$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa File: e29fdbab-728b-37f3-b45b-55800fd076b4.roa (raw, json) Hash identifier: n3i7C4sxs+3m7WeA79br/ms0xLW8UEf04k+000HsGN4= Subject key identifier: 9B:43:98:A5:63:79:CE:7A:0D:AB:1C:C3:C2:C3:4B:94:EF:A5:B7:EB Certificate issuer: /CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Certificate serial: 010D0C9F4328584F4F07F3E0CBBB6F2BB65B9000 Authority key identifier: AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 63050 IP address blocks: 192.245.140.0/24 maxlen: 32 198.147.156.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:07:f3:e0:cb:bb:6f:2b:b6:5b:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5a2b1c-9ad3-4496-bcfc-322974accd32 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=0961ef68-d09f-4901-83e8-3a702c54522e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:39:c6:72:fa:2c:18:31:ff:d2:21:f1:97: cd:19:30:5f:92:f2:f2:e8:cb:c1:8c:6b:fd:9f:f6: 38:a1:0f:c7:eb:0b:a2:01:64:5e:89:48:65:f4:54: 39:69:73:f0:39:66:16:ef:7d:9e:39:4a:7c:df:1d: f2:41:50:d0:f9:02:c4:86:8c:71:da:a1:42:c4:c9: 41:29:17:c2:4d:1f:24:42:ba:73:4a:cb:7c:2f:0d: a8:46:23:91:f5:3f:29:8b:fe:97:5a:fc:e3:b6:d9: 74:b7:47:9b:b6:0b:94:b9:34:6a:7e:16:13:95:49: 92:78:01:a0:fa:1b:69:30:22:2c:e3:b7:70:d4:29: e5:35:5f:d6:0e:33:ea:ed:51:ca:2a:87:63:b0:42: b2:be:f8:04:3d:a2:ce:a1:32:03:cb:97:ac:8d:ec: b1:52:bc:39:1d:75:d9:fa:db:1b:2d:33:d8:ab:8f: 42:e7:3b:4d:e4:1f:a5:89:e0:c1:5b:82:72:59:85: da:72:0c:02:bc:95:c3:cb:66:03:21:64:04:81:05: a0:41:92:7f:86:24:ad:58:50:e5:09:34:3f:b2:51: b9:62:ac:77:c8:ea:97:79:50:e5:97:f8:99:d6:6f: 2d:7b:8e:74:46:51:18:b9:e9:40:30:b3:58:06:93: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:43:98:A5:63:79:CE:7A:0D:AB:1C:C3:C2:C3:4B:94:EF:A5:B7:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/e29fdbab-728b-37f3-b45b-55800fd076b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32/3a5a2b1c-9ad3-4496-bcfc-322974accd32.crl X509v3 Authority Key Identifier: keyid:AB:91:FD:48:33:7A:6B:BE:B1:AF:AF:D2:D3:CC:BA:B7:9B:16:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a5a2b1c-9ad3-4496-bcfc-322974accd32.cer sbgp-ipAddrBlock: critical IPv4: 192.245.140.0/24 198.147.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:55:ee:0c:b0:8e:d3:4e:e1:b8:60:c0:45:bc:2b:e8:87:c4: 94:2d:53:b0:df:17:bc:4e:ba:87:21:e0:1b:51:6a:c2:53:ff: 25:04:ce:ca:fc:6c:60:19:4f:d2:da:c9:5f:92:ad:89:b0:c9: 84:d7:2c:c0:66:e1:e8:0f:a3:7d:b5:4c:57:b6:c0:16:64:e6: 0f:41:8d:5e:19:66:27:09:a2:6f:3e:c1:36:b0:1b:f6:9b:93: 1e:3c:13:63:4e:b6:fa:a3:5a:38:48:41:9f:db:ab:15:60:88: d7:d9:5a:a7:8c:e5:52:b3:fa:d5:fc:53:7e:17:db:c2:3b:49: 43:20:a1:fa:5d:54:5b:1e:64:70:fb:56:ac:f5:3e:33:b6:b3: d4:cb:19:c4:e4:f8:55:c7:2f:e4:b1:39:88:97:e9:c9:6c:4c: 25:31:92:0c:95:20:78:ae:97:fd:c1:bc:8d:cb:38:80:df:c5: 71:45:dc:c5:8c:5b:45:0f:cb:7e:e9:3d:79:95:c7:dd:08:6a: 2c:29:dc:c0:95:3e:76:e8:9b:e4:1e:71:d3:be:a0:a3:ce:ec: 2c:98:e1:5b:49:30:80:cd:90:b3:bf:07:79:9d:59:30:ca:f2: 90:e9:6a:85:7d:f9:b9:39:99:7b:8a:ec:1f:bd:65:75:79:a3: dc:9c:2e:09 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9PB/Pgy7tvK7ZbkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E1YTJiMWMtOWFkMy00NDk2LWJjZmMtMzIyOTc0YWNj ZDMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MDk2MWVmNjgtZDA5Zi00OTAxLTgzZTgtM2E3MDJjNTQ1MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnos5xnL6LBgx/9Ih8ZfNGTBfkvLy6MvBjGv9 n/Y4oQ/H6wuiAWReiUhl9FQ5aXPwOWYW732eOUp83x3yQVDQ+QLEhoxx2qFCxMlB KRfCTR8kQrpzSst8Lw2oRiOR9T8pi/6XWvzjttl0t0ebtguUuTRqfhYTlUmSeAGg +htpMCIs47dw1CnlNV/WDjPq7VHKKodjsEKyvvgEPaLOoTIDy5esjeyxUrw5HXXZ +tsbLTPYq49C5ztN5B+lieDBW4JyWYXacgwCvJXDy2YDIWQEgQWgQZJ/hiStWFDl CTQ/slG5Yqx3yOqXeVDll/iZ1m8te450RlEYuelAMLNYBpNhvQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJtDmKVjec56Dascw8LDS5TvpbfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVh MmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5NzRhY2NkMzIvZTI5ZmRiYWItNzI4Yi0z N2YzLWI0NWItNTU4MDBmZDA3NmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E1YTJiMWMtOWFkMy00NDk2LWJj ZmMtMzIyOTc0YWNjZDMyLzNhNWEyYjFjLTlhZDMtNDQ5Ni1iY2ZjLTMyMjk3NGFj Y2QzMi5jcmwwHwYDVR0jBBgwFoAUq5H9SDN6a76xr6/S08y6t5sWNyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTVhMmIxYy05YWQzLTQ0OTYtYmNmYy0zMjI5 NzRhY2NkMzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwPWMAwQA xpOcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF9V7gywjtNO4bhgwEW8K+iHxJQtU7DfF7xOuoch4BtRasJT /yUEzsr8bGAZT9LayV+SrYmwyYTXLMBm4egPo321TFe2wBZk5g9BjV4ZZicJom8+ wTawG/abkx48E2NOtvqjWjhIQZ/bqxVgiNfZWqeM5VKz+tX8U34X28I7SUMgofpd VFseZHD7Vqz1PjO2s9TLGcTk+FXHL+SxOYiX6clsTCUxkgyVIHiul/3BvI3LOIDf xXFF3MWMW0UPy37pPXmVx90Iaiwp3MCVPnbom+QecdO+oKPO7CyY4VtJMIDNkLO/ B3mdWTDK8pDpaoV9+bk5mXuK7B+9ZXV5o9ycLgk= -----END CERTIFICATE-----Generated at Sat Oct 3 15:08:06 2026 by rpki-client