$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d0af2b2-6479-30c8-a58c-88ed2639105e.roa File: 8d0af2b2-6479-30c8-a58c-88ed2639105e.roa (raw, json) Hash identifier: VNtlwCJlo6o/rTLdVy6EzKRCrizNwYZYpiSOk4g1YF4= Subject key identifier: 3A:A9:C2:61:94:C6:C9:A3:B6:AC:0A:AA:C4:E8:22:43:89:32:46:17 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F58CD5D3DD466DAA23BC18860 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d0af2b2-6479-30c8-a58c-88ed2639105e.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 62240 IP address blocks: 142.252.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:5d:3d:d4:66:da:a2:3b:c1:88:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=85d66a59-55a7-4112-b08a-47fabc2b2460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:16:9b:e0:f6:33:53:bb:ec:03:62:99:2d: 1c:ac:d6:70:c6:17:1b:fa:6e:c9:dc:c0:bf:d0:b4: 13:89:34:a9:30:36:66:b0:0c:4e:fc:56:0a:04:83: ee:07:f4:28:d3:2a:aa:4d:ad:52:f2:f4:8a:1e:b6: bf:6f:45:12:c8:bb:43:61:a4:d5:70:d0:df:00:db: 2e:ce:8b:f2:5d:1e:52:8f:91:8a:35:1c:61:8a:fc: a2:ae:b2:b1:5a:aa:8b:51:89:3d:b9:09:81:b7:27: 4f:d7:8c:ef:d0:00:6b:7a:c2:d3:d1:d6:88:c5:de: 4e:45:35:1e:95:84:01:20:f3:60:a7:15:75:ee:0a: 1b:19:3d:32:46:8d:e7:d2:ba:87:00:35:a4:16:c0: 64:4f:21:13:0b:2a:02:f2:a9:d8:44:51:fa:05:82: b1:c8:5f:b0:79:34:60:93:11:70:b4:ef:98:d6:d1: 6b:e7:0c:18:bc:d7:1f:85:20:94:f2:d0:82:b1:7d: 56:2e:a4:ee:ef:2b:2a:5f:5d:d7:21:2f:87:dd:db: b3:cb:3e:cb:c0:ff:0a:e6:8c:80:29:fb:27:ff:b7: 7a:94:2f:09:33:b0:19:9e:80:06:43:e1:cf:7e:62: bc:5b:97:00:cd:7e:d3:cf:32:88:5e:1b:04:83:c8: 56:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A9:C2:61:94:C6:C9:A3:B6:AC:0A:AA:C4:E8:22:43:89:32:46:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8d0af2b2-6479-30c8-a58c-88ed2639105e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 142.252.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7d:b7:9a:c7:8c:c6:ed:8a:49:34:89:07:f4:d3:18:2a:45: 23:02:e9:45:6e:e9:4d:d5:d4:26:ac:5e:17:9d:7d:4c:99:65: 03:2a:26:dc:35:56:72:82:9a:9d:c6:57:08:e0:4f:5c:37:38: e1:e0:66:cd:1c:6a:3c:6d:e7:d0:06:87:24:6f:df:cb:28:cd: 60:42:9a:8c:cd:1e:06:6a:18:1e:c2:fb:8c:61:b2:68:75:54: 0b:5c:a6:52:2b:f3:ef:93:9b:58:a0:05:7b:52:f1:04:f1:bd: 6b:00:29:54:a3:70:26:f3:de:7c:18:f6:87:30:cd:7e:61:74: 69:32:01:52:2e:d7:8f:01:78:69:e1:91:18:c7:f3:37:40:06: 7c:37:e9:83:0f:f7:59:40:09:f9:4e:9a:52:c7:87:b2:ea:87: 82:df:46:84:04:f4:5c:75:7d:a7:58:62:7c:0c:d0:d3:41:f3: 41:bf:91:1b:75:da:1e:ce:1f:d2:8b:59:90:b3:70:1e:6b:51: 57:7d:9e:f6:61:fe:f5:ac:1d:18:c2:9d:58:40:17:0a:7d:94: 87:83:e5:ac:fb:3e:5f:20:99:a6:03:7d:18:6c:c0:14:93:d4: c5:ae:7d:c4:ce:eb:85:ff:ae:af:a3:7d:44:ab:e4:f5:2e:fd: 48:ef:d2:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzV091GbaojvBiGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ODVkNjZhNTktNTVhNy00MTEyLWIwOGEtNDdmYWJjMmIyNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkywWm+D2M1O77ANimS0crNZwxhcb+m7J3MC/ 0LQTiTSpMDZmsAxO/FYKBIPuB/Qo0yqqTa1S8vSKHra/b0USyLtDYaTVcNDfANsu zovyXR5Sj5GKNRxhivyirrKxWqqLUYk9uQmBtydP14zv0ABresLT0daIxd5ORTUe lYQBIPNgpxV17gobGT0yRo3n0rqHADWkFsBkTyETCyoC8qnYRFH6BYKxyF+weTRg kxFwtO+Y1tFr5wwYvNcfhSCU8tCCsX1WLqTu7ysqX13XIS+H3duzyz7LwP8K5oyA Kfsn/7d6lC8JM7AZnoAGQ+HPfmK8W5cAzX7TzzKIXhsEg8hWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqpwmGUxsmjtqwKqsToIkOJMkYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGQwYWYyYjItNjQ3OS0z MGM4LWE1OGMtODhlZDI2MzkxMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvz0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB9t5rHjMbtikk0iQf00xgqRSMC6UVu6U3V1CasXhedfUyZZQMqJtw1 VnKCmp3GVwjgT1w3OOHgZs0cajxt59AGhyRv38sozWBCmozNHgZqGB7C+4xhsmh1 VAtcplIr8++Tm1igBXtS8QTxvWsAKVSjcCbz3nwY9ocwzX5hdGkyAVIu148BeGnh kRjH8zdABnw36YMP91lACflOmlLHh7Lqh4LfRoQE9Fx1fadYYnwM0NNB80G/kRt1 2h7OH9KLWZCzcB5rUVd9nvZh/vWsHRjCnVhAFwp9lIeD5az7Pl8gmaYDfRhswBST 1MWufcTO64X/rq+jfUSr5PUu/Ujv0gY= -----END CERTIFICATE-----Generated at Fri Oct 9 21:45:38 2026 by rpki-client