$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/4708b10c-3648-3373-9acf-3645bce5eb34.roa File: 4708b10c-3648-3373-9acf-3645bce5eb34.roa (raw, json) Hash identifier: zi63cnzJgJ50ee64M/mOJ1HbIdxGs/lRmtEkY4ENNHc= Subject key identifier: 7E:89:DA:C0:8B:0A:FB:D6:C1:05:F5:E0:C6:10:8E:89:1F:45:AD:EF Certificate issuer: /CN=a6cb961c-bbec-4bf2-94ad-a034b3fd3cba Certificate serial: 010D0C9F4328584EE921EF441B060C8E726E2740 Authority key identifier: E0:84:FF:89:3A:B6:40:3A:5C:30:5B:96:93:7C:3A:A7:E3:1E:0B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/4708b10c-3648-3373-9acf-3645bce5eb34.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 40156 IP address blocks: 142.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:ef:44:1b:06:0c:8e:72:6e:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6cb961c-bbec-4bf2-94ad-a034b3fd3cba Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=7b4a7eff-a93b-4715-a90e-0e1a023e937f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:59:3b:87:64:e9:21:6b:19:d7:18:7b:d7: d1:7a:c5:a7:ff:89:38:f2:70:4a:fb:e9:bf:2d:fe: d5:51:3a:e7:65:58:4e:bd:af:21:72:53:8c:ed:49: 6a:3f:48:fd:7d:3c:98:fa:bf:d7:46:16:fe:55:14: 9c:51:1b:cb:bc:e1:74:6c:f7:ac:c2:f9:c2:31:af: 6a:81:73:c6:3a:ff:4b:2e:9e:99:da:06:48:3e:2c: 9d:dc:a5:76:26:79:74:d7:d4:da:9e:e3:58:61:d5: 18:3d:f4:e0:d2:5e:1e:73:e6:14:af:20:1a:2d:8b: 63:22:58:59:fb:47:d4:ae:c0:50:36:3f:68:dd:cb: 42:f1:4b:64:e3:f6:29:ec:aa:be:f2:93:61:a5:22: 2f:c7:c9:06:ec:6b:3d:ec:fb:40:15:4f:a5:f3:5b: 0b:74:69:cf:d0:8b:74:9e:65:f6:4c:52:46:c2:30: 08:ae:1d:9d:93:29:b5:e4:cc:fd:7b:1b:eb:65:9e: 0e:d4:49:48:39:f2:73:f1:2f:30:29:32:be:fb:3d: ee:41:2d:24:b6:26:bd:1d:21:39:26:ab:6c:9f:4e: 1d:98:46:0c:3d:e1:85:6a:75:87:c4:ce:50:3f:07: a7:c7:4a:0b:72:93:57:da:25:7f:ad:ea:3f:5f:ae: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:DA:C0:8B:0A:FB:D6:C1:05:F5:E0:C6:10:8E:89:1F:45:AD:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/4708b10c-3648-3373-9acf-3645bce5eb34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.crl X509v3 Authority Key Identifier: keyid:E0:84:FF:89:3A:B6:40:3A:5C:30:5B:96:93:7C:3A:A7:E3:1E:0B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a6cb961c-bbec-4bf2-94ad-a034b3fd3cba.cer sbgp-ipAddrBlock: critical IPv4: 142.249.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e9:51:70:8c:7f:ad:74:d0:bc:01:64:47:f4:4c:1b:66:ff: 16:c8:a6:d4:60:6a:16:51:ff:d9:ba:c9:e5:3c:a0:ac:90:58: a5:fb:98:e5:bd:c5:83:af:62:0a:69:63:7f:eb:2d:57:62:00: fa:f7:23:38:96:ff:c8:09:64:04:94:29:40:73:80:b8:8e:2a: 4f:ce:95:d3:21:17:78:9a:8e:3e:42:b2:78:39:6f:ca:ed:6d: 72:4c:0f:ac:de:d4:c1:4d:c9:aa:a1:83:fc:fe:90:31:63:64: 79:9c:86:df:17:6b:4b:29:d1:9b:8f:83:7b:a2:22:95:c1:1a: 18:be:01:26:9b:55:95:21:d1:26:f3:3e:d8:f7:ac:cf:18:9d: f4:16:69:50:97:11:98:cc:ca:bb:98:cc:80:c8:d3:bb:ff:13: 1c:f2:90:f3:47:2f:64:9a:e6:41:4e:b7:54:96:7c:ce:6a:4c: 95:d4:3c:98:58:af:0c:77:f7:42:3e:cc:c1:55:c8:1d:47:c3: c9:a8:61:31:21:18:01:34:04:4f:85:bf:b0:ad:fe:11:bf:65: fd:22:19:f4:33:89:83:c5:c8:38:1f:05:a0:09:8b:b7:e5:e8: cf:f5:76:f0:2d:68:62:94:22:90:fd:e3:3e:c3:58:1b:48:a3: 51:81:5c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIe9EGwYMjnJuJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZjYjk2MWMtYmJlYy00YmYyLTk0YWQtYTAzNGIzZmQz Y2JhMB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk N2I0YTdlZmYtYTkzYi00NzE1LWE5MGUtMGUxYTAyM2U5MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPhZO4dk6SFrGdcYe9fResWn/4k48nBK++m/ Lf7VUTrnZVhOva8hclOM7UlqP0j9fTyY+r/XRhb+VRScURvLvOF0bPeswvnCMa9q gXPGOv9LLp6Z2gZIPiyd3KV2Jnl019TanuNYYdUYPfTg0l4ec+YUryAaLYtjIlhZ +0fUrsBQNj9o3ctC8Utk4/Yp7Kq+8pNhpSIvx8kG7Gs97PtAFU+l81sLdGnP0It0 nmX2TFJGwjAIrh2dkym15Mz9exvrZZ4O1ElIOfJz8S8wKTK++z3uQS0ktia9HSE5 Jqtsn04dmEYMPeGFanWHxM5QPwenx0oLcpNX2iV/reo/X64peQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6J2sCLCvvWwQX14MYQjokfRa3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNmNi OTYxYy1iYmVjLTRiZjItOTRhZC1hMDM0YjNmZDNjYmEvNDcwOGIxMGMtMzY0OC0z MzczLTlhY2YtMzY0NWJjZTVlYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTZjYjk2MWMtYmJlYy00YmYyLTk0 YWQtYTAzNGIzZmQzY2JhL2E2Y2I5NjFjLWJiZWMtNGJmMi05NGFkLWEwMzRiM2Zk M2NiYS5jcmwwHwYDVR0jBBgwFoAU4IT/iTq2QDpcMFuWk3w6p+MeC4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNmNiOTYxYy1iYmVjLTRiZjItOTRhZC1hMDM0 YjNmZDNjYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrpUXCMf6100LwBZEf0TBtm/xbIptRgahZR/9m6yeU8oKyQWKX7mOW9 xYOvYgppY3/rLVdiAPr3IziW/8gJZASUKUBzgLiOKk/OldMhF3iajj5Csng5b8rt bXJMD6ze1MFNyaqhg/z+kDFjZHmcht8Xa0sp0ZuPg3uiIpXBGhi+ASabVZUh0Sbz Ptj3rM8YnfQWaVCXEZjMyruYzIDI07v/ExzykPNHL2Sa5kFOt1SWfM5qTJXUPJhY rwx390I+zMFVyB1Hw8moYTEhGAE0BE+Fv7Ct/hG/Zf0iGfQziYPFyDgfBaAJi7fl 6M/1dvAtaGKUIpD94z7DWBtIo1GBXHs= -----END CERTIFICATE-----Generated at Mon Sep 21 17:54:44 2026 by rpki-client