e:1e:52:7b:a1:0c:d4:64:1c:13:73:cb:2b:57:0e: 99:d0:e4:48:92:75:63:e0:15:04:cb:85:96:66:b8:8a:05:0c: 34:cb:c7:50:d2:be:fd:1e:bc:d4:ba:44:eb:fe:bb:b3:5d:13: 1c:92:77:cd:90:f2:5c:2e:bf:f0:1f:6d:83:90:2d:0d:51:48: c2:0b:15:af:73:93:92:b4:94:8d:3d:19:e9:94:c6:00:78:d3: 61:47:ad:86:2b:63:98:03:6d:b9:d9:b6:eb:2a:70:e0:fe:96: cd:19:75:4a:da:e0:df:a5:e7:22:9b:32:fb:20:52:bd:55:58: 68:f5:1c:23:7c:3c:79:a0:26:32:15:2b:d5:18:a9:3b:dd:c1: 04:48:7c:fc:b1:aa:04:4e:8e:54:3a:22:2b:85:66:f3:2e:3c: 4c:4a:1d:c4:16:f2:16:be:94:9a:1a:b6:ea:f4:87:fd:0b:30: f4:d9:bd:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4QplixPXRhHEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMDRmMDctMDg4Yy00YWE4LThlYTItM2U2OTEzOTc5 NjBlMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk MWM4MTJiM2MtZTdjYi00MmI2LWJmNTMtMjBmMzkwODA3MWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+nfiuQL3wglMjNjEEHCcxvdAitFzL8AXS0d laJVimU2y7bhatBZtkdkzD4oJbq2jkokdw+LAE4Fot4GQTMj5wWy0KSMHmHJrfXy ed96HChHn+rltpY/QiILIK67nl0Y+wGtQbKmWH3L2+5xdIwOXPpHuESN2OoWpucF xu1Ud0RAycSd8ik/yI0DeJ3+rvDe8XsIrEZiHbHkz0VBBS3oPydTzGngbVUlm19X 0oJqnxa10QxqqbeMSCsUNbS+DhNRY49N5JhxYDx5Tor67aVbxBe6daGVqpBoHtKF NhQZZYF0pCSglELZ15KVkESlQmkYxOg6x9cTwF2T17F4y7wG6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArHhfti6M+Af419NsHQo+AXJ8w9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNGMw NGYwNy0wODhjLTRhYTgtOGVhMi0zZTY5MTM5Nzk2MGUvOWUyMzBjZTMtZjEzNS0z MGJkLWFmYWUtZTU1NzNiZGQ4Y2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDRjMDRmMDctMDg4Yy00YWE4LThl YTItM2U2OTEzOTc5NjBlLzA0YzA0ZjA3LTA4OGMtNGFhOC04ZWEyLTNlNjkxMzk3 OTYwZS5jcmwwHwYDVR0jBBgwFoAUb3Ouq4bHTZVadT4zogc/qgzLgt0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNGMwNGYwNy0wODhjLTRhYTgtOGVhMi0zZTY5 MTM5Nzk2MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvm/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlBcGGFvzatAj9xX1vqzo9unbkbs8A437VG3wocZcp9FS23lDtUkUQe UPmo2ItZK4F8X4pud7MUalmRkPTnj2iSpWwijZexc2XrPj4eUnuhDNRkHBNzyytX DpnQ5EiSdWPgFQTLhZZmuIoFDDTLx1DSvv0evNS6ROv+u7NdExySd82Q8lwuv/Af bYOQLQ1RSMILFa9zk5K0lI09GemUxgB402FHrYYrY5gDbbnZtusqcOD+ls0ZdUra 4N+l5yKbMvsgUr1VWGj1HCN8PHmgJjIVK9UYqTvdwQRIfPyxqgROjlQ6IiuFZvMu PExKHcQW8ha+lJoatur0h/0LMPTZvVo= -----END CERTIFICATE-----Generated at Sat Sep 26 07:22:33 2026 by rpki-client